This text is a working draft under review. It does not describe a binding commitment until this notice is removed.
Privacy Policy
1. Who is responsible
Gcd Software ("we") is responsible for the personal data processed by Filterping Cloud and this website. Contact: contact@filterping.com. Postal address: To decide.
If you use a self-hosted Filterping server, your data stays on that server and we receive none of it. Whoever runs that server is responsible for it.
2. This website
filterping.com sets no cookies, runs no analytics or tracking, and loads nothing from third parties: its fonts, styles and images are served from our own server. The web server keeps no access log. If a request fails with a server error, the error log can contain your IP address, the requested address and your browser's request headers; these logs are limited in size and overwritten as new entries arrive.
3. What Filterping Cloud stores
- Account: your email address, your password (stored only as a salted hash, never in readable form), your account type (homeowner or tenant) and your sign-in sessions.
- Properties and systems: the property names or addresses, unit names, HVAC system names, filter sizes, replacement intervals and warning periods you enter.
- Filter history: when each filter was installed, when it is due, which account recorded it, the tag that was scanned and any note.
- Filter tags: the chip ID of each NFC tag you link and its note. Tags carry no personal data.
- Tenant access: invitation codes (stored only as hashes; each works once and expires after 48 hours), which tenant account can see which system, and the filter requests and messages tenants send to their homeowner. A homeowner can see the email address of each tenant with access.
- Readers (optional hardware): the reader's serial number, model and connection type, the IMEI or ICCID of a cellular reader if entered, its device key (stored only as a hash), and each check-in: time, battery voltage, signal strength (RSSI), the chip ID of the tag it detected and whether the expected tag was present.
- Reminders: which due-date reminders were created and dismissed. Reminders are shown in the app. Delivery records for reminders include the tenant's email address as recipient.
- Subscription: your license keys (stored only as hashes, with a short display prefix), their property quota and status, and the Stripe customer and subscription IDs that link them to your payment.
We use this data only to provide Filterping to you and to the people you share systems with, to keep the service secure, and to handle your subscription. We do not sell personal data or use it for advertising.
4. On your phone
The app keeps your sign-in session in the phone's secure storage. When there is no connection, filter changes you record are kept on the phone until they can be sent. NFC tags are read on the phone, and the app sends us only the tag's chip ID. The app contains no advertising or analytics code.
5. Payments
Payments are processed by Stripe. You enter card details on Stripe's checkout page; they go directly to Stripe and never reach our servers. Stripe tells us whether a payment and subscription are active, and the quantity you bought. Stripe's own handling of your data is described in its privacy policy at stripe.com/privacy.
6. Where the data is and who helps us
- Hosting: Filterping Cloud runs on a virtual server in Chicago, Illinois, USA, rented from GreenCloud. To confirm: provider named here If you use Filterping from outside the United States, your data is transferred to and stored in the United States.
- Encryption in transit: all connections use HTTPS, with certificates from Let's Encrypt. No user data is shared with Let's Encrypt.
- Email: messages you send to contact@filterping.com are stored with our email provider, Proton. To confirm
- Payments: Stripe, as described above.
We share personal data with no one else, except when the law requires it.
7. Backups and retention
- We make a database backup every night and keep it on the server for 14 days. The hosting provider also keeps whole-server backups for up to 4 weeks.
- We keep your data while your account exists. A lapsed subscription does not delete data.
- If you ask us to delete your account, we remove its data from the live database within To decide: 30 days. Copies in backups disappear as those backups expire, within 4 weeks after that.
- Payment records that the law requires us to keep are kept for the required period.
8. Security
Passwords, invitation codes, reader keys and license keys are stored only as hashes. The database is not reachable from the internet, and access to the server is limited to key-based administrator login. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
9. Your choices and rights
You can ask us to access, correct, export or delete your personal data, or object to how we use it, by writing to contact@filterping.com. Homeowners can export each system's history from the app. Depending on where you live (for example in the EU, the UK or California), you may have further rights, including the right to complain to a data protection authority. We answer within To decide: 30 days.
If you are a tenant, your homeowner controls the system information you see. Ask your homeowner, or us, about data about you.
10. Children
Filterping is not directed at children under 16, and we do not knowingly collect their data.
11. Changes
If we change this policy in a way that matters, we will announce it on this page and by email before the change takes effect.