downdetectordowndetectordowndetector.com ("we", "us", "the site") is an unofficial site owned and operated by Hasher Technologies LLC. This policy explains what information we collect and how we use it.

The short version: We collect minimal personal data, do not sell personal information, do not use advertising or cross-site tracking cookies, and only use first-party telemetry needed to keep this site reliable.

Automatically collected:

• Reliability and security logs may include IP address, user agent, request paths, timestamps, and request identifiers
• First-party reliability telemetry may include web-vitals measurements, client-error details, and page paths from this site so we can troubleshoot regressions. The reported page URL omits query strings; diagnostic error details can include technical message, filename, line, column, and stack data.
• Contact-form abuse prevention uses standard short-window rate limiting

Information you provide:

• Contact form submissions (name, email, subject, message)
• Account signup and security records, including email address, password stored as a secure hash, verification state, failed-login and lockout state, last login time, and session records for keeping you signed in
• Optional MFA (TOTP): when enabled, an encrypted authenticator secret and related security flags so you can sign in with a second factor
• Account preferences (for example, whether you have enabled incident email alerts)
• API key records when you create keys, including the key label, secure hash, prefix, last four characters, creation/revocation timestamps, and limited last-use metadata such as timestamp, IP address, and user agent
• Historical account or support records from earlier versions of the site, only if retention is needed for support, security, or legal compliance

If you use the account features, we use an httpOnly authentication cookie to keep you signed in. We do not use cookies for advertising, analytics, or cross-site tracking.

Monitor history: We store status snapshots and incident records about our checks of downdetector.com (timestamps, up/down classification, latency, and basic incident metadata). This monitoring history is about the target site, not about you, and does not include your password or message contents.

• Server logs are used for troubleshooting, reliability, and security purposes
• First-party web-vitals and client-error telemetry are used only for product reliability analysis and performance tuning on this site
• Contact form submissions are used solely to respond to your inquiry
• Account data is used to provide login and account-related features
• API key metadata is used to list your keys, enforce the free account limit, support revocation, and investigate abuse or security issues
• If you opt in, we use your account email address to send incident notifications when an incident opens or resolves
• Historical account or support records, if any, are used only for reconciliation, support, and required compliance handling

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Server logs are retained for a limited period for reliability and security purposes. Account records are retained until you request deletion.

• Email verification tokens expire automatically after 24 hours
• Password reset tokens expire automatically after 1 hour
• Underlying status snapshots for our checks of downdetector.com may be stored with automatic expiry (currently up to about 90 days) for operations. The history API and related features only expose data within the current public history window (currently up to 7 days of history for all accounts). Incident records may be kept longer for transparency.
• Contact form messages are delivered by email; we do not store contact submissions in a database, but copies may remain in email inboxes/sent mail per provider retention policies
• API key metadata is retained with your account record unless the account is deleted or retention is needed for security, abuse prevention, or legal reasons. API key secrets are shown only once and are not stored in plaintext.
• Historical account or support records from prior versions of the site, if any, may be retained only as needed for support, fraud prevention, or legal compliance

This site uses an email provider to send messages from the contact form and to deliver account emails (verification, password resets, and optional incident notifications). Automated messages may come from [email protected], but replies to that address are not monitored. Use the contact form or the contact mailbox below if you need a human response.

If optional administrator alert channels are configured, incident notices may be sent to configured webhook destinations or SMS numbers. Webhook destinations are validated before use. SMS delivery uses Twilio when that channel is enabled and configured.

No third-party services are used for analytics, advertising, or cross-site tracking.

You may request access, correction, or deletion of personal information we hold about you by using the contact form. For legal/security reasons, we may need to verify identity before fulfilling certain requests.

We may update this policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.