Privacy Policy

The controller of personal data processed through UpDownTracker is Armantas Gurskis, operating under Lithuanian individual activity certificate No. 1384150, Lithuania. For privacy questions or requests email info@updowntracker.com.

Account: email address, password hash or Google sign-in identity, registration and sign-in times, acceptance of these documents with version and time, and your optional product-news choice.

Monitoring: monitor names, target addresses, keywords, Heartbeat settings, alert and report preferences, additional alert recipient email addresses you add (after they verify them), and the results we generate: status, response times, incidents, SSL, DNS and tracking observations, and history.

Billing: plan, trial and subscription status, and Stripe customer and subscription identifiers. Card details are entered on Stripe pages and are not received by us.

Communication: messages you send us, including through the contact form (your email address and message).

Security and operations: technical data such as IP address and browser information processed when you use the site and by our anti-abuse check, application logs, and monitoring-network records that link a probe, time, account, monitor, destination host or IP, port and policy decision. These network records contain no URL paths, query strings, page content, cookies or passwords.

Analytics (only with your consent): pages visited and product events such as sign-up, plan selection, checkout and monitor creation, without monitor addresses.

iOS app (if you use it): your session and, if you enable it, a device identifier for notifications.

• Providing your account, monitoring, alerts, reports, billing and support — performance of our contract with you.
• Security, abuse prevention, investigating unwanted monitoring and improving reliability — our legitimate interest in a safe and working service.
• Keeping invoices and payment records — legal obligation.
• Analytics cookies and product-news emails — your consent, which you can withdraw at any time.

We send requests only to the targets you configure. Standard requests identify themselves as UpDownTracker. Active Tracking loads your page and its third-party resources in an isolated browser and may accept a cookie banner on that page. We do not store page content beyond the observations shown in your account.

Necessary cookies keep you signed in, remember your language and store your cookie choice (for 183 days). Our anti-abuse check (Cloudflare Turnstile) runs on signup, password recovery and contact forms. Google Analytics, loaded through Google Tag Manager, runs only after you accept analytics cookies; advertising storage and personalisation remain disabled. You can change your choice at any time with the Cookie settings link at the bottom of public pages.

We use processors that act on our instructions: Supabase (authentication and database, EU region), Vercel (web hosting), Oracle Cloud Infrastructure (monitoring servers, EU region), Cloudflare (Turnstile and private archive storage), Resend (email delivery) and Google (Analytics with consent, and Google sign-in if you choose it). Stripe processes payments and acts as an independent controller for payment data under its own privacy policy. Some providers are established in or access data from the United States; such transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

Account, monitoring configuration and history are kept while your account exists. Older detailed check results may be archived into private storage and summarised; we may delete detailed results older than 90 days while keeping daily summaries for up to two years. When you delete your account, its data, including archived history, is deleted through our deletion process; backups expire on their regular cycle. Invoices and payment records are kept for the period required by Lithuanian accounting law. Records of your acceptance of these documents are kept while your account exists and as long as needed to demonstrate it. Security and abuse records are kept only as long as needed to investigate and protect the service. Contact messages are kept as long as needed to handle your enquiry. Analytics data follows our Google Analytics retention setting.

You may ask for access to, correction or deletion of your data, restriction of processing, data portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier processing. Email info@updowntracker.com; we answer within one month. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or the authority in your country.

Access to data is limited to what each part of the service needs, protected by authentication and database access rules, and data is encrypted in transit. Monitoring runs on separate servers with restricted network access.

We will publish any update here with a new date and notify you of material changes. The service is not intended for children.

See also the Terms of Service.