ismysiteup

Privacy Policy

Last updated: July 7, 2026

1. Introduction

ismysiteup ("we", "our", "the Service") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

Data controller. The Service is operated by Sea Jay Media Digital Marketing LLC, a limited liability company formed in Wyoming, USA. For any privacy request or to reach the controller, contact contact@ismysiteup.net.

2. Data We Collect

Account Information

  • Email address — used for authentication and account recovery
  • Password — stored as a bcrypt hash (we never store plaintext passwords)

Monitor Data

  • URLs you add for monitoring
  • Monitor names and configuration (check interval, expected status, timeout)
  • Check results: status (up/down), response time, error messages
  • Server information: IP address, country, and city of monitored URLs
  • SSL certificate details: expiry date and issuer
  • Incident history: downtime start/end times and error details

Data Monitors & API Client

  • Data Monitor configurations and the field values returned by the endpoints you connect. These values may include personal data belonging to your own users (for example, names or emails in an orders or signups endpoint).
  • API Client data — the endpoints, headers, request bodies, authentication tokens, and request/response history you store.
  • API endpoint test definitions, assertions, and run results.

API Keys & AI Assistant

  • Personal access tokens (API keys) you generate to access our API.
  • If you use the AI assistant: the prompts you send and the AI provider credentials (API key) you supply.

Notification Credentials

  • Email — recipient addresses for alert delivery
  • Custom SMTP — server host, port, username, and password
  • Telegram — bot token and chat ID
  • WhatsApp — phone number and CallMeBot API key
  • Slack — incoming webhook URL

All sensitive credentials — SMTP passwords, Telegram bot tokens, WhatsApp API keys, Slack webhook URLs, stored API-Client authentication tokens, your API keys, and your AI provider keys — are encrypted at rest using AES-256-GCM and are decrypted only at the moment they are needed.

Billing Information

Payments are processed by Stripe. We do not store your credit card number, expiry date, or CVC. We only store your Stripe customer ID, subscription ID, plan type, and subscription status. For Stripe's privacy practices, see stripe.com/privacy.

3. How We Use Your Data

  • Monitoring — We make HTTP requests to your URLs to check availability
  • Notifications — We use your notification credentials to send alerts
  • Account management — We use your email for login and service communications
  • Billing — We process payments through Stripe for paid plans

We do not sell, share, or provide your data to third parties for marketing purposes.

Legal basis (EU/EEA). Where the GDPR applies, we rely on: performance of our contract with you (operating the Service, running your monitors, and billing); our legitimate interests (securing the Service and basic, privacy-respecting analytics); and your consent (for non-essential cookies and any marketing). For data you process through Data Monitors or the API Client that belongs to your own users, you are the controller and we act as your processor on your instructions.

4. Data Storage and Security

  • Data is stored in a PostgreSQL database
  • Sensitive credentials are encrypted with AES-256-GCM
  • Passwords are hashed with bcrypt (12 salt rounds)
  • HTTPS is enforced with HSTS headers
  • Security headers protect against XSS, clickjacking, and content sniffing
  • SSRF protection prevents monitoring of private/internal network addresses

5. Data Retention

  • Error logs — automatically deleted after 30 days
  • Response time data — last 50 data points kept per monitor
  • Incidents — retained for the lifetime of the monitor
  • Account data — soft-deleted when you delete your account; permanently removed after 30 days

6. Sub-processors & Third-Party Services

We rely on the following third parties to run the Service. Some act as sub-processors of data:

  • Hetzner — cloud hosting and database infrastructure.
  • Stripe — payment processing. Privacy Policy
  • Our email/SMTP service — delivery of built-in alert and account emails from our domain.
  • Telegram Bot API — notification delivery (only if you enable Telegram alerts). Privacy Policy
  • CallMeBot — WhatsApp notification delivery (only if you enable WhatsApp alerts). Privacy Policy
  • Slack — notification delivery (only if you enable Slack alerts). Privacy Policy
  • AI providers (Anthropic, OpenAI, and/or Google) — only if you use the AI assistant, your prompts are sent to the provider you configure, using your own API key.
  • Google Analytics — usage analytics to help us improve the site. Privacy Policy

International transfers. Some of these providers may process data outside the EU/EEA (for example, in the United States). Where that occurs for EU personal data, transfers rely on an appropriate safeguard such as Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified.

7. Cookies

We use essential cookies required for authentication (session cookies), and Google Analytics cookies to understand how visitors use the site so we can improve it. We do not use third-party advertising cookies.

8. Your Rights

You have the right to:

  • Access your data — view all your monitors, settings, and incidents from the dashboard
  • Export your data — use the JSON export feature to download your monitors
  • Correct your data — edit your monitors and notification settings at any time
  • Delete your data — delete individual monitors or your entire account from Settings

If you are located in the EU/EEA, you may also have rights under the GDPR including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

9. Children

The Service is not intended for users under 16 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related questions or requests, contact us at contact@ismysiteup.net.