Privacy Policy

Effective November 1, 2026

This Privacy Policy explains how ThingPing collects, uses, stores, and protects information when you use the service.

Information we collect

ThingPing may collect:

• account information, including names, email addresses, and authentication records;
• storage records, item details, tags, notes, photos, attachments, custom icons, and saved templates you provide;
• subscription and transaction status supplied by payment providers;
• support messages and files you choose to send; and
• technical and activity records used to secure, diagnose, and improve the service.

How we use information

We use information to provide and maintain ThingPing, authenticate users, preserve account history, process requested features, provide support, prevent abuse, monitor reliability, and communicate about accounts and subscriptions. We do not sell personal information.

Optional journey analytics

With your permission, ThingPing uses a random first-party browser identifier to connect visits and account-button clicks with registration, email verification, first use of Locations, Items, search and labels, trial progress, and subscription checkout, approval, payment and cancellation milestones. If you create or sign in to an account you own, this journey is linked internally to that account. This helps us understand where people need help. It is separate from essential security logs and aggregate public traffic counts.

These analytics do not store names, email addresses, Item contents, search text, payment amounts or details, full referral URLs or arbitrary campaign text. Sources and campaigns use broad categories. We do not send individual journey records to an external analytics service. Administrator reports and optional AI growth reviews use aggregate totals. Recognized administrator, test and automated activity is excluded; unrecognized automation may remain.

Optional analytics are off until you choose Allow optional analytics. Choose No thanks in Analytics preferences to withdraw; this removes your current journey and, when signed in, linked journeys for your account. Browser tracking opt-out signals are respected. Journeys expire after 90 days and are deleted by a routine sweep; encrypted recovery copies follow the retention below. A separate preference cookie remembers your choice for up to 90 days. Short-lived keyed network buckets prevent abuse without storing raw IP addresses in journey tables.

Service providers

ThingPing may use service providers for hosting, databases, email, payments, artificial-intelligence features, and encrypted backups. They receive only the information needed to perform those services and process it under their own terms and privacy obligations.

AI-assisted features

AI-assisted features are optional. When you use one, ThingPing sends the information needed for that request to its AI provider. Depending on the feature, this may include a photo, Item or Location names and descriptions, icon choices, or the proposed relationship between storage objects. ThingPing records usage, technical results, and storage-relationship review decisions for reliability, cost control, and administrator review. Do not submit sensitive information that is not needed for the requested feature.

Administrative access

Authorized ThingPing administrators may access account, activity, support, billing-status, and incident-response information when needed to operate, secure, support, or enforce the service. Administrative access and important actions are logged. Ordinary users cannot access another account's inventory.

Google user data

ThingPing's operator may authorize a private Google Drive connection for encrypted offsite service backups. ThingPing uses that connection only to create, verify, retain, and restore encrypted backup files in the designated backup folder. ThingPing does not use Google Drive data for advertising, does not sell it, and does not expose backup contents to other ThingPing users.

Storage and security

ThingPing uses administrative, technical, and physical safeguards appropriate to the service. Backups sent to offsite storage are encrypted before transfer. No online service can guarantee absolute security, so you should also keep independent exports of important data.

Retention and deletion

Information is retained while needed to operate the service, meet legal obligations, resolve disputes, and enforce agreements. Closing an account removes its storage records and uploaded inventory files, while retaining the account identity and subscription history so the owner can return with the same email address and username and so ThingPing can retain necessary security and transaction records. The deletion screen identifies this distinction before the owner confirms the action.

Deleted information may remain temporarily in encrypted recovery copies until those copies expire. Current retention is up to 30 days for daily offsite recovery sets, 12 months for monthly offsite recovery sets, and seven days for hosting-provider server backups. Legal holds, security investigations, payment records, or applicable law may require longer retention of limited information.

Your choices

You can review and update account information, export supported data and files, and close your account through ThingPing. You may also contact support with privacy questions or requests, including questions about information retained after account closure.

Changes to this policy

This policy may be updated as ThingPing or applicable requirements change. The current version and effective date will remain available on this page.

Contact

Privacy questions may be submitted through the ThingPing Support form.