privacy
❯ Privacy policy.
Last updated: May 19, 2026.
pingrb is built and operated by Joe Masilotti. This page describes what data the service collects, why, and who else sees it. If anything is unclear, email [email protected].
what we collect
- Your email address and a hashed password, so you can sign in.
- Push device tokens from your phone, so we can deliver push notifications to it.
- The sources you create (name, parser type, optional signing secret, generated webhook token).
- The notifications you receive: title, body, optional URL, timestamp, and the raw webhook payload from the source.
Webhook payloads can include data sent by the third-party service that fired the webhook (Stripe, Cal.com, GitHub, etc.). We store them so you can see the notification in your dashboard. We do not enrich, sell, or share them.
third parties
pingrb sends data to a small number of third-party services that make the product work:
- Apple Push Notification service (APNs): on iPhone, receives the push payload and your device token to deliver notifications to your device.
- Firebase Cloud Messaging (FCM): on Android, receives the push payload and your device token to deliver notifications to your device. Operated by Google.
- Postmark: sends transactional email (password resets).
- Fathom Analytics: anonymous, cookieless web analytics for the marketing site. No personal data is sent.
- Hatchbox / Hetzner: hosting infrastructure where the app and database run.
how we secure it
- All traffic to and from pingrb.com uses HTTPS.
- Passwords are hashed with bcrypt. We never store or log them in plain text.
- Webhook signatures are verified where the source supports it (Stripe, Cal.com).
- Access to the production database is limited to the operator (Joe).
how long we keep it
Notifications are retained as long as their source exists. Deleting a source deletes its notifications. Deleting your account deletes everything we have for you, including the device tokens that were used to push to your phone.
your rights
You can review and delete your sources and notifications from your account at any time. You can also delete your account from the account page, which removes everything we have for you. For a copy of your data, email [email protected].
changes
If this policy changes in any meaningful way, the "last updated" date above will move and the change will be reflected here. There is no mailing list for this; check back if you care.