Legal

Privacy policy.

What we collect, why we collect it, and the controls you have. We keep this short on purpose — monitoring your uptime should not mean surrendering your privacy.

Version · 30 October 2026

0. This website

Hetzner hosts the website in Germany. We serve fonts and website files ourselves, do not embed third-party advertising trackers and set no new statistics cookies.

Server-side usage statistics

We use GoatCounter on our own servers to evaluate the use and technical quality of our public pages and login and registration. Collection takes place on the server, without a statistics script in your browser. Records contain public paths without URL parameters, time, referring domain or a known public page on our sites, country, browser and operating system. Internal product pages and account contents are excluded.

To group repeated requests, we generate a pseudonymous identifier from the IP address and browser information for a window of up to eight hours. IP addresses and complete User-Agent headers are not permanently stored. Records are not linked to customer accounts.

We base this processing on our legitimate interest in operating and improving our service under Art. 6(1)(f) GDPR. You may object on grounds relating to your particular situation at privacy@upfour.io. The browser signals Do Not Track and Global Privacy Control prevent collection. A refusal saved through the former statistics dialog continues to be respected until it expires; no new statistics preference cookies are set.

No data is sent to external analytics providers. Events are deleted after 90 days; local backups may retain them for up to seven additional days.

Country lookup uses IP geolocation by DB-IP (CC BY 4.0), downloaded to our servers; your browser does not contact DB-IP.

Contact inquiries

When you use the contact form, we process your name, email address, selected topic and message to answer your inquiry by email. Delivery to our contact inbox uses the email provider listed below. An inquiry does not create a user account, subscription or launch mailing-list entry.

In-app inquiries may also include your selected page/Company context and an error reference. The legal basis is Art. 6(1)(b) for contract assistance or pre-contractual requests; otherwise Art. 6(1)(f) for answering inquiries. Our inbox is hosted by Hetzner in Germany. We review and delete ordinary resolved support contents after twelve months; business correspondence and necessary claim records remain purpose-restricted for their applicable retention period. Please provide only information needed to answer the inquiry.

1. Information we collect

We collect information you provide directly (email, name, password) and data generated through your use of the Service (monitor configurations, check results, incident history).

2. How we use your information

We act as controller for our own purposes. Account and contract administration rely on Art. 6(1)(b); account administration for employees and representatives of business customers relies on Art. 6(1)(f). Our interests are usable, secure Company access and documented authorization. Statutory billing and retention duties rely on Art. 6(1)(c), while abuse prevention and technical error analysis rely on Art. 6(1)(f).

Monitoring contents, customer on-call schedules, status pages and their recipients are processed on customer instructions. The customer determines purposes, legal bases and lawful contents. Agency work may follow the chain end customer → agency → up4. We forward rights requests about those contents to the relevant controller and assist them.

A reachable account email, secure authentication and details needed for orders and invoices are required for the respective service. Without them we cannot provide it. Optional profile information is not a prerequisite. We do not make solely automated decisions producing legal or similarly significant effects under Art. 22 GDPR.

Information provided by others

A Company or agency may invite you, name you as a contact or alert recipient, or supply a status-email address. The source is then that customer or its authorized members. Categories include contact details, role, Company affiliation and supplied work contents. The interests above apply to our own account administration; the respective controller informs you about contents processed on its behalf. Importing an address does not constitute advertising consent.

3. Data storage and security

The core application and primary database run in Germany. Checks run in the region configured for the monitor; our fleet includes Germany, the United States, Singapore and Australia on Hetzner and UpCloud infrastructure. Regional checks receive the configuration needed to contact your endpoint. Keyword checks read a bounded response body; ordinary check results do not retain that body.

Public application connections use HTTPS. Stored HTTP Basic Auth passwords and the supported secret fields use application-layer encryption. Backup and object-storage encryption are separate protections. This is not a claim that every field, disk or internal network connection is encrypted.

We use self-hosted Sentry for error analysis. Before transmission, filters remove request contents, cookies and user objects; session replay and profiling are disabled. Reduced events contain technical errors, release and route and are cleaned up under the configured 30-day retention. Selected operational alerts are also sent by email and follow the mailbox periods.

4. Data retention

Individual check results stay in the primary database for up to 7 days (“hot” storage). Beyond that they live as aggregated rollups plus a compressed cold archive, kept for your plan’s retention window — 62 days on pay as you go, 90 on Team, 365 on Agency. Monitor configuration, incidents and status-page history are kept for as long as the account exists. You can export monitoring reports via Reporting. For a personal-data access request, use the contact below. Company members can permanently delete their own identity, credentials, sessions and memberships in Settings; shared Company data remains with the Company. Deleting the whole Company requires its owner’s explicit request to privacy@upfour.io. After ownership and financial review, we delete the Company’s product data, public shares, local attachments, cold archives and Stripe customer profile. A restore-safe marker prevents a backup from reviving them. For accounting, we retain pseudonymous records required by law: invoice/payment records for up to eight calendar years and accounting books/totals for up to ten; pseudonymous request and approval references are removed after six. Promotional and starting credit is not refundable; remaining paid top-up credit is reviewed and refunded on request where applicable.

Operational data has separate periods: heartbeat source IPs seven days; ping history 90 days; operator-audit IPs 30 days; delivery diagnostics and completed webhooks 30 days. Completed notification records remain for up to 400 days, with necessary retry/billing evidence retained until completion. DPA acceptance records remain during the engagement and for six full calendar years after its end. Internal access-export files expire within seven days.

