Privacy Policy

Last updated: 2026-04-09


Introduction

Welcome to isthisthing.online ("we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that data.

By using our services, you agree to the practices described in this policy.


1. Who We Are

isthisthing.online is an uptime monitoring SaaS platform that helps developers and businesses track the availability of their websites, APIs, databases, and services.

If you have questions about this policy, you can contact us at: [email protected]


2. Information We Collect

2.1 Account Information

When you register, we collect:

  • Full name
  • Email address
  • Password (stored as a bcrypt hash — never in plaintext)

2.2 Workspace & Monitor Configuration

  • Workspace names and slugs
  • Monitor URLs, hostnames, ports, and check configurations
  • Status page settings and custom domain preferences

2.3 Usage & Performance Data

  • Monitor check results (response times, status codes, uptime/downtime events)
  • Incident records and resolution history
  • API usage logs

2.4 Billing Information

Payments are processed by Stripe. We store only your subscription plan and billing status. We never store raw credit card numbers.

2.5 Technical & Log Data

  • IP address and browser/device information (collected automatically)
  • Session tokens stored in HTTP-only cookies
  • Error logs and diagnostic data for debugging

3. How We Use Your Data

Purpose

Legal Basis

Providing and operating the service

Contract performance

Sending monitoring alerts and notifications

Contract performance

Billing and subscription management

Contract performance / Legal obligation

Improving the product (aggregated analytics)

Legitimate interest

Sending product updates and newsletters

Consent (you can opt out any time)

Security, fraud prevention, and abuse detection

Legitimate interest / Legal obligation


4. Data Sharing

We do not sell your personal data. We share data only with trusted third-party service providers who process it on our behalf:

  • Stripe — payment processing
  • Resend / SendGrid — transactional email delivery
  • Vercel / AWS — hosting and infrastructure
  • Sentry — error monitoring (anonymized where possible)
  • PostHog — product analytics (anonymized)

All processors are contractually required to handle your data in accordance with applicable data protection law.


5. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Personal data is deleted within 30 days
  • Aggregated, anonymized usage statistics may be retained indefinitely
  • Billing records required by law are retained for 7 years

6. Cookies

We use the following cookies:

Cookie

Purpose

Duration

access_token

Authentication session

7 days (HTTP-only)

locale

Language preference

1 year

Analytics cookies

Product improvement (PostHog)

1 year

You can disable non-essential cookies in your browser settings. Disabling authentication cookies will prevent you from logging in.


7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — ask us to limit how we process your data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — unsubscribe from marketing emails at any time

To exercise these rights, email us at [email protected]. We will respond within 30 days.


8. International Transfers

Our infrastructure is primarily located in the EU (Frankfurt, Germany). If data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).


9. Security

We implement industry-standard security measures including:

  • TLS/HTTPS encryption for all data in transit
  • bcrypt password hashing
  • HTTP-only, secure cookies
  • Regular security audits
  • Role-based access control within workspaces

10. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately.


11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be communicated via email.


12. Contact Us

isthisthing.online Email: [email protected]

Privacy Policy