Loading…
Loading…
downdetectordowndetectordowndetector.com ("we", "us", "the site") is an unofficial site owned and operated by Hasher Technologies LLC. This policy explains what information we collect and how we use it.
The short version: We do not sell personal information, do not use advertising or cross-site tracking cookies, and only use first-party telemetry needed to keep this site reliable.
Automatically collected:
Information you provide:
If you use the account features, we use an httpOnly authentication cookie to keep you signed in. We do not use cookies for advertising, analytics, or cross-site tracking. A browser session-storage flag also remembers an unfinished logout so the page can offer a retry; it contains no password or session token.
Monitor history: We store status snapshots and incident records about our checks of downdetector.com (timestamps, up/down classification, latency, and basic incident metadata). This monitoring history is about the target site, not about you, and does not include your password or message contents.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Where the GDPR applies, we rely on performance of our agreement with you to provide account features, legitimate interests to operate and secure the service, and consent for optional incident email alerts. You can withdraw that consent in account settings; this does not affect processing that took place before withdrawal.
OAuth connections receive only the scopes explicitly approved in your browser and remain subject to current account, role, session and MFA checks. Connection credentials are protected separately from public-read API keys. Saved action previews and consumed or uncertain receipts are retained for security and outcome resolution; they do not expire merely because an approval window ends. CLI logout revokes its connection, and native session invalidation removes delegated authority.
Commercial ChatGPT sign-in is disabled until approved and configured. If enabled, OpenAI supplies a verified identity which is linked by issuer, client and subject only with explicit intent; an email match never silently merges accounts. Native mailbox verification, legal assent and enabled TOTP still apply. Sign-in does not enable paid plan inference.
Optional ChatGPT plan use is a separate, default-off connection requiring a provisioned commercial grant, not the identity token. Per-user inference credentials are encrypted separately and checked against the current native account and explicitly selected ChatGPT identity, model and authorization scopes. Each question requires consent to send the question and scoped account content to OpenAI through that plan grant. Lost refresh or remote revocation outcomes remain fenced and unconfirmed rather than automatically retried. Disconnect stops local plan use and attempts remote revocation once; it does not delete the native account. This site does not substitute an operator API key or another billing path after a plan failure. Commercial credential acquisition remains unavailable until the trusted partner contract is provisioned.
An AI assistant is separately disabled until an approved inference provider is configured. Sending a question requires explicit consent to share your question, page/tab and selected incident identifier, and projected, scoped tool facts with that provider. Selected incident context is read from authorized native records; unsaved forms, passwords, authentication codes and private recipients are not included as page context. Do not include secrets or private notification destinations in your question. Local explanations send no question to an inference provider. Provider handling depends on its configured agreement; we make no blanket retention or training promise here.
Server logs are retained for a limited period for reliability and security purposes. Account records are retained while your account exists. You can request deletion; some records may need to remain for security, legal obligations or legal claims.
Cloudflare routes and protects requests to this site. It can process connection information such as IP addresses and request metadata as part of that service. Email and other configured delivery providers may process messages outside your country; contact us if you need information about the providers handling your data.
This site uses an email provider to send messages from the contact form and to deliver account emails (verification, password resets, and optional incident notifications). Automated messages may come from [email protected], but replies to that address are not monitored. Use the contact form or the contact mailbox below if you need a human response.
If optional administrator alert channels are configured, incident notices may be sent to configured webhook destinations or SMS numbers. Webhook destinations are validated before use. SMS delivery uses Twilio when that channel is enabled and configured.
No third-party services are used for analytics, advertising, or cross-site tracking.
You may request access, correction, or deletion of personal information we hold about you by using the contact form or the email address below. We may need to verify identity before fulfilling certain requests. See Your data rights for choices and applicable-law information.
We may update this policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.
Hasher Technologies LLC handles support, privacy, and legal requests for this site.
Use the contact form or email [email protected].
Hasher Technologies LLCAutomated account emails may come from [email protected]. For help, use the contact address above.