Privacy policy

This policy explains what personal data uptime-kotlin.com processes and what we do with it. The site has no trackers, no analytics and no advertising. The only personal data we keep is what you give us to join the Cloud waitlist.

1. Who is responsible

The data controller is Théo Meunier, sole trader (micro-entrepreneur), 2 rue de bretagne 80250 Ailly sur noye, France. You can reach us at [email protected].

This policy covers the uptime-kotlin.com website only. Uptime Kotlin is open-source software: when you run it on your own servers, the data it collects stays with you and we have no access to it.

2. What we process

• Cloud waitlist: your email address, the plan you are interested in, monthly or yearly billing, the number of monitors you selected and the date you joined. We do not store your IP address with your sign-up.
• Sign-up notification: when you join, we receive the same details in an email so we know someone signed up.
• Abuse protection: to limit repeated sign-up attempts, your IP address is counted for 10 minutes in our Redis server. It is never written to the database.
• Server logs: like any web server, ours records technical data such as the IP address, the date and the page requested.
• GitHub stars: to show the number of stars of the project, your browser asks the GitHub API directly, which receives your IP address as for any web request.

3. Why we use it

We use waitlist data for two purposes only: to tell you when Uptime Kotlin Cloud opens, and to apply the founding price promised to everyone on the list. We do not send newsletters and we do not sell or rent the list.

Cloud waitlist: the legal basis is your consent (Article 6(1)(a) of the GDPR), given when you submit the form. You can withdraw it at any time by writing to us; it does not affect what was done before.

Abuse protection and server logs: the legal basis is our legitimate interest in keeping the site available and secure (Article 6(1)(f) of the GDPR). This data is used for nothing else.

4. Who receives data

• Hosting: OVH SAS, which runs the servers of the site, its database and its email queue.
• Email delivery: our email service provider, which sends the sign-up notification to us.
• GitHub, Inc.: only the request your browser makes to show the number of stars.

These providers act on our instructions or, for GitHub, under their own privacy policy. Nobody else receives your data, unless the law requires us to disclose it.

5. Locations and international transfers

The site, its database and its email queue are hosted by OVH SAS in the European Union. The only transfer outside the European Union is the request your browser sends to the GitHub API, in the United States, to show the number of stars.

6. Security and browser storage

The site is only served over HTTPS, and the database and the email queue are not reachable from the internet.

The site sets no cookies. It only stores your light or dark theme choice in your browser's local storage, which never leaves your device and requires no consent. Fonts are served from our own server.

7. Retention and deletion

Waitlist data, and the notification emails that contain it, are deleted 3 years after you joined at the latest, or as soon as you ask us to. An email waiting to be sent is removed from the queue once delivered; if delivery keeps failing, it is removed after 7 days. Server logs are deleted after 12 months at most.

8. Your rights and contact

Under the GDPR, you can access your data, have it corrected or deleted, restrict or object to its processing, withdraw your consent and receive a copy of it in a portable format. Write to [email protected]; we answer within one month.

If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

9. Changes

When this policy changes, the date at the top of the page is updated. If a change affects how waitlist data is used, we tell the people on the list by email before it applies.