Privacy policy

1. Who we are

Monitorizer is operated by Koryntis Inc., a company based in Ontario, Canada (“Koryntis”, “we”). This policy covers the website monitorizer.net, Monitorizer accounts and the Monitorizer app for Mac.

For any question or request about your data, write to ….

2. The Mac app: your data stays on your Mac

Your monitors, their history, incident pictures and alert settings are stored in the app’s private folder on your Mac. To run its checks, your Mac connects directly to the addresses you add, to the status pages you follow, to rdap.org (domain expiry dates) and to Cloudflare’s encrypted DNS (DNS monitors).

Alerts go straight from your Mac to the channels you set up (Slack, Discord, Microsoft Teams, Telegram, ntfy, Pushover or your own webhook), under those services’ own policies. Without an account, the app only reads from our site the public list of popular status pages and what the plan for Macs without an account includes, with no personal data.

3. What never leaves your Mac

• SSH keys and their passphrases.
• Alert channel addresses and tokens.
• Server key fingerprints, page fingerprints and passwords written inside addresses.
• Incident pictures of web pages (off unless you turn them on).

4. What we collect when you have an account

• Account: email address, name if you give one, language, time zone, your password stored only as a one-way Argon2id hash, your plan and its end date.
• Devices and sign-ins: for each signed-in browser and Mac, its IP address, browser or Mac name, and last activity.
• Monitors synced by your Mac: name, group, tags, notes, target (web address, host, user@host or domain), settings other than the secrets above, status, short check details, hourly uptime and response times, and incidents.
• Heartbeats: the time of each ping, the IP address that sent it, its optional message (the last 1,000 characters) and duration.
• Security and activity log: sign-ins, failed attempts and changes to your account, with their IP address.
• Emails we send you (confirmation, password reset, invitation) and their delivery records on our mail server.

5. Why we use it

We do not show ads, build advertising profiles or sell your data.

• To provide your account, show your monitors on the web and apply the changes you make there (performance of our contract with you).
• To keep accounts and the service secure: sign-in limits, abuse prevention, activity log (our legitimate interest).
• To send the emails the service needs: confirmation, password reset, invitations (performance of our contract).
• To measure visits and improve the site, only if you accept cookies (your consent).
• To meet legal obligations.

6. Cookies

• Session (__Host-mz_session): keeps you signed in. Expires after 30 days without use.
• Language (mz_locale) and time zone (mz_tz): show the site in your language and your local times. 1 year.
• Cookie choice (mz_consent): remembers whether you accepted visit statistics. 1 year.
• Pending event (mz_events): holds the name of an action you just took, such as creating an account, until the next page passes it to visit statistics. Only when statistics are on. 1 day.
• Google Analytics (_ga, _ga_*): only if you accept visit statistics.

7. Visit statistics

If you accept cookies, Google Analytics (possibly through Google Tag Manager) measures visits on our public pages and in your account, never in the administration pages: pages viewed, browser, device, approximate location, and actions such as creating an account, signing in a Mac or adding a monitor (only its type, never its address or name).

This data is processed by Google LLC, including in the United States. Declining changes nothing else in the service. You can change your choice at any time with the button below.

8. Who we share it with

Nobody else. The alert channels you configure receive alerts from your Mac, not from us.

• OVH, which hosts our servers in Beauharnois, Quebec, Canada.
• Apple, for purchases made through the Mac App Store. Apple handles payment; we never see your card.
• Google, for visit statistics, only if you accept them.
• Authorities, when the law requires it.

9. Where it is stored

On our servers in Canada, reached only through encrypted connections. Passwords and sign-in tokens are never stored in readable form, and the mail server password is encrypted. Visit statistics, when you accept them, are processed by Google, including in the United States.

10. How long we keep it

• Account data: until you delete your account.
• Monitor history: as long as your plan allows, at most 365 days.
• Deleted monitors: 30 days in the trash, then deleted for good.
• Heartbeats: the newest 50 pings of each heartbeat.
• Sessions: until you sign out, or 30 days without use.
• Security and activity log: while your account exists.
• Links we email: confirmation 48 hours, password reset 1 hour, invitation 7 days.
• Backups: daily copies are kept 7 days and monthly copies 12 months, so deleted data leaves our backups within 12 months.
• On your Mac: check history 1 year, incident pictures 30 days.

11. How we protect it

• Passwords hashed with Argon2id; sign-in tokens stored only as hashes.
• Limits on sign-in attempts and other sensitive actions.
• Encrypted connections, a strict content security policy and no third-party scripts in the administration pages.
• Administrator access limited to a few people, with every change logged.
• Daily backups, kept on our servers.

12. Your rights

You can see and correct your information in Profile, and delete your account there at any time (Profile, Delete account): it takes effect at once. You can also ask us for a copy of your data, a correction, a deletion, or to stop a use you object to, and withdraw your consent to visit statistics.

Write to … from your account’s email address. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, to the Commission d’accès à l’information du Québec if you live in Quebec, or to your local data protection authority in the European Union or the United Kingdom.

13. Children

Monitorizer is not meant for people under 16, and we do not knowingly collect their data. If you think a child gave us information, write to us and we will delete it.

14. Changes to this policy

When we change this policy, the date at the top changes. For important changes, we tell you by email or with a message in your account before they apply.

15. Contact

Koryntis Inc., Ontario, Canada. Privacy questions and requests: ….