Privacy

Updated 22 September 2026 — free beta.

Controller and contact

The controller is the UpKeeper publisher identified in the legal notice. Use that contact to exercise your rights: Legal Mentions.

Data and purposes

• Account: email, hashed password, language, timezone, and terms acceptance date/version, to manage access. No identity document is collected.
• Monitoring: URLs, names, configuration, metrics, notifications and channels, to perform requested checks and alerts.
• Publication: page title/logo, public services, maintenance, incidents and updates are public when you publish them.
• Publication audit: internal account ID/email, IP address, date, action type and public-content ID. Message text and files are not copied into this log.
• Waitlist: account email and subscription state, only for requested Pro news.
• Security: technical logs, IP addresses, dates, login and error events.

Legal bases

Account, monitoring and requested publication rely on performance of the service. Security and proof rely on legitimate interests. Waitlist emails rely on your voluntary request. Some retention may be legally required.

Recipients and third parties

The publisher and necessary providers may process data: the declared host and Resend for email when configured. jsDelivr, unpkg and flagcdn receive request metadata. Monitored sites receive probe requests; webhook recipients are selected by users.

No payment is requested during beta and data is not sold. Transfers outside the EEA may require suitable safeguards depending on actual providers.

Retention and deletion

• Account settings and announcements remain while the account exists and are removed from the active database when it is deleted.
• Publication audit metadata is kept for 12 months, including after account deletion, then purged automatically.
• A trashed monitor can be restored for 15 days, then is purged when services start.
• Metrics may remain in Prometheus for its configured 90-day retention; the free interface exposes up to 30 days.
• Other log and backup retention depends on infrastructure and must be finalised before public launch. Account deletion may not instantly erase technical copies or data already viewed by third parties.

Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability, object to legitimate-interest processing, and complain to the CNIL.

Account and monitoring data are required for those functions. The waitlist and public status page are optional. No automated decision-making profiling is used.