Last updated 15 August 2026
Privacy policy
Short, because there is not much to say. We collect what running the service needs and nothing else.
Controller
Who is responsible
The data controller is Alvseike, a sole proprietorship registered in Norway, org.nr. 921 279 485 MVA. For anything on this page, including deletion requests, write to hello@markupwatch.com.
No tracking
What we do not do
No analytics. No advertising. No tracking pixels, no third-party scripts, no fingerprinting, no cookie banner — because there is nothing to consent to. We do not sell or share personal data, and we do not profile you.
The only cookie set on a normal visit is your sign-in session, and only once you sign in. Browsing the public record sets nothing.
Collected
What we hold, and why
If you only read the site: nothing that identifies you. Pages are served from Cloudflare, which keeps short-lived request logs including IP addresses for security and abuse prevention.
If you have an account, we store your email address, your name if you provided one, your plan and its dates, your timezone, how often you want digests, and a Slack webhook URL if you set one. We also store what you have chosen to watch — the products, the plan tiers, any renewal date and note you add — and a log of alerts sent to you (recipient address, subject, delivery status) so that we do not send the same alert twice and can tell you what went out.
If you subscribe, we store your subscription status and the identifiers Polar gives us. Card details never reach us.
If you create an API key, we store a SHA-256 hash of it and the first twelve characters, never the key itself, along with per-day request counts.
If you request a product or send a correction, we store what you submitted, and link it to your account if you were signed in.
Basis
Why we are allowed to hold it
Account and subscription data is processed to perform the contract you entered into. Alert and digest emails are part of that service. Security logging and abuse prevention rest on our legitimate interest in keeping the service working. Where we rely on consent — a Slack webhook you chose to add — you can withdraw it by removing it.
Processors
Who else touches it
We use a small number of services to run Markup. Each receives only what its job needs.
| Service | What it does | What it receives |
|---|---|---|
| Clerk | Sign-in and account identity | Your email address, name if you give one, sign-in events |
| Polar | Payments, as merchant of record | Your billing details, handled by Polar — we never receive card data |
| Resend | Sending email | Recipient address and the contents of the alert or digest |
| Cloudflare | Hosting, database and file storage | Everything above at rest, plus request logs |
| Slack | Only if you configure a webhook | The alert text, posted to the channel you chose |
THE LANGUAGE MODEL THAT READS PRICING PAGES ONLY EVER SEES VENDOR PAGES — NEVER YOUR DATA.
Where
Where it is stored, and for how long
Data is held on Cloudflare's infrastructure and may be processed outside Norway and the EEA. Our processors are engaged under terms that include the safeguards required for such transfers.
Account data is kept while your account exists. Delete your account — click your avatar, then Manage account — and it goes, along with your watches, renewal dates, API keys and your email delivery history. While the account is open, delivery records are kept up to 24 months so we can investigate what was or was not sent. The public record itself — products, prices, changes, page captures — contains no personal data and is kept indefinitely; that is the point of it.
Your rights
What you can ask for
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or ask us to restrict it. Email hello@markupwatch.com and you will get an answer within 30 days. You do not need an account to ask.
Every alert email carries an unsubscribe link, which stops alert email without deleting your account.
If you think we have handled your data badly you can complain to the Norwegian Data Protection Authority (Datatilsynet), or to the supervisory authority where you live.
See also our terms of service.