Privacy

This page says what Status Page Builder stores, how long it keeps it, and who can see it. It is short because the product keeps little, and every number here is read from the code that applies it.

What we fetch

We fetch only the URLs that an account owner adds as components to a status page. Each URL is added through the dashboard and is fetched through an SSRF guard that blocks private addresses and limits redirects. Checks run on scheduled intervals that depend on your plan.

For each check we store the result: the time, whether the component was reachable, its HTTP status code, and how long the request took. We also store daily uptime rollups computed from those results.

How long we keep it

Raw check results are kept for 7 days. Daily uptime rollups are kept for 400 days. These numbers are read from the same constants that run the cleanup sweep, so the promise and the deletion cannot drift apart.

Subscriber email

When someone subscribes to a status page, we send a confirmation email (double opt-in). The email is used only to send incident and maintenance notices for that specific page. Every message contains a one-click unsubscribe link and a List-Unsubscribe header.

Unconfirmed subscriber records are deleted after 7 days. Confirmed subscribers receive mail only until they unsubscribe or the page owner removes them.

Public and private pages

Public status pages are public by nature: anyone who knows the URL can view them and subscribe. Private pages require a password, which is stored as a hash and checked through a cookie that expires after 7 days.

Custom domains are served through Cloudflare. The domain verification and DNS records are handled by Cloudflare for SaaS.

Billing

Payments are processed through Stripe. We never see or store your card number. We keep only the plan and subscription status so we can enforce the limits of your account.

Deleting your account

You can delete your account yourself: Dashboard, then Delete account. Any subscription is cancelled at once. Then your account, your status pages, their components, check results, uptime history, incidents, maintenance windows and subscribers, your API keys and your usage records are deleted together, and every check on your components stops. A custom domain your pages used is released. Stripe keeps its own record of past payments, and we keep a note that the account was deleted, with no email address in it. Our staff log of earlier actions on the account is kept with your email address removed.

Contact

For privacy questions, takedown requests, or anything about your data, write to [email protected].