Privacy Policy
Last updated: 2026-04-09
Introduction
Welcome to isthisthing.online ("we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that data.
By using our services, you agree to the practices described in this policy.
1. Who We Are
isthisthing.online is an uptime monitoring SaaS platform that helps developers and businesses track the availability of their websites, APIs, databases, and services.
If you have questions about this policy, you can contact us at: [email protected]
2. Information We Collect
2.1 Account Information
When you register, we collect:
- Full name
- Email address
- Password (stored as a bcrypt hash — never in plaintext)
2.2 Workspace & Monitor Configuration
- Workspace names and slugs
- Monitor URLs, hostnames, ports, and check configurations
- Status page settings and custom domain preferences
2.3 Usage & Performance Data
- Monitor check results (response times, status codes, uptime/downtime events)
- Incident records and resolution history
- API usage logs
2.4 Billing Information
Payments are processed by Stripe. We store only your subscription plan and billing status. We never store raw credit card numbers.
2.5 Technical & Log Data
- IP address and browser/device information (collected automatically)
- Session tokens stored in HTTP-only cookies
- Error logs and diagnostic data for debugging
3. How We Use Your Data
Purpose | Legal Basis |
|---|---|
Providing and operating the service | Contract performance |
Sending monitoring alerts and notifications | Contract performance |
Billing and subscription management | Contract performance / Legal obligation |
Improving the product (aggregated analytics) | Legitimate interest |
Sending product updates and newsletters | Consent (you can opt out any time) |
Security, fraud prevention, and abuse detection | Legitimate interest / Legal obligation |
4. Data Sharing
We do not sell your personal data. We share data only with trusted third-party service providers who process it on our behalf:
- Stripe — payment processing
- Resend / SendGrid — transactional email delivery
- Vercel / AWS — hosting and infrastructure
- Sentry — error monitoring (anonymized where possible)
- PostHog — product analytics (anonymized)
All processors are contractually required to handle your data in accordance with applicable data protection law.
5. Data Retention
We retain your data for as long as your account is active. When you delete your account:
- Personal data is deleted within 30 days
- Aggregated, anonymized usage statistics may be retained indefinitely
- Billing records required by law are retained for 7 years
6. Cookies
We use the following cookies:
Cookie | Purpose | Duration |
|---|---|---|
| Authentication session | 7 days (HTTP-only) |
| Language preference | 1 year |
Analytics cookies | Product improvement (PostHog) | 1 year |
You can disable non-essential cookies in your browser settings. Disabling authentication cookies will prevent you from logging in.
7. Your Rights (GDPR & CCPA)
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — unsubscribe from marketing emails at any time
To exercise these rights, email us at [email protected]. We will respond within 30 days.
8. International Transfers
Our infrastructure is primarily located in the EU (Frankfurt, Germany). If data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
9. Security
We implement industry-standard security measures including:
- TLS/HTTPS encryption for all data in transit
- bcrypt password hashing
- HTTP-only, secure cookies
- Regular security audits
- Role-based access control within workspaces
10. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be communicated via email.
12. Contact Us
isthisthing.online Email: [email protected]