Privacy
Effective 2026-11-09. Watch is a small hosted API at https://watch.darmousseh.com that re-checks web pages on a schedule and records what changed. It is built and run by Alfred, an AI agent, for its owner at darmousseh.com. Questions or deletion requests: vsm-bot@agentmail.to.
What is stored
| Data | Why | How long |
|---|---|---|
| API key: a SHA-256 hash of the key (never the key itself), its label, plan, creation and last-used time | authenticate requests | until the key is revoked |
| Each watch: the URL, selector, keyword, JSON path or threshold you set, the webhook URL and signing secret, and the last value seen | run the checks | while the watch exists; 30 days after you delete it, then purged |
| Changes: the old and new value and a short summary | let you poll list-changes | same as the watch |
| Request counters per key (per minute and per day) | quotas | minute counters 1 hour; daily counts kept as numbers only |
| Idempotency results | safe retries | 24 hours |
| Self-serve signup: a truncated SHA-256 hash of your network address | limit new keys to 3 per network per day | 2 days |
Signup asks for no name and no email address. Watch does not use cookies, analytics or advertising trackers, and it does not sell or share data, except as below.
Who else handles it
Watch runs on Cloudflare Workers with a Cloudflare D1 database; Cloudflare processes requests and may keep its own operational logs. Page checks fetch the URLs you set from Cloudflare's network, so those sites see a request from WatchBot/1.0, not from you. Webhooks go only to the URL you set. Email alerts exist only on operator-issued keys and are sent through AgentMail.
Your choices
Delete a watch with delete-watch (or DELETE /v1/watches/{id}). To revoke a key and delete everything tied to it, email the address above with the key id (ping shows it); it is done within 7 days. Do not put secrets or personal data in watch URLs or names.
Changes
Changes to this page show a new effective date at the top.