This Privacy Policy describes how SiteDownCheck ("we", "us", "the service") handles information about you. We have tried to keep it specific and readable. It applies to the website at https://sitedowncheck.com, our free diagnostic tools, our uptime monitoring features, our API, and our email communications. We do not sell personal data and we do not run analytics or advertising trackers of our own at present.
1. Who we are
SiteDownCheck is a free website diagnostics and uptime monitoring service operated by Your Name or Company Name, an individual operator based in India. For the purposes of data protection law, the operator is the controller (or "data fiduciary" under Indian law) of the personal data described here.
You can contact us about privacy at contact@sitedowncheck.com. Postal address on request via email.
2. Summary
- Running a free check does not require an account, and check inputs are not stored in a user profile.
- If you create a monitor, we store your email address, the URL you monitor and your settings so that we can run checks and send alerts.
- Access to a monitor dashboard is through a private link sent to your email. We do not use passwords or login cookies.
- Our developer tools (JSON, Base64, URL, JWT, timestamp, regex) run in your browser. What you paste into them is not sent to us.
- We do not use tracking cookies. If advertising is enabled, Google may set cookies, subject to your consent where required.
3. What we collect, why, and for how long
The table below lists each feature, the data involved, the purpose and the typical retention period.
| Feature | Data involved | Purpose | Retention |
|---|---|---|---|
| Free checks (status, SSL, DNS, headers, speed and similar) | The website or domain you enter, and the result | To connect to the site from our servers and return the result | Results are cached for between 5 seconds and 10 minutes; not stored in a user profile |
| Server logs | Request path, time, IP address, user agent | Security, abuse prevention, troubleshooting | Typically about 30 days |
| Rate limiting | IP address | To prevent overload and abuse | Kept in memory only, short-lived |
| Uptime monitors | Owner email, monitored URL, monitor name, settings (interval, keyword, slow threshold, JSON path, maintenance window, webhook URL, status page name and colour), IP address at creation | To run checks, send alerts and reports, and cap monitors per network | Until you delete the monitor |
| Monitor check history | Status, response time, error message | Dashboards, uptime figures, incident history | Pruned after about 100 days |
| Incidents and SSL/domain/DNS snapshots | Incident times, certificate, domain and DNS data for the monitored site | Alerts and change detection | Until you delete the monitor |
| API keys | Email address, generated key, daily usage counters | To issue keys and enforce fair use | While the key is active, then deleted on request or after inactivity |
| Domain expiry watch | Email address and domains | To send reminders at 30, 14, 7 and 1 days before expiry | Until you unsubscribe or the domain expires |
| DNS history | Snapshots of public DNS records for domains that people look up | To show how DNS records change over time | Up to about 400 days |
| Contact form | Name, email address, message | To respond to you | Emailed to the operator, not stored in a database; kept in the mailbox as long as needed to respond |
| QR code generator | Text you submit to the QR endpoint | To generate the image | Not stored |
| Browser storage | Last few tool inputs in localStorage | Convenience | On your device only, never sent to us |
3.1 Running a check
When you enter a website or domain, it is sent to our servers. We then connect to that site from our own servers (light-touch HTTP, DNS and TLS requests) and return the result to you. We do not attach the input to an account or profile. Our servers block private and internal addresses and non-web ports by design.
3.2 IP addresses
We use IP addresses for rate limiting (held in memory), for abuse prevention and for security logs. When a monitor is created, the IP address is stored with it so we can cap the number of monitors per network. The "What is my IP" tool displays your IP address back to you. If the site is run in a local environment, that tool may query a public service such as ipify, icanhazip or ifconfig.me to determine the public IP address.
3.3 Monitors, dashboards and status pages
Monitor data is described in the table above. Your dashboard is reached through a private, unguessable link that acts as your login and is emailed to the owner. Anyone who has the link can view and manage the monitor, so please keep it private. We may require you to confirm your email address before monitoring starts.
Alerts and monthly reports are sent by email through an SMTP provider chosen by the operator. If you provide a webhook URL, we send alert payloads to that URL by HTTP POST. You are responsible for the security of the receiving endpoint.
Public status pages are optional. If you enable one, the monitor name, current status and uptime figures are visible to anyone with the page address. Do not put confidential information in a monitor name.
You can delete a monitor from its dashboard at any time. Deleting a monitor deletes its history.
3.4 API keys
To issue an API key we store your email address, the generated key and usage counters (including daily call counts). The free tier has a fair-use limit of 200 calls per day.
3.5 Domain expiry watch
If you ask us to watch a domain, we store your email address and the domain and send reminders at 30, 14, 7 and 1 days before expiry. Every reminder contains an unsubscribe link which, when used, deletes the entry.
3.6 DNS history
We record snapshots of the DNS records of domains that people look up. This is public data about domains, not about individuals, and it is kept for up to about 400 days so that we can show changes over time.
3.7 Contact form
The name, email address and message you submit are emailed to the operator. They are not stored in a database. Copies remain in the operator's mailbox for as long as needed to respond and to keep a reasonable record of the conversation.
3.8 Developer tools
The JSON, Base64, URL, JWT, timestamp and regex tools run in your browser and what you paste is not sent to the server. The QR code tool is different: the text you enter is sent to our QR endpoint so that the image can be generated on the server. It is not stored.
