Privacy Policy
Last updated: 2026-02-17
Use Boring ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information.
Information We Collect
We collect information in the following ways:
- Account information you provide directly: email address, password, and optional display name
- Websites and domains you add for monitoring, including URLs, check configurations, and alert preferences
- Payment information processed securely by our payment provider — we do not store card details
- Technical data collected automatically: IP address, browser type, pages visited, and timestamps
- Communications you send to us via email or contact forms
- Monitoring results collected on your behalf: HTTP response codes, response times, availability status, SSL certificate details, WHOIS expiry data, and DNS records
- Vendor status data aggregated from official status pages and health check endpoints
How We Use Your Information
We use the information we collect to:
- Provide and maintain our monitoring and utility services
- Send you alerts, notifications, and monitoring reports
- Process your payments
- Respond to your requests and support needs
- Improve our services and develop new features
- Detect and prevent abuse or unauthorised use of the service
- Comply with legal obligations
Lawful Basis for Processing
Under the UK GDPR and EU GDPR, we process your personal data on the following bases:
Contract performance: processing necessary to provide the service you signed up for, including account management, monitoring, and alerts.
Legitimate interests: processing for service improvement, security, and fraud prevention, where these interests are not overridden by your rights.
Consent: where you have opted in to marketing communications. You may withdraw consent at any time.
Legal obligation: where processing is required to comply with applicable law.
Third-Party Services
We use the following categories of third-party services to operate:
These services have their own privacy policies. We share only the minimum data necessary for each service to function.
- Payment processing: Stripe — processes payment details securely
- Email delivery: Mailgun — sends transactional emails, alerts, and notifications
- Cloud hosting: Amazon Web Services (AWS) — hosts the application and stores data
- Analytics: privacy-focused analytics to understand usage patterns (no personal data shared)
- DNS and network services: Cloudflare — provides CDN, DNS, and edge computing
Data Storage and Location
Your data is stored on servers operated by Amazon Web Services in the EU (Ireland, eu-west-1) and/or the United States. Data may be transferred between these regions as necessary to provide the service.
Where data is transferred outside the UK or EEA, we rely on adequacy decisions or standard contractual clauses to ensure appropriate safeguards are in place.
Cookies and Analytics
We use essential cookies required for the service to function, such as session cookies for authentication.
We may use privacy-focused analytics to understand how the service is used. We do not use advertising cookies or share browsing data with advertisers.
For full details, see our Cookie Policy.
Data Security
We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.
Data Retention
We retain your account information and monitoring data for as long as your account is active.
After account cancellation, monitoring data is retained for 30 days and then permanently deleted. Account information (email, billing records) is retained for up to 12 months to comply with financial record-keeping requirements, then deleted.
Free tier accounts inactive for 12 months may have their data deleted after notification.
You can request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, subject to legal retention requirements.
Your Rights
Under applicable data protection law, including the UK GDPR and EU GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: request correction of inaccurate personal data
- Erasure: request deletion of your personal data
- Portability: request your data in a machine-readable format
- Restriction: request that we limit processing of your data
- Object: object to processing based on legitimate interests
- Withdraw consent: where processing is based on consent, withdraw it at any time
- Complain: lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or your local supervisory authority
Contact Us
If you have questions about this Privacy Policy, please contact us at hello@useboring.com.
Monitoring and Infrastructure Data
When you use our monitoring service, we collect data about the websites, domains, and services you configure. This includes HTTP response data, SSL certificate chains, WHOIS records, and DNS query results.
For our free tools, results are cached briefly and not permanently stored. For paid monitoring, historical results are stored as part of the monitoring service and are available to you in your dashboard.
Vendor status monitoring aggregates publicly available data from official status pages. We do not have access to your accounts with those vendors.