Privacy Policy

1. Who We Are

RCC Sentinel is a product of Ready Cheap Cloud. When we say "we", "us", or "our" in this policy, we mean Ready Cheap Cloud and the RCC Sentinel project. If you have any privacy-related questions, contact us at the email address listed on our main website.

2. What Data We Collect

We collect the minimum data necessary to operate the dashboard account service.

Account Data: When you create a dashboard account at monitor.readycheapcloud.com, we store your email address and a securely hashed version of your password (bcrypt with a cost factor of 10). We never store your password in plain text.

Session Data: When you log in, we create a server-side session and store a session identifier in a secure, HTTP-only cookie on your browser. This session expires after your configured inactivity period or when you log out.

Email Addresses: We store the email address you provide at registration. We use it to send you the account verification email, password reset emails, and (if you configure email alerts) system alert notifications. We do not use your email address for marketing without your explicit consent.

Server Metric Data: Server metric data (CPU, RAM, disk, processes, active connections) is collected and processed in real time. We store this data securely on our console platform to populate your telemetry charts, and it is automatically purged after a rolling 7-day retention period.

3. What We Do Not Collect

• We do not collect your Windows Server metric data (CPU, RAM, processes, connections) on our servers.
• We do not use cookies for advertising or tracking.
• We do not sell, rent, or share your personal data with third parties for commercial purposes.
• We do not use third-party analytics services (Google Analytics, etc.) on the dashboard.

4. How We Use Your Data

The data we collect is used exclusively to:

1. Authenticate your dashboard account login (email + hashed password comparison)
2. Send you account emails you explicitly triggered (verification link, password reset link)
3. Send system alert emails if you have configured SMTP and alert thresholds in your dashboard settings
4. Display your registered server list and account settings within the dashboard

5. Data Storage and Security

Your account data (email and hashed password) is stored in a secure, isolated database environment managed by the RCC Sentinel console. We employ strict access controls and regular security auditing to safeguard all account files.

Passwords are hashed using bcrypt before storage. Even if the data file were accessed without authorisation, the original passwords would not be recoverable from the stored hashes.

We recommend running the dashboard behind HTTPS (using Let's Encrypt / Certbot) to encrypt all data in transit between your browser and the server.

6. Third-Party Services

The dashboard integrates with the following optional third-party services:

• AbuseIPDB: If you provide an AbuseIPDB API key in the settings panel, blocked IP addresses from your IPBan firewall are sent to AbuseIPDB's API for threat intelligence lookup. This data consists only of IP addresses. Review AbuseIPDB's privacy policy for details on how they handle IP address lookups.
• Google Fonts: The dashboard and public pages load the Outfit font from Google Fonts. This may result in your browser sending a request to Google's servers. If you prefer to avoid this, you may self-host the font files.
• Your SMTP Provider: When you configure SMTP settings and send emails through the alert system, your email provider processes those emails according to their own privacy policy.

7. Your Rights

You have the right to:

• Access the personal data we hold about you (email address, account creation date)
• Delete your account and all associated data — contact us or use the account deletion option in the dashboard settings
• Correct your email address — use the Profile Settings panel in the dashboard
• Export your data — you can export your audit logs and server metric history in standard CSV/JSON formats directly from the dashboard panel.

8. Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

9. Contact

If you have questions about this privacy policy or how we handle your data, please visit readycheapcloud.com for contact information.