Status Is UP privacy notice

Status Is UP (statusisup.com, "SIU") is operated by SID Monitor Pte Ltd. The same company also operates Status Is Down (statusisdown.com, "SID"). The two sites have separate accounts and separate databases. Questions or requests: [email protected].

SIU's pages, including the account area, load Google Analytics, ShareThis sharing tools and Google AdSense. These services may set cookies and receive your IP address, browser details and the page you are viewing. We send Google Analytics the page address without its query string or fragment. These scripts are not loaded in the staff administration area. SIU does not currently offer an on-site switch to turn them off. You can block or delete them with your browser settings or a content blocker.

The site is hosted on Amazon Web Services in the United States and delivered and protected by Cloudflare. Our servers and these providers keep standard technical logs, such as IP address, time, requested page and browser type, to run and secure the service.

The public checker fetches the public website address you enter. We do not save the results of anonymous public checks. To limit abuse, we keep short-lived counters in memory, derived from your IP address and the website checked. Published readiness pages describe public technical signals of websites, not people. Website owners can ask for a correction or removal at [email protected].

If you create an account, we store:

• your email address and name, plus any email addresses you verify;
• passkey public credentials (your device keeps the private key);
• sign-in links (valid for 15 minutes) and session tokens, both stored only in hashed form;
• profile details you choose to add, such as display name, handle, headline, biography and time zone;
• your organization and memberships, the websites you add, their verification records, saved readiness reports, action plans, comparisons, key pages and badge settings;
• Launch Kit projects and any files you upload;
• a record of the terms and privacy acknowledgements you accept, with the policy version and time.

Sign-in emails are sent through Amazon SES. Payments are handled by Stripe: card details are entered with Stripe, and we keep billing references and plan status.

• __Host-siu_session: keeps you signed in (30 days).
• __Host-siu_founder_access: Launch Kit access (up to 365 days).
• __Host-siu_checkout_claim: connects a completed checkout to your account (2 hours).
• __Host-siu_sid_link: protects a Status Is Down link request (10 minutes; see section 6).
• siu_locale: your language choice (30 days).
• Browser storage that briefly holds Launch Kit access details until they are moved into your account.

The third-party services in section 2 set their own cookies.

Your SID account, monitors, subscribers and reports are not copied into SIU. The only exception is a website link that you start yourself:

• In your Owner Workspace, you can choose Use my Status Is Down verification for a website. You are then sent to statusisdown.com.
• SID checks that you are signed in, that your SID business workspace has a verified claim for that domain, and that you are a workspace owner or admin. SID then shows you what will be shared and asks you to confirm.
• If you confirm, SID sends SIU a signed confirmation containing only: the domain; the fact that your SID workspace has a verified claim for it; and a one-time reference to your SIU request. It expires after 2 minutes and works once. No email address, name, workspace details, monitors, subscribers or reports are shared.
• SIU then checks the website's public SID verification itself, which is a DNS TXT record or a meta tag. If SIU finds it, the website is marked verified in your workspace. SIU stores the verification method, the public verification value, the time, and a record that you agreed to the link. SIU re-checks the same public record before each saved check. If the record has been removed, the verification lapses.
• If SIU does not find it (for example, because the site was verified on SID by email), SIU asks you to complete its own verification instead.
• From SIU, SID receives only the domain and the one-time reference in the link you open.

We use this information to provide the features you ask for, secure accounts, prevent abuse, process payments, measure and improve the site, and show advertising.

We share information with the service providers named above (Amazon Web Services including SES, Cloudflare, Stripe, Google and ShareThis) so they can provide their services. We may also share it when the law requires us to. We do not sell your account information.

We keep account data while your account is active. Sessions expire after 30 days, and sign-in links after 15 minutes. To delete your account or remove a website, email [email protected] from your account email address.

You can ask us for access to, correction of, or deletion of your personal data at [email protected]. Depending on where you live, you may have other rights, including the right to complain to a data protection authority.

If this notice changes, we will update the effective date above. Material changes will be described on this page.