The short version

We collect what we need to run the service. We don't sell your data. We don't track you around the web. We use cookies for login sessions and basic analytics. That's about it.

Who we are

Nark is operated by The IT Dept Pty Ltd (ABN 12 665 405 505), an Australian company based in Sydney. When we say "we", "us", or "nark", we mean The IT Dept.

What we collect

Account information

Email address (to log you in and send alerts)
Password (hashed, we can't read it)
Name (optional, for display purposes)
Payment info (handled by Stripe, we don't store card numbers)

Monitoring data

URLs and endpoints you ask us to monitor
Check results (response times, status codes, errors)
Incident history
Notification preferences and channel configs

Usage data

Basic analytics (page views, feature usage)
Error logs when things break
IP addresses (for security and rate limiting)

What we don't collect

Content from the websites you monitor (we just check if they're up)
Personal data about your users
Tracking cookies from ad networks
Data from social media logins

How we use your data

To provide the monitoring service (obviously)
To send you alerts when things go down
To bill you if you're on a paid plan
To fix bugs and improve the service
To respond to support requests
To comply with legal obligations

Who we share data with

We don't sell your data. We share it with:

Stripe — for payment processing
Twilio — for SMS notifications (if you enable them)
Your email provider — we send transactional emails
Infrastructure providers — our servers run on cloud infrastructure
Law enforcement — only if legally required

Cookies

We use cookies for:

Authentication — keeping you logged in
Preferences — remembering your settings
Analytics — understanding how people use nark (we use privacy-friendly analytics)

We don't use advertising cookies or cross-site tracking.

Data retention

Account data — kept while your account is active
Check results — kept for 90 days (or longer on paid plans)
Incident history — kept for the life of your account
Deleted accounts — data is removed within 30 days

Your rights

You can:

Access your data from your account settings
Export your data anytime
Correct any inaccurate data
Delete your account and all associated data
Object to certain processing (email us)

If you're in the EU, you have additional rights under GDPR. If you're in California, you have rights under CCPA. Email us if you want to exercise any of these.

Security

We take security seriously:

All data is encrypted in transit (HTTPS) and at rest
Passwords are hashed with Argon2
We use secure, reputable infrastructure providers
Access to production systems is tightly controlled

If you discover a security issue, please email us at security@theitdept.au.

Data location

Our servers are primarily in Australia. Some data may be processed by third-party services in other countries. We ensure appropriate safeguards are in place for any international transfers.

Children

Nark is not for children under 18. We don't knowingly collect data from minors.

Changes to this policy

We might update this policy occasionally. If we make significant changes, we'll email you. The "last updated" date at the top tells you when it was last changed.

Contact

Questions about privacy? Email us at hello@theitdept.au.

Privacy Policy