Security and trust
What the tag collects, what it deliberately does not, and how long anything is kept.
What data does the tag collect?
The tag records information about scripts, not about visitors: which scripts executed, their origin and payload hash, what they touched in the DOM, and where they sent data. It does not store user-entered values such as card numbers, passwords or form contents. The point of the product is noticing when a script reads a card field, not reading it ourselves.
Recorded, about scripts
Which scripts executed
Their origin and payload hash
What they touched in the DOM
Where they sent data
Never stored, user-entered values
Card numbers
Passwords
Form contents
Data lifecycle
Retention
Data
Free
Pro
Enterprise
Raw script history
30 days
30 days
90 days
Generated evidence packs
18 months
18 months
18 months
Alert records
18 months
18 months
18 months
Fail-open
Availability
The tag is fail-open. If our service is unreachable, your page renders and your checkout completes normally. We are a monitoring dependency, never an availability dependency. Enterprise plans carry a 99.9% uptime SLA.
Our service unreachable
Page renders
Checkout completes normally
Infrastructure
Infrastructure and sub-processors
Script Monitoring runs on Amazon Web Services in the United States. Payments for paid plans are processed by Stripe, and we never receive full card numbers. Data is encrypted in transit (TLS) and at rest (AES-256), and access to production systems is limited to the people who need it to run the service. See our Privacy Policy for how we handle personal data.
Start with your own payment pages.
Free forever on 1,000 page views a month, no credit card.
Free forever plan. No credit card.