Last updated: September 7, 2026
1. Introduction
Uptimus ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy applies to uptimus.app and the Downdetector by Uptimus mobile application (together, the "Service"). It explains how we collect, use, disclose, retain, anonymize, and delete information. Please read this Privacy Policy carefully. If you do not agree with it, please do not access the Service.
2. Information We Collect
2.1 Personal Information You Provide
We collect information that you voluntarily provide to us when you:
- Register for an account: Email address, username, password (encrypted)
- Complete your profile: Display name, avatar, bio, preferences
- Submit reports: Service outage descriptions, timestamps
- Post comments: Comment text, replies to other users
- Contact us: Name, email address, message content
- Subscribe to notifications: Email address, notification preferences
2.2 Automatically Collected Information
When you access the Service, we automatically collect certain information:
- IP Address: Your device's IP address for security, fraud prevention, and geolocation
- Geolocation Data: Approximate location (country, city) derived from your IP address
- Device Information: Browser type, operating system, device type, screen resolution
- Usage Data: Pages visited, time spent, features used, click patterns
- Referral Information: The website that referred you to our Service
- Log Data: Server logs including timestamps, error messages, and system events
Important: We collect and store IP addresses to prevent abuse, detect fraud, provide geographically relevant information, and improve our Service. IP addresses are considered personal data under GDPR and other privacy laws.
2.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For detailed information, please see our Cookie Policy.
2.4 Third-Party Information
We may receive information from third parties:
- Social Login Providers: If you sign in using Google, Facebook, or other OAuth providers, we receive basic profile information (name, email, profile picture)
- Analytics Providers: Google Analytics provides aggregated usage statistics
- Geolocation Services: IP geolocation data from third-party APIs
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Service Provision and Improvement
- Create and manage your account
- Provide real-time service status information
- Display geographically relevant outage data based on your location
- Process and display your reports and comments
- Send notifications about services you follow
- Improve Service functionality and user experience
- Develop new features and services
3.2 Security and Fraud Prevention
- Detect and prevent fraudulent reports and spam
- Identify and block malicious users and bots
- Prevent unauthorized access to accounts
- Monitor for security threats and vulnerabilities
- Enforce our Terms of Service
3.3 Analytics and Research
- Analyze usage patterns and trends
- Understand how users interact with the Service
- Generate aggregated statistics and reports
- Conduct research to improve our algorithms
3.4 Communication
- Send service-related notifications and updates
- Respond to your inquiries and support requests
- Send marketing communications (with your consent)
- Notify you of changes to our policies
3.5 Legal Compliance
- Comply with legal obligations and regulations
- Respond to legal requests and prevent illegal activities
- Protect our rights, property, and safety
- Enforce our agreements and policies
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and context:
- Contractual Necessity: Processing necessary to provide the Service you requested
- Legitimate Interests: Fraud prevention, security, analytics, and Service improvement
- Consent: Marketing communications, optional features, and non-essential cookies
- Legal Obligation: Compliance with applicable laws and regulations
5. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
5.1 Public Information
Certain information is publicly visible by design:
- Your username and profile information
- Reports and comments you submit
- Your activity on the Service (if you choose to make it public)
5.2 Service Providers
We share information with third-party service providers who perform services on our behalf:
- Hosting Providers: Server infrastructure and data storage
- Analytics Services: Google Analytics for usage statistics
- Email Services: Transactional and notification emails
- Geolocation Services: IP-based location data
- Advertising Networks: Google AdSense for displaying ads
- Authentication Providers: OAuth login services
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.3 Legal Requirements
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or illegal activities
- Respond to emergencies
5.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have.
5.5 Aggregated Data
We may share aggregated, anonymized data that cannot identify you personally for research, marketing, or other purposes.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods
- Account and Mobile App Data: Deleted when a verified self-service deletion request completes, including profile data, sessions, follows, notification preferences, workspace memberships, and registered push devices
- IP Addresses: Retained for up to 2 years for security and fraud prevention
- User Reports, Votes, and Ratings: Deleted when they are linked to the account being deleted
- Comments: Personal content and account/location links are erased. A hidden, anonymous placeholder may remain only where needed to preserve reply-thread integrity
- Security and Moderation Events: May be retained in anonymized form, without account ID, email, IP address, precise location, or user-agent data, to prevent abuse and demonstrate security controls
- Payment Records: Payment processors may retain legally required tax, accounting, dispute, and anti-fraud records under their own legal obligations
- Analytics Data: Aggregated data retained indefinitely; individual data retained for 26 months (Google Analytics default)
- Log Files: Retained for 90 days for security and troubleshooting
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
7.1 GDPR Rights (EEA Residents)
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restriction: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent for processing at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
7.2 CCPA Rights (California Residents)
- Right to Know: Request information about data collection and use
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
- Right to Non-Discrimination: Equal service regardless of privacy choices
7.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You may also manage some settings directly in your account preferences.
7.4 Delete a Downdetector by Uptimus Account
You can request permanent deletion without reinstalling the Android application at uptimus.app/mobile/account/delete. The page requires a valid web sign-in, explicit confirmation, and reauthentication for sensitive operations. Shared workspace owners must transfer ownership before deletion so another person's workspace data is not destroyed.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data transmitted over HTTPS/TLS; passwords encrypted using industry-standard hashing
- Access Controls: Limited access to personal data on a need-to-know basis
- Security Monitoring: Regular security audits and vulnerability assessments
- Secure Infrastructure: Data stored on secure servers with regular backups
- Incident Response: Procedures in place to respond to data breaches
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by relevant authorities
- Other legally approved transfer mechanisms
10. Children's Privacy
The Service is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.
11. Third-Party Links and Services
The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
12. Do Not Track Signals
Some browsers have a "Do Not Track" feature that signals websites you visit that you do not want to have your online activity tracked. We currently do not respond to Do Not Track signals. You can manage tracking through your browser settings and our Cookie Policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date and, where appropriate, by email or prominent notice on the Service. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Your Privacy Matters
We are committed to transparency and protecting your privacy. If you have any questions or concerns about how we handle your personal information, please don't hesitate to reach out to us.