Report privacy and retention

Outage reports are anonymous and are not linked to your account. A name and comment are optional. Administrators can review them to moderate abuse; the public sees aggregate report counts, not these fields.

We store an HMAC hash of the reporting IP address to detect duplicate reports. The reporting database does not store the raw IP. Cloudflare Turnstile receives information needed to verify the challenge; see Cloudflare’s privacy policy.

Names, comments, IP hashes, and user-agent hashes are erased after 30 days by an hourly cleanup job. Anonymous counts, categories, and timestamps remain for historical charts. Administrators can hide abusive reports from counts or permanently delete individual reports through Report moderation.

For earlier deletion, contact the operator of this installation with the platform and approximate report time. Reports have no account identity, so the operator may need details to identify the right report. Infrastructure logs and backups have separate operator-managed retention; deletion from the live database does not immediately erase older backups.

Product analytics count selected actions, such as report acceptance and monitor setup. Events contain only the event name and time: no user identifier, report text, destination URL, or persistent visitor cookie. Events expire after 30 days. Browser Do Not Track disables collection. These counts describe actions, not unique people.