Requested status emails include an unsubscribe link requiring no account. Unsubscribing removes the address; a page-bound pseudonymous suppression prevents silent reactivation by import or restore. A new subscription requires fresh confirmation. Unconfirmed subscriptions are removed after 14 days once no recently renewed confirmation link remains valid. Our own status emails fulfil the requested information service under Art. 6(1)(b); suppression and confirmation records support abuse prevention under Art. 6(1)(f). For customer status pages, the customer determines the legal basis.

5. Providers, recipients and international processing

Providers have different roles. Infrastructure and delivery services process data on our instructions; payment services also process data for their own purposes. European provider ownership does not mean that every processing location is in Europe.

  • Hetzner Online GmbH (Germany): core application, database, German checkers and our support/contact mailboxes. Mailboxes contain sender details, messages and attachments.
  • UpCloud Oy (Finland): a checker in Frankfurt and regional checkers in Chicago, Singapore and Sydney. Outside the EU its delivery chain includes UpCloud USA Inc., UpCloud Asia Pte. Ltd. and UpCloud Asia Pacific Pty Ltd. at those locations. See UpCloud's DPA and subprocessors.
  • Ploi B.V. (Netherlands): server administration, deployment and domain provisioning; server identifiers, IP addresses, domains and operational configuration.
  • Scaleway S.A.S. (France): delivery of account, alert, support and operational emails through Transactional Email in Paris (fr-par). This includes addresses, message content and delivery metadata. Scaleway Object Storage in Paris also stores archives, report snapshots, erasure/recovery records and encrypted database backups. See Scaleway's Data Processing Agreement.
  • Stripe Payments Europe, Limited (Ireland), with the Stripe/Link entities involved in the chosen payment service: billing, payment and Managed Payments merchant-of-record services. Stripe is an independent controller for purposes including fraud prevention, regulated payments and legal duties, and a processor for other specified services. Monitor URLs, request headers and bodies are not part of our Stripe billing payload. See Stripe's privacy information and transfer terms.
  • Cloudflare, Inc. (United States): DNS/domain services and hosting of our separate public service status site at status.upfour.io. Visiting that site involves processing technical connection data as part of our own platform operations. See Cloudflare's DPA.

Sentry and GoatCounter run on our own infrastructure. Their hosted services receive no error or analytics data. Sentry's up4 operational alert emails pass through Scaleway to our Hetzner mailbox. User-configured notification services receive the corresponding alert; public status pages and shared reports disclose the content their owner publishes.

Transfers outside the EEA require the applicable provider agreement and a valid transfer mechanism, such as Standard Contractual Clauses or an applicable adequacy decision. The references above explain the respective provider's mechanisms; they do not imply that every provider has the same role, location or certification. Contact privacy@upfour.io for the safeguards relevant to your use.

6. Your rights

You can access and update your personal data through Settings. Company members can delete their own identity there after re-authentication. A restore-safe deletion marker prevents a database backup from reviving it. Company owners must first transfer ownership or request deletion of the whole Company at privacy@upfour.io; Company-wide requests are reviewed manually to settle subscriptions, refunds and disputes before irreversible deletion and to identify the statutory billing records that must remain. Under the GDPR you also have the rights to access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority.

7. Cookies and browser storage

We only set cookies that a feature you are using needs:

  • Sign-in: one host-only HttpOnly session cookie that expires after 24 hours at the latest. Its random credential cannot be read by scripts in the browser; only its hash is stored on the server.
  • Sign-in with Google or GitHub: a cookie that secures the sign-in flow and expires after five minutes.
  • Protected status pages: after you open one through an access link or confirm an e-mail code, a cookie that keeps access open for 15 minutes.
  • Language choice: when you switch the language on the website, a cookie holding your choice ("de" or "en"), so the homepage opens in that language on your next visit. It expires after one year. Without that choice, the homepage follows your browser's language setting; nothing is stored for that.

The website, documentation, application and status pages also keep entries in your browser's local storage (Local Storage and Session Storage):

  • Settings you choose yourself, such as the colour theme, a status page's language, list view and density, the selected client or the language of code examples.
  • Work in progress, so nothing is lost on reload, such as an import draft, an invitation link until sign-in is complete, recently opened items in the command palette or notices you have dismissed.

Session Storage entries disappear when you close the tab. The others stay until you clear them in your browser or the feature no longer needs them.

These cookies and entries only provide the feature you are using, so no consent is required (Section 25(2) No. 2 TDDDG). We set no statistics or advertising cookies and use none of these entries to recognise you. You can clear cookies and local storage in your browser at any time; the defaults then apply again and you sign in anew.

8. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification.

9. Controller & contact

Controller within the meaning of Art. 4(7) GDPR:
wissmann media, Inh. Dennis Wissmann, Vennstr. 86, 40627 Düsseldorf, Germany (see imprint).

If you have questions about this privacy policy or want to exercise your rights, contact us at privacy@upfour.io.

You may complain to a data protection authority, particularly where you habitually live, work or believe an infringement occurred. The authority for our registered location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany. No data protection officer is currently designated.

Objection: For processing based on legitimate interests, you may object for reasons relating to your particular situation. You may object to direct marketing at any time without giving a reason. Consent may be withdrawn at any time for the future. We normally respond to rights requests within one calendar month and inform you within that period if a legally permitted extension is necessary.

© 2026 up4 · Read the terms of service →