TinyPingTinyPing

Privacy Policy

Last updated October 17, 2026

This policy explains how Shoppertise Sdn Bhd (“we”) handles personal data in connection with TinyPing. We are the data controller for account and billing data, and process monitoring data on your behalf. It is written to meet the Personal Data Protection Act 2010 (Malaysia) and, for people in the EEA and UK, the GDPR.

In plain English

Your name and email from Google, what you ask us to monitor, the results, who should get alerts, and basic billing records. We never see your card number. If you use a free tool, we see what you check and your IP address, and Cloudflare Turnstile checks you are not a bot. If an SSL, domain, website or CNAME check passes, the domain you checked may appear in “Recent checks” on our tool pages for up to 7 days, unless you tick “Don't show my result” first. We never show who checked it.

1. Data we collect

  • Account data: name, email address and profile picture from your sign-in provider, and your workspace memberships.
  • Monitoring data: the targets, keywords and request headers you configure, and the results of each check (status, response time, error message).
  • Alert recipients: email addresses and chat webhook URLs you add. People added as email recipients receive alerts only after they confirm.
  • Billing data: Stripe customer and subscription identifiers, plan capacity and invoice amounts. Card details are collected and stored by Stripe, never by us.
  • Technical data: IP address, browser type and request logs created when you use the service.
  • Free tools (no account needed): the hostname, URL or other value you enter, and your IP address, which we use to count checks against the daily limit. Results are cached for up to one hour and the IP counter is deleted within about a day. Every check is protected by Cloudflare Turnstile, which processes information about your browser and connection to tell people from bots. Cloudflare's handling of that data is described in its Turnstile Privacy Addendum.
  • Recent checks on the free tools: when a check made with the SSL checker, the domain expiry or WHOIS tools, a website (HTTP) tool or the CNAME lookup passes, we may show the checked domain (only the main domain or its www address), the tool used, the result and the time of the check in a public “Recent checks” list on tinyping.ai/tools, and count the check in public totals. We never show the IP address or identity of the person who made the check, the full URL, any keyword entered, or a failed result. You can keep a check off the list by ticking “Don't show my result” before checking. The domain checked may belong to someone else; its owner can ask us to stop listing it (see section 6).

In plain English

To run TinyPing, bill you, keep it secure, and tell you about things that affect your account. No ads, no selling data.

2. How and why we use it

  • To provide the service: run checks, store results, send alerts (performance of our contract with you).
  • To bill you and keep financial records (contract; legal obligation).
  • To secure the service and prevent abuse, including the daily limit and bot check on the free tools (our legitimate interests).
  • To show that the free tools are in use, through the public “Recent checks” list and totals (our legitimate interests, limited as described in section 1, with an opt-out before each check and removal on request).
  • To send service messages such as trial reminders, security notices and changes to these documents (contract; legitimate interests).

We do not sell personal data and do not use it for advertising.

In plain English

Detailed check results disappear after 3 days, failures after 30. Summaries stay while your account exists so your uptime history works. A domain in “Recent checks” disappears within 7 days.

3. How long we keep it

  • Every check result: 3 days.
  • Failed check results with error details: 30 days.
  • Hourly and daily uptime summaries and incident records: while your account exists.
  • Account and workspace data: while your account exists, then deleted within 30 days of a deletion request.
  • Billing records: as long as tax and accounting law requires.
  • Server logs: up to 30 days.
  • Free tools “Recent checks” entries: up to 7 days. Daily check counts (numbers only): up to 9 days.

In plain English

Only with the companies that help us run TinyPing (payments, email, sign-in, hosting), listed on our Subprocessors page, and with authorities when the law requires it.

4. Who we share it with

We share personal data with service providers that process it on our behalf under written agreements, listed on the Subprocessors page. We may disclose data where required by law or to protect rights and safety. Some providers process data outside Malaysia and outside the EEA; where required, transfers are protected by standard contractual clauses or equivalent safeguards.

In plain English

This website uses Google Analytics to count visits and Microsoft Clarity to see how pages are used. In the EU, UK and Switzerland they run without cookies. The app uses only the cookies needed to keep you signed in.

5. Cookies

This website (tinyping.ai) uses Google Analytics 4 to measure visits: which pages are viewed, how visitors arrive, and approximate location and device type. Google receives your IP address and browser information for this. Visitors in the European Economic Area, the United Kingdom and Switzerland are measured without analytics cookies (Google Consent Mode, with storage denied). Elsewhere Google Analytics sets first-party cookies (_ga and _ga_*). We use no advertising features and run no ads. You can block these cookies in your browser or with Google's opt-out add-on. We also use Microsoft Clarity to understand how pages are used: it records clicks, scrolling and mouse movement as session replays and heatmaps, and Microsoft receives your IP address and browser information. Text typed into forms is masked and not recorded. Outside the EEA, UK and Switzerland Clarity sets first-party cookies (_clck and _clsk); inside them it runs without cookies unless you consent. The application (app.tinyping.ai) uses no analytics, only strictly necessary cookies for sign-in sessions and security; these cannot be switched off without breaking sign-in.

In plain English

You can ask for a copy of your data, ask us to fix or delete it, or object to how we use it. Email us and we answer within 21 days. If you own a domain shown in “Recent checks”, email [email protected] from that domain and we stop listing it.

6. Your rights

Subject to applicable law you may request access to, correction of, or deletion of your personal data; withdraw consent where processing relies on consent; object to or restrict processing; and request a portable copy. Email [email protected]. We respond within 21 days as required by the PDPA. You may also complain to the Personal Data Protection Commissioner of Malaysia, or to your local data protection authority if you are in the EEA or UK.

If you own or manage a domain shown in “Recent checks” on the free tools, email [email protected] from an address at that domain, or otherwise show that you control it, and we will remove it and stop listing it within 7 days.

In plain English

Encryption in transit, strict access between customers, and we tell you promptly if something goes wrong.

7. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, separation of each workspace's data, and limits on what monitors can reach. If a breach affects your personal data we will notify you and the relevant authorities as the law requires.

In plain English

TinyPing is a business tool for adults.

8. Children

The service is not directed at anyone under 18 and we do not knowingly collect their data.

In plain English

Privacy questions go to [email protected].

9. Contact

Shoppertise Sdn Bhd, 10-3, Jln 22b/70a, Desa Sri Hartamas, 50480 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur. Email: [email protected]. We will post changes to this policy on this page and email account owners about material changes.