Privacy notice

Last updated 24 September 2026

PitWatch monitors pump equipment in the buildings where it is installed. This notice covers the personal information it holds, which is only what it needs in order to tell somebody that a pump needs attention.

What is held

Name, so an alert can be addressed to a person.
Email address, if that person wants email alerts.
Mobile number, if that person wants text alerts.
Whether they want each of those, and a record of when messages were sent to them, so a missed alert can be investigated.
For anyone who signs in, a password, stored only as an Argon2 hash which cannot be turned back into the password.

Everything else PitWatch records is about equipment: electrical current, float switch positions, when pumps ran. None of it is about people.

Where it is held

In PitWatch's own database, on servers it runs in Amazon Web Services in the United States, reachable only over an encrypted connection. Backups are encrypted and held in the same account. Nothing held here is sold, rented or shared. Phone numbers and email addresses are passed to the messaging and email providers only in order to deliver a message, and for no other purpose.

What goes out to look up the weather

PitWatch can show the rain over the equipment, because rain is what makes an ejector pit work. To do that it sends a latitude and longitude to Open-Meteo, which needs no account and is told nothing else: no address, no site name, no account names, and nothing about any person.

Those coordinates are rounded to two decimal places, roughly a kilometer, which is coarser than the building and finer than any rainfall forecast, so the rounding loses nothing and the request does not point at an address. If an administrator uses the address lookup on the settings page, the address they typed is sent once, at that moment, to OpenStreetMap's Nominatim geocoder to be turned into those coordinates. It is not sent again, and coordinates can be entered by hand instead so that it never is.

How long it is kept

Contact details are kept until somebody asks to be removed, or until the administrator removes them. Equipment readings are kept on a rolling schedule and are not personal information.

Your choices

You can ask at any time to see what is held about you, to correct it, to stop either kind of message, or to be removed entirely. Replying STOP to a text message stops text messages immediately, without needing to ask anybody.