This policy explains what APIStatus.watch collects, why, and your choices. Questions: [email protected].
What we collect
Account details: your email address and name. Your password is stored only as a one-way hash, never in readable form. If you turn on two-factor login, we also store the key for your authenticator app and your recovery codes, the codes only as hashes.
Your settings: the services you follow; your alerts and where they go (email, Slack, Discord, webhook URLs, PagerDuty keys); your quiet hours and time zone.
Alert history: when we sent or skipped an alert, and whether delivery worked.
One-time email requests: if you ask, without an account, for one email about a service (when it's back up, or the next time it goes down), we keep your email address and the service until that email goes out. If you unsubscribe, we keep only your email address, so we never email you again.
Assistant conversations: messages you send to the in-app assistant, its replies, and any feedback you give through it.
Payment details (paid plans): handled by Stripe. We keep your plan and your Stripe customer and subscription IDs, never your full card number.
Technical data: IP address, browser type, the pages you request and when, recorded in our server logs.
Visit statistics: Cloudflare Web Analytics counts page views without cookies and without identifying you.
How we use it
To run your account, send the alerts you set up and the one-time emails you ask for, and send account emails: verification, password reset and billing.
To answer support requests and improve the service.
To keep the service secure and prevent abuse.
To bill paid plans and meet our tax and legal duties.
We don't sell your personal information, and we don't share it for advertising.
Who processes it for us
Provider
What for
Data involved
OVHcloud (US)
Hosting the site and database
All service data
Cloudflare
Network, security and visit statistics
Technical data
Resend
Sending emails
Your email address and the email's contents
Anthropic
Answering assistant messages
Your assistant messages
Stripe
Payments, for paid plans
Billing and payment details
When you point an alert at Slack, Discord, PagerDuty or a webhook, we send the alert there because you asked us to.
Cookies and local storage
We use two cookies: one keeps you signed in, and one protects your account from cross-site request forgery. Both are needed for the site to work.
If you start signing up from a "get alerts" button, your browser briefly remembers which service you picked, so the alert can be set up once you verify your email. We use no advertising or tracking cookies.
How long we keep it
Account data: while your account is open. After you ask us to delete it, it's gone within 30 days.
Backups: up to 60 days, then overwritten.
Server logs: rotated automatically; older entries are usually gone within about a month.
Assistant conversations: until you clear your chat history in the assistant, or delete your account.
One-time email requests: deleted 30 days after the email goes out, or after 90 days if it never does. Unsubscribing deletes them at once.
Billing records: as long as tax law requires.
Your choices and rights
See and change your details, services and alerts in your account at any time.
Pause alerts with quiet hours, or turn them off.
Email [email protected] to get a copy of your data, correct it or delete it. We reply within 30 days.
Depending on where you live, for example California, the EU or the UK, local law may give you further rights; we honor those requests the same way, and we never treat you differently for using them.
For visitors in the EU and UK: we process your data to provide the service you signed up for, for our legitimate interest in running a secure service, and with your consent where the law requires it.
Security
Passwords and one-time links (email verification, password reset) are stored only as hashes. All traffic is encrypted with HTTPS, and access to our servers is restricted.
No system is perfect. If a breach affects your data, we tell you without undue delay.
Where your data is stored
In the United States. If you use the service from another country, your data is transferred to and processed in the US.
Children
The service is for adults and businesses. It is not directed at children under 16, and we don't knowingly collect their data.
Changes
We post updates on this page, and we email account holders about material changes before they take effect.