Privacy Notice

Effective October 8, 2026

AOD Pulse is operated by Admin on Demand, LLC. This notice explains the information used to provide our website monitoring service. Questions or account deletion requests can be sent to support@aod.net.

Information you provide

When you register, we collect your name, email address, and password. Passwords are stored as hashes. We store the website names and URLs you choose to monitor, your account settings, and monitoring results such as response times, availability, and incident timestamps.

Do not put passwords, access tokens, private customer information, or other secrets in monitored URLs. The service is designed to check publicly reachable websites.

How we use information

We use account information to authenticate you, verify your email, provide monitoring, send outage and recovery notifications, reset passwords, respond to support requests, and protect the service from abuse. We may send essential service announcements, including changes to the promotional offer.

Alert contacts and account security

If you invite an alert contact, we store their name, email address, verification and delivery preferences. Contacts must confirm before receiving monitoring alerts and can stop alerts from the inviting account. We retain a hashed opt-out record for the life of that account to prevent repeated invitations. Optional two-factor authentication stores an encrypted authenticator secret and hashed recovery codes. Setup QR codes are generated in your browser, not by a third-party QR service.

Optional push notifications

Push notifications are optional. If you, or an alert contact who has confirmed your invitation, turn them on in a browser or on a device, we store the push subscription that browser creates: a delivery address issued by the browser or device maker's push service and the keys used to encrypt messages to it. These are encrypted before we store them. We also store the device label you choose, the alert types and monitors selected for it, and delivery records. Adding or removing a device is recorded in your account's activity log, which is kept with other security records. A contact enrolls a device with a single-use code from the account owner that expires after 24 hours, and can turn notifications off at any time.

Notifications are delivered through the push service run by your browser or device maker, such as Apple, Google, Mozilla or Microsoft. The notification content, such as a monitor name and its status, is encrypted so the push service cannot read it. The push service still handles delivery and processes information such as the device's push address, the time and size of each message, delivery settings, a coded identifier that groups messages about the same monitor, and our contact email address, under its own terms. Removing a device, turning notifications off, or the push service reporting that a subscription has ended deletes its stored keys and stops delivery. A record without keys is kept for up to 30 days so the choice is honored, and delivery records are deleted after 30 days.

Optional public status pages

Your monitoring dashboard stays private. If you publish a status page, anyone with its link can see the title, description, component labels and availability states you choose to share. You can optionally include up to 30 days of availability and confirmed incident history. Private monitor URLs, alert contacts and maintenance notes are not added automatically. Do not put confidential information in public labels or descriptions. Unpublishing stops future page access but cannot remove copies visitors have already saved.

Service providers and logs

Hosting, network security, and email delivery providers process information needed to operate the service. Our website uses Cloudflare for network delivery and security. Network and security systems may process IP addresses, request details, timestamps, and browser information to operate and protect the service. Monitoring requests originate from our probe infrastructure, including locations in the United States.

We do not sell account information. We may disclose information when required by law or necessary to investigate abuse and protect the service.

Free public tools

AOD Pulse offers free tools that do not require an account: a DNS lookup, a DNS propagation check, an email setup check, a domain registration lookup, an IP address lookup, an HTTP headers check, a redirect checker, a response time check, an SSL checker and an email header analyzer. To answer, most of these tools send what you enter to third parties. DNS lookups, propagation checks and email setup checks send the domain name (and, for the email check, any DKIM selector you enter) to public DNS resolvers: Cloudflare, Google and AdGuard. Domain lookups send the domain name to the registry operator for that domain's top-level domain, and IP address lookups send the address to the regional internet registry responsible for it (and to the public resolvers for reverse DNS), using the public RDAP service they publish. Those services receive the name or address and our server's address, not your address. We keep each result for about five minutes so repeated lookups are quick, then delete it. We do not keep a history of what you looked up and we do not link lookups to you. Domain lookups do not display registrant contact details, and IP lookups show organization names only. The HTTP headers check, redirect checker, response time check and SSL checker connect to the public website or address you enter. Before one runs, you complete a Cloudflare Turnstile verification; Cloudflare receives the verification token and your network address to decide whether you are a person, under its own privacy policy. Our server then looks up the address of the name you entered through the public resolvers above, and one of our monitoring locations connects to it. The headers check makes a single request for the home page, does not follow redirects, and reads only the response headers. The redirect checker requests the home page and follows up to 10 redirects, one request each; it does not follow a redirect to a port other than 80 or 443, to a private address or to an address that contains a user name, and the monitoring location looks up the names of redirect targets itself. The response time check makes a single request for the home page and measures how long each stage takes. The SSL checker makes a single TLS connection to one of five ports (443, 8443, 465, 993 or 995) and reads the certificate and protocol the site presents; it sends no web or mail commands. The site you named, and for redirects the sites it redirects to, see these requests from one of our monitoring locations, not from your address. We keep the results and the time and location of the check for 24 hours, then delete them. For the headers check, cookie names and values are discarded; for the redirect checker we keep the addresses of the redirect steps with any user name and fragment removed. Each result has a random link, and anyone who has the link can see the result. A check of the same address within five minutes may show the result of a recent check, including one requested by someone else. While a check is queued or kept, we also keep a one-way hash of your network address with it, to limit how many checks one visitor can run at once. To limit abuse across all tools we keep short-lived counters tied to a one-way hash of your network address (for IPv6, your network prefix); they expire within a day. The email header analyzer runs entirely in your browser: what you paste is not sent to us. See also the acceptable use page.

Free tools API

When you use the tools API we record, for each request, your key ID, the tool, a one-way hash of the name you checked (it changes every day, so it cannot be linked across days and we cannot read the name back from it), the result status, the work units used and how long the request took. These records are deleted after 24 hours. We keep daily totals per tool, without names, for 90 days. The result of a check is kept for up to 24 hours so that you can fetch it. Site owners who see unwanted checks can write to [email protected].

Cookies and browser storage

The application uses a session cookie to keep you signed in and support secure requests. If you turn on push notifications, your browser also keeps a small service worker and a record of the latest notification it showed for each monitor and alert type, which it uses to keep an older alert from replacing a newer one. Our public website uses Google Analytics to understand how visitors find and use it. Google Analytics sets first-party cookies and collects information such as pages viewed, referring site, approximate location, and device and browser type. Google processes this data as our service provider under its own terms. Google Analytics is not loaded in your signed-in dashboard, and we do not use advertising trackers. When you create an account, our server sends Google Analytics a single sign-up event tied to the analytics cookie our public website already set in your browser, so we can see which pages lead to sign-ups. It does not include your name, email address or any account details, and nothing is sent if that cookie is absent. You can block these cookies in your browser settings or install Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout. Essential network security features may use their own cookies.

Retention and your choices

The promotional plan keeps 30 days of detailed monitoring history and 90 days of daily availability and response-time summaries. Account data is retained while your account is active or as needed to provide the service. Security records and backup copies may remain for operational or legal purposes after you remove a monitor or request account deletion.

You can edit or delete monitors from your dashboard. Contact support to request account deletion, access to your account information, or a correction you cannot make yourself. We may need to verify your identity before acting on a request.

Security and changes

We use access controls and encrypted connections to help protect information. No service can guarantee absolute security. If this notice changes materially, we will provide notice through the website or your account email as appropriate.

Contact

Admin on Demand, LLC
11063-D S Memorial Drive PMB 462
Tulsa, OK 74133, USA
support@aod.net