Privacy Policy

Information we collect

We collect data in two ways: directly from you when you create an account, subscribe to alerts, or submit an outage report; and automatically from your use of the service when you run checks, receive alerts, or visit our pages.

• Account data — email address and password hash when you sign up.
• Usage data — domains you check, monitor configurations, and alert preferences.
• Report data — when you submit an outage report we store the report type, the service, and a pseudonymous fingerprint: a short keyed (salted SHA-256) hash of your IP address and browser user-agent. The report row itself does not contain your IP address, and we cannot look up the hash without our secret key — but a keyed hash of an IP is still treated as personal data, not as anonymous data. It exists only to ignore duplicate reports from the same source within a five-minute window. We also record the approximate country, region, and city supplied by our hosting provider, so we can show where an outage is being reported from.
• Security and abuse-prevention data — to stop brute-force logins, spam signups, and quota abuse we temporarily process your IP address(and, for password-reset throttling, the email address entered) as short-lived rate-limit counters. These are held separately from your account, are used only to enforce limits, and are deleted automatically — counters within hours, usage records within 7 days. We rely on our legitimate interest in keeping the service available and secure.
• Payment data — processed securely by Stripe. We never store card details.

How we use your data

We use collected information to provide the service: running checks, sending alerts, processing billing, and improving outage detection accuracy. We do not sell your data to third parties.

Third-party services

• Vantlir Intelligence — our own outage-intelligence layer, operated by Vantlir LLC. It is built on third-party AI providers: Anthropic (Claude) and, for live web signals on major services, Perplexity. Normally only the domain being checked and our own outage statistics are sent. If you type a question into the AI assistant, that message is sent to Anthropic to answer it — so please do not put personal details in it.
• Cloudflare Turnstile — anti-bot check on sign-up and some logins; Cloudflare receives your IP address and browser signals to score the request.
• Neon (database hosting) and Upstash (rate-limit counters) — store the data described above on our behalf.
• Stripe — handles payment processing for paid subscriptions.
• Resend — delivers email alerts to subscribers.
• Vercel — hosts the application infrastructure and provides page-view analytics (Vercel Analytics). These are aggregated, anonymised metrics only; this analytics does not set advertising or cross-site tracking cookies, so — unlike the two vendors below — it runs on all visits rather than being gated behind the consent banner.
• Statcounter — aggregate visitor analytics (page views, referrers, countries). Loaded only after you accept tracking cookies in the consent banner; if you decline, it is never loaded or executed.
• Google AdSense — serves advertisements on this site. Google and its partners use cookies to personalise ads based on your browsing history. For transparency about how this loads: the AdSense script tag is present on our pages so that Google can verify site ownership, but no ad request is made and no advertising cookie is set until you accept tracking cookies. If you decline, we signal to Google that ads must be non-personalised. You can also opt out at Google Ad Settings or optout.aboutads.info.

Cookies & advertising

We use the following cookies:

• Session cookie — a single HttpOnly, SameSite=Strict cookie that keeps you logged in. It contains no tracking data and is deleted when you log out or it expires.
• Consent cookie — records whether you accepted or declined tracking cookies, so we do not ask again on every visit. It stores only that choice and lasts up to one year.
• Advertising cookies — Google AdSense and its partners (including DoubleClick) set cookies to serve relevant ads and measure performance. These may be used to build a profile of your interests based on sites you have visited. They are set only if you accept tracking cookies. You can review Google's privacy policy at policies.google.com/privacy.

Your choice, and changing it. On your first visit we show a consent banner where you can accept or decline tracking cookies. You can change that decision at any time using the Cookie settings link in the footer of any page — including withdrawing consent you previously gave, which is as easy as granting it.

To opt out of personalised advertising, visit Google Ad Settings or the NAI opt-out page. Non-personalised ads may still appear.

US state privacy rights

We do not sell your personal information for money, and we share it with the vendors listed above only so they can provide the service on our behalf. However, if you accept tracking cookies, the advertising cookies described above may be treated as a “sale” or as “sharing for cross-context behavioral advertising” under some US state privacy laws, including the California Consumer Privacy Act as amended by the CPRA.

To opt out, decline tracking cookies in the consent banner — or change your choice at any time via Cookie settings in the footer. Declining stops advertising cookies from being set and signals to Google that ads must be non-personalised. Depending on where you live, you may also have the right to access, correct, or delete your personal information; email privacy@websitedown.com and we will action it. We will not discriminate against you for exercising any of these rights.

Data retention

Account data is retained while your account is active. Outage reports and check history are retained for up to 90 days. You can delete your account and everything tied to it at any time from Dashboard → Settings → Delete account — this removes your monitors, alert channels, status pages, and history, and cancels any active subscription. You can also email privacy@websitedown.com and we will action it for you.

Contact

For privacy-related inquiries, email privacy@websitedown.com.