Skip to main content

Privacy Policy

Last updated: October 16, 2026

What we collect

We collect the minimum data needed to run an uptime monitoring service:

  • Account data — email address, name, organization name. Used for login, alerts, and billing.
  • Monitor configuration — URLs, check intervals, alert settings, status page content. This is the service you're using us for.
  • Check results — HTTP status codes, response times, error messages. Stored to show uptime history and power alerts.
  • Usage data — page views, API calls, feature usage. Used to improve the product, not sold to anyone.
  • Signup source — the campaign tags in the link you first arrived from (utm_source, utm_medium, utm_campaign), the referring site (address without query string), and the first page you visited. Kept in your browser until you sign up, then stored with your account so we know which channels bring customers. No IP address, no cookies, no third parties.

Where we store it

All data is stored in PostgreSQL databases on Netcup servers in Nuremberg, Germany (EU). We don't use US-based database providers. Backups are encrypted and stored on a separate server.

How long we keep it

Check result retention depends on your plan:

  • Pro — 2 years
  • Team — 2 years
  • Business — 5 years

Account data is kept as long as your account exists. When you delete your account, it is deactivated at once, and you can ask support to restore it for 30 days. After 30 days we permanently delete your account, your organization, your monitors, alert settings, incidents and check results. Encrypted database backups expire on a rolling schedule, so the deleted data leaves our backups within 35 more days. Invoices are kept by Paddle, our payment provider, as the law requires.

Third-party services

We use a small number of third-party services:

  • Paddle — payment processing. They handle your credit card data directly; we never see it.
  • Cloudflare — CDN and DDoS protection for the frontend. Standard web traffic data (IP, headers).

Alert notifications and password resets are sent from our own mail server. We do not use a third-party email provider, so your email address stays with us.

We do not sell data to anyone. We don't use Google Analytics or any ad-tracking pixels.

Cookies

We use a single session cookie (_uptrack_key) to keep you logged in. No tracking cookies, no third-party cookies, no cookie banner needed.

MCP integration (Claude connector and ChatGPT plugin)

You can connect your Uptrack account to an AI assistant through our MCP server. The Claude connector (Anthropic) is available. The ChatGPT plugin (OpenAI) is being prepared for the OpenAI plugin directory, and this section applies to it once it is published. The integration needs a paid plan. You authorize it explicitly with OAuth 2.0 on the Uptrack consent page, and you approve each permission (scope) there.

The MCP tools can read and change only this data, and only for the organization you signed in with:

  • Monitors — name, URL, type, check interval, status and 30-day uptime. The tools can create, rename, pause, resume and delete a monitor when you ask.
  • Check results and statistics — recent checks (time, status, HTTP code, response time, error message), uptime, response-time percentiles and dashboard counts.
  • Incidents — status, cause, start and end time. The tools can acknowledge an incident when you ask.
  • Status pages — name, address and whether the page is public.
  • Alert channels — name, type and whether the channel is active. The tools do not return webhook URLs or tokens. When you ask for a new channel, the destination you give is stored as that channel's setting.
  • On-demand website checks — when you ask whether a public website is up, our check locations request that URL and return the status, HTTP code and response time.

When you use a tool, Uptrack returns the result to Claude or ChatGPT, and that provider processes it under its own terms and privacy policy. Uptrack does not send your data to Anthropic or OpenAI in any other way, and Uptrack does not receive your conversation. Each provider is a separate service that you choose to use.

You can revoke access anytime from Dashboard Settings > Integrations, or by removing the connector or plugin in the assistant. See the MCP guide for the full tool list.

Your rights

You can:

  • Export your data — available from Dashboard Settings
  • Delete your account — permanently deletes all data after a 30-day restore period (backups within 35 more days)
  • Revoke integrations — disconnect Claude, ChatGPT or other OAuth clients anytime

If you're in the EU, you have additional rights under GDPR (access, rectification, erasure, portability). Email us and we'll handle it.

Contact

Questions about privacy? Email support@uptrack.app

HumanMachine