Privacy

What we collect

• Your account: your email address. If you sign in with GitHub, also the name and profile picture GitHub shares with us.
• What you set up: client names, monitor URLs and settings, status page settings and logos, incidents you write, where alerts go (email addresses, Slack or webhook URLs), and the email addresses of teammates you invite.
• Check results: the status codes, response times and errors from the checks we run against your monitor URLs.
• Billing: your plan, credit balance, subscription status, and the customer reference that links your account to Stripe. Stripe stores the billing address it needs to work out sales tax.
• Abuse protection: when you ask for a sign-in link or send an invite, we briefly keep the email address and, for sign-in links, your IP address to stop abuse, and delete them after a day.
• How you found us: if you arrive from a link with a referral code or campaign (UTM) tags, or from another website, we keep those tags, the page you landed on and the address of the page that linked you (without its query string), and save them with your account when you sign up. The sign-up event we send to PostHog includes the tags, the page you landed on and only the domain of the site that linked you. If you answer the optional "How did you hear about us?" question when you sign up, we save your answer, and any text you type for Other, with your account, and include it in the sign-up event we send to PostHog.

Visitors, errors and usage

We count visits to our marketing pages (the home page, pricing, the comparison pages, and the privacy, terms and refunds pages) with PostHog, without cookies or local storage. Each visit sends the page address, any referral code or campaign tags in the link, the domain of the site that sent you, and your browser, operating system, device type and screen size. PostHog uses your IP address to tell one day's visits apart, then discards it. We don't record clicks or what you type, session recordings are off, and we don't look up your location. If your browser sends Do Not Track or Global Privacy Control, we don't count the visit.

Status pages, sign-in and the Greenbar dashboard aren't tracked and load no tracking script. Inside the dashboard, our servers record errors and a few account events (signing up, adding a first monitor, changing plan) to fix bugs and improve the product. Before anything leaves our servers, we remove email addresses, IP addresses, monitor URLs and client names. This runs only on our servers and our background worker, not in your browser, and IP-based location lookup is off.

Payments

Payments are handled by Stripe. Stripe stores your billing address and payment details. We keep only a customer reference so we can link your account to your subscription.

If you add a business tax ID, Stripe stores it so it can appear on your invoices.

Email

We send sign-in links, monitor alerts and account emails (for example, billing and credit reminders) through an email delivery provider, which handles the recipient address and the message to deliver it. We don't send product news or marketing email today. If we start, it will be opt-in, and every one will have an unsubscribe link. You can already ask for it with the unticked box at sign-up or in Account settings. We save that choice, when you made it and where, and you can turn it off at any time without affecting sign-in links, alerts or account emails.

Cookies

• A sign-in cookie that keeps you logged in.
• A cookie that remembers your light or dark theme choice.
• A first-party referral cookie (gb_attr) that keeps the referral code, campaign tags, landing page and referring page from your first visit for up to 90 days, so we can credit the link that brought you.
• A short-lived cookie (gb_mkt_optin), set only if you tick the product news box at sign-up, that remembers the choice for up to an hour while you finish signing in.
• A short-lived cookie (gb_heard_about), set only if you answer "How did you hear about us?" at sign-up, that remembers your answer for up to an hour while you finish signing in.

We don't use advertising or cross-site tracking cookies. Counting visits to this website uses no cookies or local storage.

Who we share data with

We don't sell your data or share it for advertising. We only share what each service needs to do its job for us: our hosting provider, Stripe for payments, our email delivery provider, PostHog for error tracking, product analytics and website visit counts, and GitHub if you choose to sign in with it.

How long we keep it

• Individual check results: 7 days on Free and 90 days on paid plans.
• Daily uptime summaries: about 13 months (400 days), for the uptime history on status pages.
• Your account and what you set up: for as long as you have an account. You can delete clients, monitors and alert destinations yourself at any time, or delete your whole account (see below).
• Billing records: Stripe keeps invoices and payment records for as long as tax and accounting rules require. Our own record of your plan, subscription and credit is deleted with your account.
• Backups: our database backups are kept for up to 21 days. Anything you delete, including a whole account, is gone from backups within 21 days.

Deleting your data

You can delete your account yourself: open Account in the dashboard and choose Delete account. Only the owner of a workspace can delete it. Deleting is permanent and can't be undone. If you can't sign in, email us from the address on your account and we'll do it for you.

Deleting your account removes, straight away, your login and everything in your workspace: clients, monitors, check results and uptime history, incidents, alert destinations, status pages and their logos, custom domains, team access and invites, sign-in links, your email preferences and their history, your plan and your credit. Status page addresses stop working. People you invited keep their own logins but lose access to your workspace.

A few records are kept after deletion: invoices and payment records at Stripe; your email address in our record of who has received starting credit, so it can't be claimed twice; and, if our team ever changed your credit by hand, an audit record with your email address and the team member's. We don't use these for anything else. Error reports and usage events we've already recorded are tied to an internal ID, not your email address, and that ID no longer points to anything once your account is gone.

We email you to confirm when it's done. Backups that still hold your data are cleared within 21 days. You can also ask us for a copy of your data, or to correct it.

Contact

Questions, or want your data deleted? Email privacy@usegreenbar.com.