isUpMap
Privacy Policy
Effective date: June 8, 2026
This Privacy Policy describes how isUpMap, operated by Jairon Landa ("we", "us", or "our"), collects, uses, and protects information when you visit isupmap.com.
isUpMap is a free, read-only public service. We do not require accounts, logins, or any personal information to use the site.
1. Information We Collect
1a. Analytics (Google Analytics 4)
We use Google Analytics 4 (GA4) on the production site to understand aggregate usage patterns. GA4 collects:
- Pages visited and time spent on the site
- Approximate geographic location (country / region level, derived from IP by Google — the raw IP is not stored by us)
- Browser type, device type, and operating system
- Referrer URL
Analytics is disabled on localhost and development environments — it runs only on the production domain. Data is processed by Google under their own Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on or a browser extension that blocks tracking scripts.
1b. Community "Report It's Down" Submissions
When you voluntarily submit a "Report it's down" signal for a service, we record:
| Data point | What it is | Retention |
|---|---|---|
| IP hash | A one-way SHA-256 hash of your IP address combined with a server-side secret salt. Your raw IP address is never stored. The hash is used solely to enforce a one-report-per-IP deduplication window (24 hours per service). | 30 days |
| Country code | Two-letter country code derived from the network request by Cloudflare (e.g. "US", "DE"). Used for the geographic breakdown on service pages. | 30 days |
| Report reason | One of five categories you select: "Can't connect", "Errors", "Can't log in", "Slow", or "Something else". | 30 days |
| Timestamp | When the report was submitted (Unix epoch, milliseconds). | 30 days |
1c. Infrastructure Logs (Cloudflare)
isUpMap runs on Cloudflare Workers. Cloudflare may log request metadata (IP addresses, request paths, timestamps) as part of normal infrastructure operation. These logs are controlled by Cloudflare and subject to their Privacy Policy. We do not have access to raw Cloudflare infrastructure logs beyond what our own application code records.
2. What We Do Not Collect
- We do not collect names, email addresses, or any other contact information.
- We do not require account creation or login.
- We do not process payments or store financial information.
- We do not use cookies for tracking or session management (the site has no login state).
- We do not sell, rent, or share your data with third parties for advertising purposes.
3. How We Use Collected Information
The limited data we collect is used to:
- Display community reports — aggregate counts and country breakdowns are shown publicly on per-service status pages as a supplementary signal.
- Prevent spam — the hashed IP is used to enforce the one-report-per-IP-per-service-per-24h deduplication rule.
- Understand aggregate site usage — via GA4, to guide decisions about which services to add or how to improve the UI.
- Rate limit the API — IP addresses from incoming requests are used to enforce per-IP request limits. They are not logged or stored by our application code.
4. Data Retention
- Community report records (IP hash, country, reason, timestamp) are automatically deleted after 30 days by a daily maintenance sweep.
- Service incident records (automated status transitions) are retained for 90 days.
- Google Analytics data is retained according to Google's standard retention settings.
5. Third-Party Services
| Service | Purpose | Privacy policy |
|---|---|---|
| Google Analytics 4 | Aggregate usage analytics | policies.google.com/privacy |
| Cloudflare Workers / D1 / KV | Hosting, edge compute, and data storage | cloudflare.com/privacypolicy |
| Protomaps | Map tile provider for community report world maps | protomaps.com/privacy |
Sponsor links in the site header point to third-party websites. We do not share any data with sponsors. Their privacy practices are governed by their own policies.
6. Data Security
We take reasonable technical measures to protect data:
- IP addresses are never stored in raw form — only as a keyed SHA-256 hash.
- All traffic is served over HTTPS.
- Community reports flow through a server-side queue before reaching the database, providing a buffer against direct injection attacks.
- Database access is restricted to the Cloudflare Worker (no public database endpoint).
7. Children's Privacy
isUpMap is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through the community report feature, please contact us and we will delete it promptly.
8. Your Rights
Because we do not collect identifiable personal information (raw IPs are never stored; reports are anonymous), we cannot link a report to a specific individual. If you are in a jurisdiction with data rights (such as GDPR or CCPA) and believe we hold data attributable to you, contact us and we will investigate.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective date" at the top of this page reflects the latest revision. Continued use of the Service after any changes constitutes acceptance of the updated policy.
10. Contact
Questions about this Privacy Policy? Reach out via @JaironDevNull on X or open an issue on the GitHub repository.