Privacy Policy

Who we are

UptimeGlobe ("we", "us") provides the uptime monitoring service at uptimeglobe.com and its subdomains. For the personal data described here, we are the data controller. Contact: our contact form.

What we collect

• Account data — your email address and a salted hash of your password (we never store the password itself). Optionally a TOTP two-factor secret, stored for your account.
• Service configuration — the monitors, status pages, alert channels and team members you set up. Alert-channel credentials (e.g. webhook URLs, SMS provider keys) are encrypted at rest.
• Check results — the outcomes of monitoring checks against the endpoints you configure (status, timing, region). These describe your endpoints, not people.
• Operational logs and audit trail — security-relevant actions on your account (logins, configuration changes) with timestamps, kept to protect your account and to debug the service.
• Support email — whatever you send us at the support address, retained as ordinary correspondence.

We do not collect data for advertising, and we do not sell or share personal data for advertising purposes.

Cookies

The app uses two strictly necessary cookies for login sessions (a short-lived session token and a refresh token). This website sets no cookies of its own, but it uses Google Analytics (see Analytics below), which sets two cookies in your browser: _ga and a second one whose name starts with _ga_. Both are kept for 2 years. We do not use Google’s advertising features, and there are no advertising or cross-site tracking cookies of ours.

Analytics

We measure overall traffic with cookieless analytics, provided by a third party who processes it on our behalf. It sets nothing on your device, reads no cookies, does not fingerprint you and does not follow you across other sites. It gives us counts such as page views and loading times, never profiles of individuals.

This website also uses Google Analytics to understand how it is used. It sets the cookies described above and sends data about your visit to Google: the pages you view, the page you came from, your approximate location, and your browser, device and language. Google Ireland Limited and Google LLC process this data for us; transfers outside the EEA and the UK rely on the EU–US Data Privacy Framework and Standard Contractual Clauses. Google Analytics keeps event data for 2 months. We do not use Google’s advertising features. Our legal basis is our legitimate interest in understanding and improving the site.

You can opt out of Google Analytics by blocking or deleting cookies in your browser settings, or by installing Google’s Google Analytics opt-out browser add-on.

Bot protection (Cloudflare Turnstile)

Signup and login are protected by Cloudflare Turnstile, which tells humans from bots without a CAPTCHA for you to solve — on the login page it runs invisibly. To do that, Turnstile looks at signals from your browser session, such as your IP address and browser characteristics, and processes them on our behalf for the sole purpose of bot mitigation. Our legal basis is our legitimate interest in keeping accounts secure. Those signals are used for that check alone: no profile of you, and nothing for advertising. What Turnstile collects and how it is handled is set out in the Cloudflare Turnstile Privacy Addendum.

Where data lives and who processes it

We use a small number of specialist providers to run the service — infrastructure and hosting, and transactional email delivery — and they act on our instructions as processors, never for their own purposes. Where data is transferred outside the EEA/UK, those providers rely on recognized transfer mechanisms (the EU–US Data Privacy Framework and/or Standard Contractual Clauses). If you need the current list by name, for a vendor review or your own compliance records, ask through our contact form and we will send it.

Legal bases (GDPR)

• Contract — account data, configuration and check results: we need them to provide the service you signed up for.
• Legitimate interest — security logs, bot protection, aggregate analytics.
• Legal obligation — records we must keep, e.g. around billing when it applies.

Retention

• Check history is retained per your plan's retention window and then deleted on a scheduled sweep.
• Account data is kept while your account exists.
• When your account is deleted, tenant data is hard-deleted — removed, not flagged. Residual copies in encrypted backups and logs age out on their own short schedules.

Your rights

You can access and correct your data in the app, and close your account from the app at any time. To exercise your GDPR rights — a full export of your data, permanent deletion, restriction, or objection — send a request through our contact form, using your account address; we honor export and hard-deletion requests and will respond within 30 days. You also have the right to complain to your local data-protection authority.

Children

The service is not directed at children and requires users to be at least 16.

Changes

We'll update this page when our practices change and note the date above. For material changes we'll notify account holders by email or in-app.