UptimeKing ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our uptime monitoring service at uptimeking.com (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you create an account, we collect:

Your name and email address
Password (stored securely using bcrypt hashing)
Billing information (processed and stored by Stripe; we do not store full card numbers)
Timezone and notification preferences

Monitoring Data

When you configure monitors, we collect and store:

URLs, IP addresses, and hostnames you choose to monitor
HTTP response codes, response times, and headers returned by your monitored endpoints
SSL certificate details (expiration dates, issuer information)
Incident and downtime records, including timestamps and durations
Heartbeat ping timestamps for cron and scheduled task monitors

Usage Analytics

We automatically collect certain information when you use the Service:

Browser type, operating system, and device information
IP address and approximate geographic location
Pages visited, features used, and actions taken within the dashboard
Referral source and session duration

2. How We Use Your Information

We use the information we collect to:

Provide the Service -- perform uptime checks, send alerts, generate status pages, and display monitoring dashboards
Process payments -- manage subscriptions, invoicing, and billing through Stripe
Send notifications -- deliver uptime alerts via your configured channels (email, Slack, Discord, Telegram, webhooks)
Improve the Service -- analyze usage patterns to fix bugs, optimize performance, and develop new features
Communicate with you -- send account-related emails, service updates, and (with your consent) product announcements
Ensure security -- detect and prevent fraud, abuse, and unauthorized access

3. Data Storage and Security

Data Retention

Monitoring data retention varies by plan:

Freeman plan: 30 days of detailed check results; aggregated daily statistics retained for 90 days
Knight plan: 90 days of detailed check results; aggregated daily statistics retained for 6 months
Lord plan: 1 year of detailed check results; aggregated daily statistics retained for 2 years
King plan: 2 years of detailed check results; aggregated daily statistics retained for 3 years

Account information is retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Security Measures

We implement industry-standard security measures to protect your data:

All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
Passwords are hashed using bcrypt with appropriate cost factors
API tokens are stored as hashed values
Database backups are encrypted at rest
Access to production systems is restricted and logged

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

Essential cookies: Required for authentication, session management, and CSRF protection. These cannot be disabled.
Preference cookies: Store your dashboard preferences, timezone, and notification settings.
Analytics cookies: Help us understand how you use the Service so we can improve it. You may opt out of analytics cookies.

We do not use third-party advertising cookies or participate in ad networks. We do not sell your data to advertisers.

5. Third-Party Services

We share data with the following third-party services only as necessary to operate the Service:

Stripe -- Payment processing. Stripe receives your billing information to process subscription payments. Stripe's privacy policy governs their handling of your data.
Email delivery providers -- To send transactional emails and alert notifications.
Slack, Discord, Telegram APIs -- Only when you configure alert integrations. We send alert data to these services on your behalf.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Your Rights

You have the following rights regarding your data:

Access: You can view all data associated with your account through the dashboard at any time.
Export: You can export your monitoring data, check results, and incident history via our API or by contacting us at [email protected].
Correction: You can update your account information through your profile settings.
Deletion: You can delete your account from your profile settings. This will permanently remove your account and all associated monitoring data within 30 days.
Portability: Upon request, we will provide your data in a structured, machine-readable format (JSON).
Opt out of marketing: You can unsubscribe from marketing emails at any time using the link in any marketing email or through your notification settings.

For GDPR-covered users in the European Economic Area: you additionally have the right to restrict processing, object to processing, and lodge a complaint with your local data protection authority.

7. Children's Privacy

The Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send a notification to the email address associated with your account.

Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: [email protected]
Subject line: "Privacy Inquiry" or "Data Request"

We aim to respond to all privacy-related inquiries within 5 business days.