4. Cookies and browser storage
We do not use tracking cookies. Our tools keep your last few inputs in your browser's localStorage under keys beginning with sdc_recent_. This data stays on your device and is never sent to us. A Clear button in the tools removes it. Public status pages and monitor dashboards do not use cookies. Full details are in our Cookie Policy.
5. Third parties that receive data
To deliver specific features we send limited data to the following third parties. We do not send them more than is needed for the feature.
| Third party | Data sent | Purpose |
|---|---|---|
| Google PageSpeed Insights API | The URL being tested | Core Web Vitals and performance data |
| RDAP/IANA bootstrap and registry WHOIS servers | The domain looked up | Domain registration information |
| crt.sh (certificate transparency) | The domain | Subdomain finder |
| Cloudflare DNS over HTTPS | The domain | DNS propagation checks |
| Team Cymru DNS | An IP address | ASN lookup |
| DNS blocklists | An IP address or domain | Blacklist checks |
| SMTP email provider | Recipient email address and message content | Alerts, reports, confirmations, reminders |
| Hosting provider | All data we process, as our infrastructure host | Running the service |
| Google AdSense and Funding Choices (only if ads are enabled) | Data collected by Google through ads and consent tools | Advertising and consent management |
Each of these parties has its own privacy policy and acts under its own terms. We do not sell personal data and we do not share it for cross-context behavioural advertising.
5.1 Advertising
If advertising is enabled, ads are served by Google. Google and its partners may set cookies or use similar technologies to serve and measure ads. In the European Economic Area, the United Kingdom and Switzerland, a consent message is shown and personalised ads are shown only subject to your consent. You can manage personalised ads at https://adssettings.google.com and read how Google uses data from sites that use its services at https://policies.google.com/technologies/partner-sites.
5.2 Analytics
We do not currently use analytics tracking. If we add analytics in future, we will update this policy and, where required, ask for consent.
6. Legal bases for processing
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract or steps at your request: running checks you ask for, and operating monitors, API keys and domain watches you create.
- Legitimate interests: keeping the service secure, preventing abuse, rate limiting, troubleshooting and capping monitors per network. We balance these interests against your rights and keep the data minimal.
- Consent: advertising cookies where required, and any other case where we ask you directly. You can withdraw consent at any time.
- Legal obligation: where we must keep or disclose information to comply with law.
Under India's Digital Personal Data Protection Act, 2023, we process personal data for the purposes you provide it for, based on your consent or on other lawful uses permitted by that Act.
7. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- receive your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time, without affecting earlier processing;
- complain to your local data protection authority.
Much of this can be done directly: delete a monitor from its dashboard, use the unsubscribe link in a domain expiry email, or clear your browser storage. For anything else, email contact@sitedowncheck.com. We aim to respond within 30 days. We may need to verify that you control the email address or monitor concerned before acting.
8. Notice for California residents
If you are a California resident, the CCPA/CPRA gives you rights to know what personal information we collect, to request deletion or correction, and not to be discriminated against for exercising your rights. In the last 12 months we have collected identifiers (email address, IP address), internet activity (server logs, monitor results) and the content of messages you send us, for the purposes in section 3. We do not sell personal information and we do not share it for cross-context behavioural advertising. To make a request, email contact@sitedowncheck.com.
9. Children
The service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact contact@sitedowncheck.com and we will delete it.
10. International transfers
Our servers, hosting provider, email provider and the third parties in section 5 may be located in a different country from you. By using the service you understand that your data may be processed outside your country. Where required, we rely on appropriate safeguards offered by those providers, such as standard contractual clauses.
11. Security
We use reasonable technical and organisational measures, including HTTPS, input validation, rate limiting, restrictions on the addresses our servers will connect to, private unguessable monitor links and access limited to the operator. No system is completely secure. See our Security Policy for details and how to report a vulnerability.
If we become aware of a personal data breach that is likely to put your rights at risk, we will take steps to contain it, assess it, notify affected users and the relevant authorities where the law requires, and tell you what happened and what you can do.
12. Retention
We keep data only as long as needed for the purposes above, as summarised in the table in section 3. When data reaches the end of its retention period, or when you delete a monitor or unsubscribe, we delete it or remove it from active systems. Backups, if any, are overwritten in the ordinary course. We may keep limited records longer where needed for security or to meet legal obligations.
13. Links to other sites
The service contains links to third-party sites. We are not responsible for their content or privacy practices. The websites you test are not ours either: we only request them as part of the check you ask for.
14. Grievance contact for India
In line with Indian law, you may raise a grievance about how your personal data is handled by emailing contact@sitedowncheck.com. Please include your name, the email address concerned and a description of the issue. We aim to acknowledge grievances promptly and resolve them within 30 days.
15. Changes to this policy
We may update this policy from time to time. The "updated" date at the top of the page shows when it last changed. If a change is significant, we will give additional notice, for example a notice on the site or an email to monitor owners.
16. Contact
For privacy questions or requests, email contact@sitedowncheck.com. Postal address on request via email. See also our Terms of Service and Cookie Policy.