Privacy Policy
Effective April 15, 2026
1. What This Policy Covers
This Privacy Policy explains how Your Signal ("we", "us") collects, uses, stores, and shares your information when you use our uptime monitoring service, website, and related features. By using the Service, you consent to the practices described here.
2. Information We Collect
We collect information in two ways. Information you provide: your email address and password when you sign up, monitor URLs and configuration you create, team member emails you invite, and any messages you send us. Information collected automatically: your IP address, browser type, operating system, pages visited, timestamps of requests, and cookies used to maintain your session and language preference (ys_lang).
3. How We Use Your Information
We use your information to: operate and maintain the Service (running health checks, sending alerts, rendering status pages); authenticate you and protect your account; send transactional emails (verification, password reset, team invites); enforce plan limits and usage quotas; detect and prevent fraud, abuse, and security threats; improve the Service based on aggregate usage patterns. We do not use your information for behavioral advertising or profiling.
4. Information We Share
We do not sell your personal information. We share data only in these limited cases: with service providers who help us operate (email delivery via Resend, cloud hosting via Azure), only to the extent necessary for them to perform their function; when required by law, court order, or government request; to protect our rights, safety, or property; in connection with a merger, acquisition, or sale of assets (you would be notified beforehand); with your consent. Public status pages display monitor names and uptime data you choose to make visible.
5. Cookies and Local Storage
We use a small number of cookies, all functional: _ys_session (authentication, HTTP-only, 30 days), _ys_csrf (CSRF protection), ys_lang (language preference, 1 year). We do not use third-party tracking cookies, analytics pixels, or advertising beacons. There is no cookie consent banner because we only use strictly necessary cookies.
6. Data Security
We take reasonable measures to protect your data, including: HTTPS for all traffic, bcrypt password hashing (cost 12), sha256-hashed tokens for email verification and invites, CSRF protection on all mutating endpoints, session-scoped database access per organization. No system is perfectly secure. If you suspect unauthorized access to your account, contact us immediately at admin@yoursignals.work.
7. Data Retention and Deletion
Check data is retained per your plan tier (Free and Premium: 1 year, Max: 3 years). When data exceeds your retention window, it is permanently deleted during routine maintenance. Monitors inactive for 31+ days may be soft-deleted; after 25 additional days they are permanently removed. You can delete your entire account and all associated data at any time from Account settings. We may retain limited records (e.g., billing history) as required by law.
8. Your Rights
Depending on where you live, you may have the right to: access, correct, or delete your personal data; object to or restrict certain processing; request a copy of your data in a portable format; withdraw consent where processing is based on consent. To exercise these rights, email admin@yoursignals.work. We will respond within 30 days. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.
9. International Transfers
Your data is stored on servers in the United States. If you access the Service from outside the US, your information is transferred to and processed in the US. By using the Service, you consent to this transfer. We apply the same security and privacy protections regardless of where data is stored.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be noted on this page. Your continued use of the Service after changes take effect constitutes acceptance. If you disagree with the updated policy, stop using the Service and delete your account.