UpFromWhere ("we") is an uptime-monitoring service that watches your sites from real home networks. We collect the minimum needed to run it — nothing more. We do not sell or share your data for advertising, and we run no third-party trackers.
What we collect
- Account data — your e-mail address and a salted password hash. E-mail is verified by a confirmation link and used for alerts and essential service messages only.
- Monitor configuration — the hostnames, checks and alert settings you create.
- Notify-me subscriptions — the e-mail you submit on a public status page (double opt-in). These expire automatically after 7 days unless renewed, and every message contains an unsubscribe link.
- Webhook URLs you configure for alert delivery.
- Payment data (card) — card payments are processed by Stripe; we never see or store your card number. We keep the subscription status and Stripe's transaction references needed for billing.
- Payment data (GALU) — paying with GALU happens on the public Polygon blockchain; we match your transfer by amount and record the transaction reference. We never see private keys.
- Technical logs — IP address and request metadata, kept briefly for security and rate-limiting. We also record anonymous first-party page-view counts (path and referrer), with no cross-site tracking.
Sign-in uses a token in your browser's local storage. We set no advertising cookies.
Where it lives
- Hosting: OVH (European Union).
- E-mail delivery: Resend, as our processor for confirmation and alert messages.
- Card payments: Stripe, as our payment processor.
- Measurement nodes see only the target host they are asked to probe — never your account identity. Node operators are identified on our network only by anonymous device identifiers.
How long we keep it
- Account and monitor data — until you delete them or your account.
- Notify-me subscriptions — auto-expire after 7 days (unless renewed); unsubscribed addresses are removed from delivery.
- Measurement history — per your plan's retention window (48 h – 30 days), aggregates only.
- Security logs — short rotation, then deleted.
Your rights
Under the GDPR you may access, correct, export or delete your data at any time. Deleting a monitor removes its configuration; deleting your account removes your data from the product database. For any request, write to privacy@upfromwhere.com. You may also lodge a complaint with your local supervisory authority.
Changes
If this policy changes, the update appears on this page with a new date. Material changes affecting account holders are announced by e-mail.