Privacy

Browsing the site

You can look at every status page without an account. We do not use advertising or analytics scripts, and fonts are served from this site.

The servers that run this site may keep standard access logs, which include IP addresses, for a short time to keep the service running and to fight abuse.

Reporting a problem

When you press “I have a problem” we store the service, the kind of problem you chose and the time.

We also store an approximate location. It is worked out from your IP address when you send the report, either from the location our network provider adds to the request or from a downloaded IP geolocation database. It is a country and, where it is known, a city with its position rounded to about a kilometre. It can be wrong: a VPN or a mobile network can put you in another place.

We do not store your IP address. To count one report per person every 10 minutes we store a one-way code made from your IP address and browser, which cannot be turned back into either.

A city is shown on a public page only when several people reported from it in the same 24 hours, so a single person cannot be picked out.

Reports are deleted after 30 days.

Checks that you are a person

When you create an account, ask for a password reset link or report a problem, we may ask you to pass a Cloudflare Turnstile check, which keeps automated programs from filling the site with fake accounts and reports.

The check loads a script from Cloudflare and sends Cloudflare information about your browser and connection so that it can tell people from programs. We receive only its answer, which we use once to let your request through. Cloudflare's own privacy policy describes what it does with that information.

Checking a website

When you check a website we request it from our servers and show you the result. A one-off check is not saved.

Having an account

An account stores your name, your email address and a hash of your password (never the password itself).

It also stores the websites you monitor with their settings and every check result (kept for 90 days) and incident we record for them, and your alert channels. The addresses and secrets of alert channels are encrypted in the database.

When you are signed in we keep one cookie that identifies your session. It is not readable by scripts on the page and is removed when you sign out. Your light or dark theme choice is kept in your browser.

We send you email for three things only: confirming your address, resetting a password, and the alerts you set up. Alerts by email go only to the confirmed address of your account.

If you add a Slack, Discord or webhook channel, alerts about your websites are sent to that address.

Your choices

You can delete a monitor, an alert channel or a monitor's history at any time, and you can pause monitoring. Deleting a monitor deletes its check results and incidents.

You can delete your account yourself from the account page. It deletes your monitors with their check results and incidents, your alert channels and their log, and your sign-in sessions.

Questions and requests

If you run a website we check and want us to stop, or you have a question about your data, write to us.

Where the location data comes from

Locations may come from a network provider in front of this site or from the DB-IP City Lite database, which is licensed under CC BY 4.0. IP Geolocation by DB-IP: https://db-ip.com.