Privacy policy

Last updated 18 September 2026.

Vivere is a monitoring service run by an individual in the Republic of Korea, not by a company (contact: hello@vivere.dev). That person is the data controller, the servers are in the Republic of Korea, and your data is processed there. This page explains what the service keeps and why, in plain words.

What we store

• Account data: your email address and a hashed password. We never store the password itself. If you sign in with GitHub or Google, we instead receive your verified email address and that provider's id for your account, and store both. We do not ask those providers for anything else, and we do not keep the access token after sign-in.
• Monitors: the names, schedules, URLs and settings you enter.
• Pings and checks: the time of each ping, the IP address and user agent it came from, any text you send as the run log, and the results of HTTP checks we make on your behalf.
• Tracking pixels: when a pixel an account created is loaded, the time, the referring page, the IP address, user agent and language of the browser or mail client that loaded it, the client hints that browser sent, and the query string on the image's address. The newest 1,000 loads per pixel are kept. That data belongs to the account that placed the pixel, which decides where it goes and is responsible for telling the people who load it.
• Alert channels: the email addresses, webhook URLs, chat tokens and identifiers you add so we can deliver alerts. Treat these as secrets; we store them encrypted at rest at the disk level and never display secrets back in full.
• Billing: if you buy a plan, our merchant of record (Polar) handles payment and sends us your customer id, plan and subscription status. We do not receive card numbers.
• Server logs: request logs with IP addresses, kept for up to 30 days for security and debugging.
• Site statistics: daily counts of page views on the public pages. See below.

How we count visits

We measure the public marketing and documentation pages so we know which ones are worth writing. It is done by this server, not by a third party: nothing is loaded from another domain, and no data about your visit leaves this machine. The site's own script, served from this domain, tells this server once that a page was read, sending the page's address, the address of the site you came from and the query string of the link you followed. It does that after the page has been visible for a few seconds, or as soon as you move, scroll, tap or type, and it sends nothing at all if you leave before then. We count views that way because most requests for these pages come from automated scrapers, which either never run a script or load a page and leave a second later.

What is kept is a daily count per page, per referring site and per campaign tag in the link you followed. Your IP address and user agent are not stored. To count people rather than requests, we derive a key from the date, your IP address and your user agent using a keyed hash with a secret only this server holds; the key cannot be turned back into an address, it is different tomorrow, and the keys themselves are deleted after three days. The signed-in app, ping endpoints and the API are not counted at all.

What we do with it

Only run the service: evaluate schedules, send the alerts you configured, show you your history, and bill you if you chose a paid plan. We do not sell data, run advertising, or share data with third parties beyond the providers needed to operate (hosting, email delivery, payment processing).

Retention

Run and check history is pruned per plan. Deleting a monitor deletes its history. Deleting your account (email hello@vivere.dev) deletes everything within 30 days, except billing records we must keep for tax purposes.

Cookies

Five cookies, all first-party. Three are strictly necessary: a session cookie so you stay logged in, a CSRF token that protects forms, and a short-lived cookie that carries a confirmation message across a redirect.

The fourth is set only if you arrive from a link that says where it came from — a referring site, or a utm_source or utm_campaign tag. It holds that one label for up to 30 days so that if you create an account later we know which article or post brought you. It contains no identifier for you, it is never read by anyone but this server, it is not shared, and it is deleted the moment you sign up.

The fifth is set only if you choose a language from the menu at the top of the page or in Settings. It holds the language code and nothing else, for up to a year, so the site stays in that language on this browser. Without it, the site follows the language your browser asks for. There are no third-party cookies and no third-party advertising or analytics scripts of any kind.

Your rights

You can export or delete your data by emailing hello@vivere.dev from your account address. If you are in the EU, UK or another jurisdiction with data-protection rights, those rights apply and we will honour them, and that includes the transfer this involves: the data is held in the Republic of Korea, which the European Commission has recognised as providing adequate protection.

Changes

If this policy changes materially, the date above changes and existing users are emailed.