Privacy Policy

1. Introduction

BlueMonitor ("we", "our", or "us") operates the website www.bluemonitor.org and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and display name. Authentication is handled securely through our authentication provider (Neon Auth / Better Auth). We do not store your password directly.

2.2 Usage Data

We automatically collect certain information when you use our services, including:

• IP address (used for rate limiting and security)
• Browser type and version
• Pages visited and features used
• Timestamps of requests

2.3 Watchlist and Monitoring Data

When you add services to your watchlist or configure webhook notifications, we store this information to provide our monitoring service. If you use our heartbeat (push monitoring) feature, we store health check data sent by your services.

2.4 Payment Information

When you subscribe to our Pro plan, payment processing is handled entirely by Stripe. We do not store credit card numbers or other sensitive payment details on our servers. We only store your Stripe customer ID and subscription status to manage your plan.

2.5 API Keys

If you generate API keys to access our API, we store a hashed version of the key. The full key is shown to you only once at creation time.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process your transactions and manage your subscription
• Send you webhook notifications about service status changes
• Enforce rate limits and prevent abuse
• Improve and personalize your experience
• Communicate with you about updates or issues related to your account
• Comply with legal obligations

4. Data Retention

• Account data: Retained as long as your account is active. You can request deletion at any time.
• Monitoring history: Status check history is retained for up to 30 days (Pro plan) or 1 day (Free plan), then automatically deleted.
• Heartbeat check data: Retained for up to 30 days, then automatically deleted.
• Server logs: Retained for up to 30 days for security and debugging purposes.

5. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — Payment processing. See Stripe's Privacy Policy.
• Neon — Database hosting. See Neon's Privacy Policy.
• Vercel — Website hosting and deployment. See Vercel's Privacy Policy.

6. Cookies

We use essential cookies to maintain your authentication session and preferences (such as dark mode). We do not use advertising or tracking cookies. No third-party analytics cookies are set.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted connections (HTTPS) for all data in transit
• Hashed API keys stored in the database
• Role-based access control for administrative functions
• Stripe webhook signature verification for payment events

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or electronic storage is 100% secure.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for data processing (where applicable)
• Object to processing of your personal data

To exercise any of these rights, please contact us at privacy@bluemonitor.org.

9. Private Monitoring

Pro plan users can mark their monitored services as "private". Private services are not displayed in public listings or status pages. Only the account owner can view private service data through the dashboard.

10. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@bluemonitor.org.