Skip to content
FunnelSitter

Privacy

FunnelSitter is operated by Paul Steiner, Obstgartenweg 4, 4303 St. Pantaleon, Niederösterreich, Austria. Privacy contact: steinerpaul751@gmail.com. Product mail: hello@funnelsitter.com.

What we store

Account email, an optional name, and a password hash if you set a password. Domains you add, the verification token, and the flows you describe, including test values you type into steps. Check results: HTTP status, load time, console errors, broken links, a short explanation, and a screenshot. A hash of the IP address, used only to rate-limit the free check and the paid-plan waitlist. Paid plans are not on sale, so we do not create a Stripe customer for a new account. Emails we attempted to send, including an address you leave to be notified when paid plans open.

Why

  • Contract: running the monitors and the account you asked for.
  • Legitimate interests: keeping the service secure and limiting abuse of the free check.
  • The email you type on a free check: you asked us to send that result.
  • The email you leave on Notify me: you asked to hear when paid plans open.

ActiveCampaign

New accounts, emails left on a free-check result, and emails from “Notify me” are added to the ActiveCampaign list “FunnelSitter Signups”. Accounts are tagged funnelsitter-account. Free-check addresses are tagged funnelsitter-free-check. Waitlist addresses are tagged funnelsitter-paid-waitlist. If ActiveCampaign is unavailable, the signup, the check, or the waitlist request still succeeds and we log the failure so it can be retried. The API address and list id are configuration, not something the browser sends.

Where it runs

The app is hosted on Vercel region fra1. The database is Neon region eu-central-1. Screenshots can be stored in Vercel Blob.

Other processors

Vercel hosts the app and provides cookieless Web Analytics (page views plus a few product events: a call to action, a free check, a completed signup. Those events do not include the URL you checked or your email address. Postgres is provided through a Vercel marketplace database (Neon, unless you choose another). Stripe is not used while paid plans are switched off. Email is sent through Resend or SMTP when one of those is configured. Otherwise the message is stored in the outbox and not delivered. If you use “describe in English”, the sentence is sent to OpenAI or Anthropic, depending on which key is set. These providers may be outside the EU. Transfers rely on the standard contractual clauses they publish.

Cookies

Vercel Web Analytics does not set a cookie. There is no advertising cookie. After you sign in, the browser stores one essential cookie, fs_session, so you stay signed in. A consent banner is not used because the analytics does not identify you and the session cookie is required to keep you signed in.

Retention and your rights

Account data stays until you delete the account in Settings. Deletion also removes that account’s screenshots from Vercel Blob, cancels a Stripe subscription when Stripe is configured, and unsubscribes and deletes the ActiveCampaign contact on the signup list. The daily job deletes free-check results, their screenshots, and captured emails of visitors who never created an account after 30 days. Monitor run history is deleted after 90 days. You can ask for access, correction, deletion, restriction, and a copy of your data, and you can complain to the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien. Billing records Stripe already holds stay with Stripe.

A DPA is available on request at hello@funnelsitter.com.

The service is published at https://funnelsitter.com.