Up or NotUp or NotBack to Checker

Privacy Policy

Last Updated: October 2026

1. Privacy Principles & Philosophy

At Up or Not, our architecture is built around a core philosophy: minimal data collection and zero perpetual tracking. We believe you should be able to verify whether a service is down or diagnose its infrastructure health without being subjected to ad tracking, commercial data profiling, or persistent user databases.

We do not sell, rent, monetize, or broker personal information. All monitoring activities are transient by design, meaning data exists only for the duration necessary to satisfy the check and notify you upon recovery.

2. What Information We Collect & Process

We process only the minimum information strictly required to perform availability checks and deliver requested alert notifications:

  • Target Domain / URL: The domain name, hostname, or web address entered into the checker or audit tool. This is queried publicly via standard HTTP/HTTPS and DNS lookups.
  • Email Address (Voluntary): If you choose to enroll for recovery alerts when a service is down, your email address is encrypted in transit and stored solely to dispatch a notification when the service recovers.
  • Technical Diagnostics & Telemetry: Server response codes (e.g., 200, 502, 503), response latency (TTFB in milliseconds), TLS handshake timings, and HTTP header properties (e.g., HSTS, CSP, compression).
  • Transient Server Logs: Standard web server connection metadata (including anonymized IP addresses, timestamps, and request paths) maintained temporarily for DDoS defense, error logging, and rate limiting.

3. Transient Storage & Automatic Data Deletion

Unlike traditional monitoring services that retain your data indefinitely in marketing CRM systems, Up or Not implements automatic data disposal:

  • Alert Record Deletion: Once a monitored service recovers and sustains online uptime across the stability verification window (default: 60 minutes), your alert record—including your email address—is permanently purged from our database.
  • Diagnostic Report Expiration: Publicly generated security and performance report URLs (`/report/[id]`) automatically expire and are permanently deleted after 7 days.
  • No Persistent Marketing Lists: We never retain email addresses from past checks for promotional newsletters, follow-ups, or partner marketing.

4. Third-Party Infrastructure & Email Delivery

To deliver reliable, high-speed transactional alerts, we partner with reputable, privacy-compliant infrastructure providers:

  • SMTP2Go: Used exclusively as our transactional email delivery gateway. Email addresses are provided strictly to deliver requested uptime recovery notifications and are governed by strict data processing agreements.
  • Cloud Hosting & Edge Infrastructure: Our edge server nodes run within secured, SOC 2 compliant data centers utilizing automated firewalls, encrypted communication channels (TLS 1.3), and hardened runtime isolation.

5. Cookies, Local Storage & Tracking

Up or Not does not use third-party advertising cookies, cross-site trackers, or behavioral analytics cookies.

We utilize HTML5 Local Storage exclusively on your local browser to maintain a private list of your active checks on the client side. This data resides purely on your personal device, is never transmitted to advertisers or third parties, and can be cleared instantly at any time via the "Clear Local History" button on the home page or by clearing your browser cache.

6. Data Security & Encryption

We implement comprehensive technical and administrative security measures to protect transient data against unauthorized access, loss, or alteration:

  • Encryption in Transit: All communications between your browser, our servers, and third-party delivery gateways are encrypted using TLS 1.2 and TLS 1.3.
  • Strict Access Controls: Database clusters and backend workers are shielded behind private virtual networks with no direct public internet exposure.
  • Zero Sensitive Financial Data: The Service does not process credit cards, passwords, or personal identity numbers.

7. User Rights & Regulatory Compliance (GDPR & CCPA)

Depending on your jurisdiction, including under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you retain full rights regarding any personal data we process:

  • Right of Access & Portability: You may request confirmation of any active email subscription stored for your address.
  • Right to Erasure (Right to be Forgotten): While data automatically purges upon service recovery, you may request immediate manual deletion of any ongoing alert subscription at any time.
  • Right to Object: You may opt out of receiving any further automated communication.

8. Updates to this Policy & Contact

We may periodically review and update this Privacy Policy to reflect technical enhancements, architectural updates, or regulatory adjustments. Any revisions will be reflected by the "Last Updated" timestamp at the top of this page.

If you have questions, inquiries, or privacy requests regarding your data, please reach out via our contact channels.