Who we are
Pewterkit tools are provided by K P Singampalle, trading as Pewterkit, a sole trader at 124 City Road, London EC1V 2NX, United Kingdom. We are the controller of the personal data described here. Contact: support@pewterkit.com.
We are registered with the Information Commissioner's Office (ICO) under registration number ZC272942.
The short version
- We keep as little as we can: the result of a check, and your email address if you buy, or if you ask us to tell you when your host is supported.
- Check results are deleted automatically after 30 days.
- No accounts, no passwords, no advertising trackers, no selling or sharing data for marketing.
What we collect across Pewterkit, why, and for how long
This section covers every Pewterkit tool. What each tool reads and stores to run its check is listed under Tools and what they process.
| Data | Why | Lawful basis | How long |
|---|---|---|---|
| The URL you ask a tool to check, and the result we derive from reading that app's public pages (details per tool below) | To run the check you asked for and give you a result link | Contract (providing the free check you requested) | As listed for each tool below; never more than 30 days |
| Your IP address, which our hosting (Cloudflare) uses to limit how many checks can be run per minute | To stop abuse and keep the tool available | Legitimate interests (security) | We don't store it in our own records |
| Your email address, order details and your answer to the optional product-news box, received from the payment provider when you buy | To deliver what you bought and answer questions about your order | Contract | 6 years, as UK tax law (HMRC) requires for business records |
| Your email address and your host answer, if you ask us to tell you when your host is supported | To send you that single notice | Consent (you can withdraw it at any time: email support@pewterkit.com, or use the delete link in the notice) | Deleted once the notice is sent, or after 90 days, whichever comes first |
| Messages you send to support@pewterkit.com | To answer you | Legitimate interests (support) | 2 years |
| Anonymous page-view statistics | To understand which pages are used | Legitimate interests | Aggregated; no cookies, no personal profile |
We never ask for your password, your Firebase, Google Cloud or hosting credentials, or access to your accounts. A check reads only public pages, the same files any visitor's browser downloads.
We only send emails about something you asked for, such as delivering your purchase. We send product news only if you have ticked an unticked opt-in box, and every such email lets you unsubscribe.
Tools and what they process
Every Pewterkit tool uses the shared terms above: the same controller, processors, rights and the retention periods set out above. This table lists what each tool reads and stores to run its check.
| Tool | What it reads | What it stores | For how long |
|---|---|---|---|
| Signhome | The public page at the URL you enter, and up to 10 script files from the same site that the page loads. Plain read requests only: no sign-in and no calls to Firebase or Google. | The check result: the page address and host, the Firebase project ID and sign-in domain (authDomain) found in the page's public config, the matching line of public config, and the price shown for that result. If you buy, a record that the result was paid, with the Stripe checkout reference. | Deleted automatically 30 days after the check (the paid record, 30 days after payment). Order emails and records are kept as set out above. |
| Signhome (host-support notice) | Signhome: if you ask us to tell you when your host is supported, we keep your email address and your host answer for that single notice. It is deleted once the notice is sent, or after 90 days, whichever comes first. We count host answers by type with no personal data. | ||
Who processes data for us
- Cloudflare hosts our sites and runs our tools (Cloudflare Workers), stores check results for 30 days and notice requests (your email address and host answer) for up to 90 days, and gives us anonymous page-view statistics (Cloudflare Web Analytics, which does not use cookies).
- Stripe, through Onelink (Link, LLC), takes payments. Checkout runs on Stripe's own page, so we never see your card details. Onelink (Link, LLC), Stripe's merchant-of-record service, acts as the merchant of record, handles any tax due on the sale and sends your receipt. Onelink's privacy policy covers what it collects at checkout.
- Resend sends our transactional emails (for example, your order confirmation, or the one host-support notice you asked for) from mail.pewterkit.com.
- Google Workspace hosts our support mailbox (support@pewterkit.com).
Some of these providers process data outside the UK, including in the United States. Cloudflare, Stripe, Resend and Google process data in the United States. Where a provider is certified under the UK–US data bridge (the UK Extension to the EU–US Data Privacy Framework), the transfer relies on that. Otherwise it relies on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
Your rights
Under UK data protection law you can ask for a copy of your data, or ask us to correct it, delete it, restrict it or object to how we use it. Email support@pewterkit.com and we will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
Pewterkit tools are made for people who build and run web apps. They are not aimed at children.
Changes
If we change this policy, we will update the date at the top of this page.