Privacy Policy

Last updated: 25 October 2026

This policy explains what personal data IsMySiteUpOnline collects, why, and what you can do about it. We try to collect as little as we need to run the service.

Who is responsible

The data controller is Stefanescu Mihai, a natural person based in Romania.
Postal address: Bucharest, Romania
Contact: [email protected]

What we collect

• Account data: your name, email address, a hashed password, and your notification settings (including alert channel details such as a webhook URL or chat ID if you enter them).
• Sites and monitor settings: the sites, domains, sitemaps, ports, health-check endpoints and DNS records you ask us to monitor, and the settings for each.
• Check results: the results of our checks on those targets (status, response time, certificate and expiry details, broken links found) and the incidents and alerts they produce.
• Billing plan: which plan you are on and its status. Payments are handled by Stripe; we do not see or store your card number.
• Login sessions: while you are logged in, a session record linked to your account stores your IP address, your browser's user agent and the time of your last activity. It is used to keep you logged in and for security.
• Server logs: our servers record technical data about requests, such as IP address, time and requested page, for security and fixing faults.

Why we use it, and on what basis

• To provide the monitoring service you signed up for, send you alerts and manage your account (performance of a contract).
• To take payment for paid plans and keep records the law requires (performance of a contract and legal obligation).
• To keep the service secure and working, and to prevent abuse (our legitimate interest).

We do not sell your data and we do not use it for advertising. We use only strictly necessary cookies (see the cookie page), and our pages load no fonts, scripts or images from third-party servers.

How long we keep it

• Uptime check history, SSL certificate check records, resolved incidents and alerts you have read are deleted automatically after 90 days. Broken links that have not been seen again for 90 days are deleted too.
• DNS record, domain expiry, sitemap, health-check and TCP port monitors store only their latest result (not a history), which is overwritten at each check and deleted with the monitor or your account.
• Login session records expire after 120 minutes of inactivity; expired records are removed by Laravel's routine clean-up, which runs on a small share of requests, so an expired record can remain for a while before it is removed. They are also deleted when you delete your account.
• Account data and your monitor settings are kept until you delete your account.
• When you delete your account in the settings page, your account and all data tied to it are deleted straight away and any paid subscription is cancelled.
• Invoices and payment records stay with Stripe, because accounting records must be kept by law.

Who else receives your data

• Stripe, which processes payments for paid plans. Stripe's hosted checkout and billing portal pages are run by Stripe, receive your email address, and may set their own cookies under Stripe's privacy policy.
• [email protected], which delivers the emails we send you.
• Contabo, which hosts the service.
• The alert services you set up yourself (for example a Slack or webhook address) receive the alerts we send to them.

The service is hosted by Contabo in France, within the European Union.

Your rights

You have the right to access your data, correct it, delete it, receive a copy of it, and object to its use. Most of this you can do yourself on the settings page: you can export your data as a download and delete your account there. For anything else, or if you cannot sign in, email [email protected].

You may also complain to the data protection authority in Romania, ANSPDCP (https://www.dataprotection.ro), or to the authority in your own country.

Changes

If we change this policy we will update the date at the top.