This policy explains what personal data UpOrNot processes, why, for how long and what rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
APPYHOUR, 10 rue de Penthièvre, 75008 Paris, France. Contact: Contact.
What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Website address you submit | Run the check and show the result | Legitimate interest (providing the service you request) | Not stored. Only the hostname may appear in the public list (see below) |
| Hostname of checked websites (e.g. example.com) | “Recently checked websites” list | Legitimate interest (social proof, transparency) | Rolling list of the latest 24 entries |
| IP address and technical request data | Security, rate limiting, abuse prevention, hosting logs | Legitimate interest (security of the service) | Per our host's log retention, generally up to 30 days |
| Name, email, subject and message (contact form) | Answer your request | Legitimate interest / steps at your request | Up to 12 months after our last exchange |
| Analytics identifiers (Google Analytics), only if you accept | Audience measurement | Consent | Up to 14 months; consent choice kept 6 months |
We never store full URLs, paths, query strings or credentials in public lists or analytics. We do not sell personal data and we do not use it for advertising.
Recipients and processors
- Netlify, Inc. (United States) — hosting, serverless functions, form handling and storage.
- Google LLC (United States) — Google Analytics, only if you consent.
- Public DNS-over-HTTPS resolvers (Cloudflare, Google) — receive the hostname being checked, never your IP address.
Transfers to the United States rely on the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
Domain owners
If you own or administer a domain and do not want it to appear in the public “Recently checked websites” list, ask us through the contact form (subject: “Hide my domain”). Once verified, the domain and its subdomains are excluded.
Your rights
You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You can withdraw consent to analytics at any time via “Cookie settings” in the footer. Write to us via Contact. You may also lodge a complaint with the CNIL (www.cnil.fr).
Security
Traffic is encrypted (HTTPS). The checker refuses private and internal network destinations, limits the number of requests and does not keep the addresses you submit.
Changes
We may update this policy. The date at the top of the page shows the latest version.