DE Start monitoring
Legal

Privacy policy.

What we collect, why we collect it, and the controls you have. We keep this short on purpose — monitoring your uptime should not mean surrendering your privacy.

Last updated · July 2026

0. This website

upfour.io sets no cookies and loads nothing from third parties. No analytics scripts, no tracking pixels, no external fonts. Our web server (hosted by Hetzner in Germany) keeps standard access logs — IP address, time, requested page — for security and capacity purposes, deleted on rotation. That is the complete list, which is why there is no cookie banner.

1. Information we collect

We collect information you provide directly (email, name, password) and data generated through your use of the Service (monitor configurations, check results, incident history).

2. How we use your information

We use your information to operate and improve the Service, send notifications about your monitors, and communicate important updates about your account.

3. Data storage and security

Your data is stored on secured servers. We use encryption in transit and at rest, and implement access controls to protect your information. Sensitive credentials (e.g., HTTP auth passwords) are stored in encrypted form.

4. Data retention

Individual check results stay in the primary database for up to 7 days (“hot” storage). Beyond that they live as aggregated rollups plus a compressed cold archive, kept for your plan’s retention window — 30 days on pay as you go, 90 on Team, 365 on Agency. Monitor configuration, incidents and status-page history are kept for as long as the account exists. You can export your data at any time via the Reporting section, and deleting your account deletes it.

5. Third-party services & subprocessors

We use the following subprocessors to operate the Service. Where a provider processes data outside the EU/EEA, transfers are safeguarded by EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

  • Hetzner Online GmbH (Germany) — hosting and infrastructure. EU.
  • Resend, Inc. (US) — transactional email delivery; the sending domain is hosted in the EU (eu-west-1). SCC/DPF apply.
  • Amazon Web Services EMEA SARL — standby transactional email delivery (SES, region eu-central-1). AWS Inc. (US) acts as sub-subprocessor; SCC/DPF apply.
  • Stripe Payments Europe, Ltd. (Ireland) — payment processing and invoicing. Stripe Inc. (US) acts as sub-subprocessor; SCC/DPF apply.
  • Functional Software, Inc. (Sentry) (US) — error monitoring; technical error data only. SCC/DPF apply.
  • Cloudflare, Inc. (R2) (US, EU jurisdiction storage) — long-term archive of check results. SCC/DPF apply.

Notification integrations you configure yourself (Slack, PagerDuty, Telegram, etc.) receive alert data under their own privacy policies. For business customers we offer a data processing agreement (DPA) covering the above.

6. Your rights

You can access, update, or delete your personal data through the Settings page. You can delete your entire account and all associated data at any time. Under the GDPR you also have the rights to access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority.

7. Cookies

The application uses one essential, host-only HttpOnly session cookie. Its random credential is never exposed to browser storage and only its hash is stored server-side. We do not use tracking or advertising cookies — in the app or on this site.

8. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or in-app notification.

9. Controller & contact

Controller within the meaning of Art. 4(7) GDPR:
wissmann media, Inh. Dennis Wissmann, Vennstr. 86, 40627 Düsseldorf, Germany (see imprint).

If you have questions about this privacy policy or want to exercise your rights, contact us at info@wissmann-media.de.

© 2026 wissmann media · Read the terms of service →