Privacy policy
Last updated October 16, 2026
Kolteo monitors websites. It needs very little personal data to do so, and none of it is sold, rented or used for advertising.
Data controller
APARO, SASU (SIRET 901 523 902 00012), 10 allée des Églantiers, 07500 Guilherand-Granges, France. Contact: hello@kolteo.com.
What we collect and why
Your account
Name, email address, password (stored hashed, never readable), two-factor authentication settings and the logo you upload for your reports. Used to run your account and send you its emails. Legal basis: the contract between us.
What you monitor
The domains and pages you add, your notes, the links to your project tools, and the results of the checks and analyses (status, response times, SEO measures, copies of the analysed pages). Used to provide the service. Legal basis: the contract.
Your contacts
The email addresses and Discord or Slack webhooks you add to receive alerts and reports. You add them on behalf of these people: please make sure they agree to receive these messages. They are only used to send them. Legal basis: the contract, and your legitimate interest in informing your clients.
Free analysis
The address of the page you submit, and your IP address, kept for at most one hour to limit the number of free analyses per visitor. Legal basis: our legitimate interest in preventing abuse.
Technical data
When you are signed in, your session keeps your IP address and browser name for its duration (two hours of inactivity). Server logs are kept for security and troubleshooting.
Cookies
Kolteo only sets the cookies it needs to work: the session cookie, the security token that protects forms, and the "remember me" cookie if you tick it. No analytics, advertising or tracking cookies, so there is no consent banner to click through.
How long data is kept
- Account data: as long as the account exists.
- Checks of your pages: 400 days.
- Copies of analysed pages: 30 days. Analysis results: as long as the page is monitored.
- Free analyses: 30 days.
- In-app notifications: 90 days.
- IP address of a free analysis: one hour.
Who receives it
- Our host, DigitalOcean, LLC, whose servers are in Frankfurt, Germany.
- OVH SAS (2 rue Kellermann, 59100 Roubaix, France), which sends the account emails, alerts and reports.
- Discord and Slack, only for the webhooks you add, which receive the alerts and reports you chose.
DigitalOcean, LLC is a company based in the United States. It complies with the EU-U.S. Data Privacy Framework, and your data stays in its European data center.
Your rights
You can access, correct, delete or export your data, object to or restrict its use. Most of it can be edited or deleted from your account; for anything else, or to delete your account, write to hello@kolteo.com. We answer within one month. If you think your rights are not respected, you can file a complaint with the CNIL (cnil.fr).
Security
Connections are encrypted (HTTPS), passwords are hashed, two-factor authentication is available, and webhook addresses are never shown on public pages. Public status pages only show what you choose to share.