Privacy policy

Who we are

Connecty runs connecty.nl and is responsible (the “controller”) for the personal data described here. You can reach us at [email protected].

What we store and why

We only store what your status page needs to work:

• Your email address and when you created your account, so we can send you sign-in links and know which status page is yours.
• Sign-in links. We store only a hashed version of each link, together with your email address. Links expire after 15 minutes and are removed by a daily clean-up.
• Sessions. When you sign in, we set a session cookie and store only a hash of it. Sessions expire after 30 days and are deleted when you sign out or once they have expired.
• Your status page: the address you choose (name.connecty.nl), up to five website URLs and, if you upload one, your logo. To prevent abuse, we also count how many logos you upload per hour.
• Check results. Once a day we request each of your websites and store when it was checked, whether it was reachable and the HTTP status code it returned.
• Feedback you send us through the feedback form: your message, your email address (or your account, if you’re signed in), the page you sent it from and your language. We use it only to reply to you and to improve Connecty.
• Connected apps. If you connect an AI app through our MCP server, we store the app’s name, its registration details (name and return addresses), which permissions you gave it, when you connected it and when it last used your account, and only hashed versions of its access tokens. Access tokens expire after one hour and refresh tokens after 30 days.
• Status emails. Whether you switched them on (they are off unless you do), the language to write them in and which status changes we already emailed you about. Switching them off in your dashboard or with the link in any status email deletes this setting.

What is public

Your status page is public by design. Anyone with its address can see your page address, the full URLs of your websites, their check results and history, and your logo. Your email address is never shown. Status pages ask search engines not to index them. Please don’t add URLs that contain secrets or personal data.

Legal basis

We process this data to provide the service you sign up for (Article 6(1)(b) GDPR). Bot protection, abuse prevention, security logs and privacy-friendly analytics are based on our legitimate interest in keeping Connecty safe and improving it (Article 6(1)(f) GDPR).

Service providers

We use a small number of providers who process data on our behalf. Each only receives what it needs for its task.

• