Digital Trust Monitor

Privacy Policy

Version 2026-09-25 — operated by Cogitara, contactable at 9 Woodhaven Wood Drive, The Woodlands, TX 77380.

Digital Trust Monitor ("the service") monitors a customer's own domain for website availability, email authentication, and basic security hygiene issues, and emails/texts the customer's designated contacts when something changes. This page describes what data that requires collecting, and what happens to it.

What we collect

  • Account information: your email address and sign-in method (Google, Microsoft, or email/password), via Firebase Authentication.
  • Contact information you give us directly: the business and technical contact email addresses (and phone numbers, if SMS alerts are enabled) you provide when signing up or in account settings.
  • Billing information: handled entirely by Stripe -- we never see or store your card number. We keep your Stripe customer and subscription IDs, plan, and billing dates.
  • Information about your domain that is already public: your domain's DNS records (nameservers, mail server records, SPF/DKIM/DMARC/MTA-STS TXT records), whether your mail server's IP address appears on a public spam blacklist, and the security-relevant HTTP response headers your website's homepage sends. All of this is the same information any visitor or DNS query already receives publicly -- we don't access anything private or authenticate to your systems.
  • We do not collect: your card number (Stripe handles this directly), analytics about your website's visitors, or any content from your website beyond its public homepage response.

Cookies

The app sets a single essential session cookie (named __session) to keep you signed in. It contains no tracking or advertising data, and there is no way to use the service without it.

How we use it

Solely to run the monitoring checks described above, bill your subscription, and notify your designated contacts when a check's result changes. We do not use your information for any purpose beyond this service (no marketing lists, no sale or sharing for advertising).

Who we share it with

Running this service requires sending limited data to the following service providers, each acting only on our instructions:

  • Stripe — processes your payment and stores your billing details.
  • Google Cloud / Firebase — hosts the application, your account, and your data.
  • Microsoft — if you sign in with a Microsoft account.
  • Postmark — sends alert/report emails to your contacts.
  • Twilio — sends alert text messages, only if SMS alerts are enabled for your account.
  • Better Stack — polls your website's public URL to check uptime, SSL certificate expiry, and domain registration expiry.
  • Google Safe Browsing — checks your website's public homepage URL against Google's malware/phishing list.
  • Spamhaus — checks your mail server's public IP address against their spam blacklist.

We do not sell your data or share it with anyone for advertising purposes.

How long we keep it

For as long as your subscription is active. If you cancel, your monitoring data is retained for 30 days (in case you change your mind) and then permanently deleted. Billing records are kept as long as the law requires for tax and accounting purposes. Records of your consent to these terms are kept for 3 years.

Your choices and deletion rights

You can delete your account and all associated data at any time from your account settings -- this immediately cancels your subscription and schedules your data for deletion. Reply STOP to any alert text message to stop receiving SMS. Contact us at the address above with any other request.

Questions

Contact Cogitara at 9 Woodhaven Wood Drive, The Woodlands, TX 77380, or by emailing support@cogitara.net.