Privacy Policy

• Account information from Google or GitHub sign-in (name, email address, avatar link), handled by Supabase Auth. UptimeHelm keeps a copy of those three fields in a profile record so that teammates on a shared site can recognise you; only people who share a site with you can see it. UptimeHelm never sees or stores your Google or GitHub password.
• The domains you choose to monitor, and settings you configure for them, such as check interval, alert routes, and maintenance windows.
• Notification destinations you add yourself: webhook URLs, or an email address for alerts.
• If you invite a teammate to a site, their email address, so an invitation can be sent.
• If you subscribe to a public status page, the email address you provide for that subscription.

• Results from checks UptimeHelm runs against domains you monitor: availability, response time, HTTP status codes, TLS and domain expiry, and the passive scan data described in the Security & Scanning Policy.
• If you use the no-login public website checker, the domain you enter and the resulting passive scan data - this does not require an account and is not tied to one.
• Basic site-usage analytics via Google Analytics, which may set cookies in your browser. This is standard visit and page-view data used to understand how the site is used; it is not linked to your monitoring data.

• To run the monitoring, alerting, and public status page features you set up.
• To send the notifications and confirmations you have configured (downtime and recovery alerts, status-page subscription confirmations, team invitations).
• To operate, secure, and improve UptimeHelm itself.

Monitoring data and account data are not sold, and are not shared with third parties for advertising purposes.

UptimeHelm is built on a small number of infrastructure providers, each used only for the purpose below:

• Supabase - database, authentication, and the scheduled functions that perform checks and send alerts.
• GitHub Actions and GitHub Pages - runs the scheduled monitoring checks and hosts this website.
• Resend - delivers alert, confirmation, and invitation emails.
• Google Analytics - site-usage analytics for uptimehelm.com.
• RDAP registries - public domain-registration lookups used only to check a monitored domain's expiry date; no account or contact data is sent to these lookups.

• Data for a monitored site is kept for as long as that site remains in your account. Deleting a site removes its check history, incidents, scan data, and notification routes.
• UptimeHelm does not currently offer self-serve full account deletion. To request deletion of your account and associated data, email us at the address below and we will process the request.

UptimeHelm is not directed to children under 13, and does not knowingly collect information from them.

If this policy changes in a material way, the Last updated date at the top of this page will change accordingly.

Questions about this policy or your data can be sent to support@uptimehelm.com. See also the Security & Scanning Policy for how checks themselves work.