Privacy policy
Effective 20 October 2026 · Updated 20 October 2026 to add Google Analytics on the public website
BotUP is an uptime monitoring service available as an Android app and at botup.app. This policy explains what information BotUP collects, how it is used and the choices you have. Questions go to support@botup.app.
Information we collect
| Data | Why |
|---|---|
| Name, email address and Google account ID, from Sign in with Google | To create your account and keep your monitors separate from other users |
| Monitors you add: URL, name, check interval, keyword, priority | To run the checks you asked for |
| Check results: time, status code, response time, error type | To show uptime, response time and incidents, and to send alerts |
| Push notification token and platform of your device | To deliver alerts to your phone |
| Session token (stored only as a one-way hash) | To keep you signed in |
BotUP does not collect your contacts, precise location, photos or files, and does not show ads.
Website analytics and cookies
The public pages of botup.app (home, privacy, terms and delete account) use Google Analytics 4 to measure how many people visit, which pages they read and where visits come from, so we can improve the site. Google Analytics is not used in the Android app or in the dashboard at botup.app/app.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga, _ga_FLKR04M240 | Google Analytics, on public pages | Count visits and tell new visitors from returning ones | Up to 2 years |
botup_session | BotUP, only after you sign in | Keep you signed in to the dashboard | 90 days or until you sign out |
Google Analytics collects pages viewed, referring website, approximate location (country and city, derived from IP address), device, browser and operating system. It does not receive your name, email address or monitors. Analytics data is kept for the retention period set in Google Analytics (2 months). We use it on the basis of our legitimate interest in understanding and improving the website.
You can block these cookies in your browser settings, or opt out of Google Analytics on all websites with the Google Analytics opt-out browser add-on. The site works the same without them.
How we use it
- Running checks on the URLs you add and recording the results.
- Sending push alerts when a monitor goes down, stays down or recovers.
- Showing your history in the app and web dashboard.
- Showing a public status page only for accounts whose owner has turned it on. Monitors of other accounts are never shown publicly.
We do not sell your data or share it with anyone for advertising. Google Analytics data is not linked to your BotUP account and is not used for ad personalisation.
Service providers
- Cloudflare hosts the website, API and database (Asia Pacific region) and runs the checks.
- Google provides Sign in with Google, Firebase Cloud Messaging (which delivers push notifications to Android devices), Google Analytics on the public website, and the font loaded from Google Fonts. See how Google uses data from sites that use its services.
- Expo relays push notifications from BotUP to Firebase Cloud Messaging.
These providers process data only to deliver their service to BotUP and under their own privacy terms.
How long we keep it
- Individual check results are kept for 90 days, then deleted automatically.
- Daily uptime summaries, monitors and incidents are kept while your account exists.
- Sessions expire after 90 days or when you sign out.
- When you delete your account, all of the above is deleted immediately. Copies may remain in automatic database backups for up to 30 days before they are overwritten.
Your choices and rights
You can view and change your monitors at any time, sign out on any device, and delete your account from the app (Settings, Delete account) or on the website. See Delete your account. You can also email us to access, correct or delete your data, or to withdraw consent, in line with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022). We reply within 14 days.
Security
All traffic uses HTTPS. Session tokens are stored only as hashes, the website session cookie is HttpOnly and Secure, and each account can only read its own monitors.
Children
BotUP is not directed to children under 13 and we do not knowingly collect their data.
Changes
If this policy changes, the new version is posted here with a new effective date. Significant changes are also announced in the app.