Privacy Policy

Last updated: July 4, 2026

ZestyGlue ("we", "us") is a webhook connector service operated as a small, independently run project. This policy describes what data we collect, why, and how you can control it. It applies to zestyglue.com and the ZestyGlue service.

1. What we collect

• Account data: your email address and a bcrypt-hashed password. We never store your password in plain text and cannot recover it — only reset it.
• Billing data: your Stripe customer and subscription IDs, and subscription status (trial, active, past due, canceled). Your card details are entered directly into Stripe's hosted Checkout and Customer Portal pages — they never pass through or touch our servers.
• Connector configuration: the label, source, and destination you choose for each connector, plus any credentials you enter (e.g. a webhook signing secret or a Discord webhook URL). These are encrypted at rest with Fernet symmetric encryption and decrypted only in memory, for a moment, when forwarding an event.
• Event logs: for each connector, we keep the most recent 200 events — their type, delivery status, any error message, and the first 200 characters of the incoming payload as a debugging preview. Older events are pruned automatically every night.
• Server logs: standard technical logs (IP address, timestamp, requested path) generated by normal web server and network infrastructure operation.

We do not use tracking cookies, and we don't run any third-party analytics or advertising scripts on this site. Your login session is a token stored in your browser's local storage, not a cookie.

2. Why we collect it

Every piece of data above exists to run the service you signed up for: authenticating you, billing your subscription, encrypting and using your connector credentials to actually deliver events, and giving you a debugging log so you can see what happened and why.

3. Who we share it with

• Stripe — processes payments and manages your subscription. Stripe has its own privacy policy governing the payment data it holds.
• Cloudflare — provides the network tunnel and TLS termination that gets traffic to our server; it sees encrypted traffic metadata like any CDN or proxy would.
• The destinations you configure — Discord, Slack, Telegram, Microsoft Teams, ntfy, Pushover, Notion, or Airtable. When an event fires, we send it to whichever destination you configured, exactly as instructed by your connector setup. We don't send your data anywhere you haven't explicitly pointed it.
• The sources you configure — whatever service you set up to send webhooks to your connector (Stripe, Shopify, GitLab, etc.) determines what data reaches us in the first place; that's between you and that service's own webhook configuration.

We do not sell your data, and we do not share it with anyone beyond what's needed to run the service as described above.

4. How long we keep it

Account and connector data is kept for as long as your account is active. Event logs are capped at 200 rows per connector and pruned nightly — we don't keep an unlimited history of your event traffic. Deleting a connector deletes its event log immediately.

5. Your rights

You can delete any connector yourself from its detail page at any time. To request deletion of your entire account and associated data, email [email protected] — we'll confirm and process the request. You can also request a copy of the data we hold about you, or ask us to correct anything that's inaccurate, at the same address.

6. Security

Passwords are hashed with bcrypt. Source and destination credentials are encrypted at rest. All traffic to zestyglue.com is served over HTTPS. No system is perfectly secure, but we've built this with the same care we'd want applied to our own credentials.

7. Children's privacy

ZestyGlue is not directed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we'll remove it.

8. International data

We use infrastructure providers based in the United States (including Stripe and Cloudflare), so your data may be processed there regardless of where you're located.

9. Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of ZestyGlue after a change means you accept the updated policy.

10. Contact

Questions about this policy or your data: [email protected].