This policy explains what UptimeLuna ("UptimeLuna," "we," "us") collects when you use our uptime-monitoring service at uptimeluna.com and app.uptimeluna.com, why we collect it, and the choices you have. It applies to visitors of this marketing site and to registered users of the dashboard.
The short version
We don't sell your data. We don't share it with data brokers or advertisers, and we don't run ad tracking on this site. We collect what's needed to run the monitoring service you signed up for — your account details, the monitors and alert contacts you configure, and the check results those monitors produce — and we use a small number of named third parties strictly to deliver that service (payments, SMS, email, bot protection). Everything below explains that in more detail.
Information we collect
Account information
When you register, we collect your email address and password (stored as a salted hash, never in plain text). Your dashboard profile may optionally include a display name, phone number, postal address and time zone — none of these are required to use the service.
Monitoring data you configure
- The URLs, hostnames, ports and DNS records you ask us to monitor.
- Alert contacts you add — email addresses, phone numbers, webhook and Slack URLs — so we know where to send an alert.
- Organization details if you use Team features: organization name, member emails and roles.
Data our checks generate
Every check we run on your behalf produces a result: timestamp, status, response time, and — for a failed check — the error returned. We keep this history for as long as your plan's retention window (15 to 365 days depending on tier), after which it's automatically deleted. Daily uptime summaries are kept longer so your historical uptime percentage stays accurate even after the raw results age out.
Payment information
Paid plans are billed through Stripe. We never see or store your full card number — Stripe handles that directly and shares back only what we need to run your subscription (plan, status, and a billing reference id).
Technical information
Like most web services, our servers log standard request metadata (IP address, browser user agent, timestamps) for security and debugging. Our monitoring runners also perform routine network requests to whatever targets you've configured them to check — that's the product working as intended, not data collection about you.
Cookies & local storage
We use a small number of cookies and browser storage entries on this site, described below — none of them are ad-retargeting or cross-site advertising pixels:
- Session cookies (dashboard). When you sign in to app.uptimeluna.com, we set httpOnly authentication cookies that keep you logged in and let your browser make authenticated requests to our API. These aren't readable by JavaScript and exist purely to remember that you're signed in; they expire on logout or after a period of inactivity.
- Theme preference (localStorage). Both this marketing site and the dashboard remember whether you prefer light or dark mode using your browser's local storage. This never leaves your device.
- Bot-protection challenge (Cloudflare Turnstile). Sign-up and login pages may run a Cloudflare Turnstile challenge to block automated abuse. Cloudflare may set its own cookie to complete that check — see Cloudflare's privacy policy for details on that specific cookie.
- Analytics. This marketing site uses an analytics service to understand how visitors use the site — page interactions and navigation — so we can improve it. This service may set cookies or similar identifiers on this site only (not the dashboard).
We do not sell your data
We have never sold, rented, or traded personal data to third parties, and we don't plan to. We don't use your monitors, contacts or account information to build advertising profiles, and we don't share your data with data brokers.
Who we share data with
We use a short list of sub-processors, each strictly to deliver a specific part of the service — none of them are permitted to use your data for their own purposes:
- Stripe — payment processing for paid plans.
- SMS provider — sending SMS alerts, only for organizations that have configured an SMS contact.
- Your configured SMTP provider — sending email alerts and account emails (verification, password reset).
- Cloudflare — bot-protection challenges on registration and login.
- An analytics provider — usage analytics on this marketing site only.
We may also disclose information if required by law, to enforce our Terms of Use, or to protect the rights, property or safety of UptimeLuna, our users, or the public.
Data retention
Account data is kept for as long as your account is active. Raw check-result history is retained per your plan's window (15/90/365 days) and pruned automatically after that. If you delete your account, we delete your account data and configuration; some records may be retained briefly where we're required to for billing, tax, or fraud-prevention purposes.
Data security
Passwords are stored as salted hashes, never in plain text. We support two-factor authentication (TOTP) on every account at no extra cost. Traffic to our dashboard and API is encrypted in transit (HTTPS). No system is perfectly secure, but we design for the practical case: least-privilege access to production data, and no unnecessary copies of your data floating around.
Your rights
You can access, correct, export or delete most of your account data directly from the dashboard's settings. For anything you can't self-serve — a full data export, a full account deletion, or a question about what we hold on you — email us and we'll handle it directly. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA; we'll honor requests made under those frameworks the same way.
Children's privacy
UptimeLuna is a business tool and isn't directed at children. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we'll remove it.
International data transfers
Our infrastructure and sub-processors may operate in countries other than your own. Where that involves transferring personal data internationally, we rely on the safeguards those providers offer (e.g. standard contractual clauses) to keep it protected.
Changes to this policy
If we make a material change to this policy, we'll update the "Last updated" date above and, for significant changes, notify account holders by email.
Contact & governing law
Questions about this policy or your data: get in touch through our contact form and a real person will get back to you. UptimeLuna is operated by AK Cloud Systems.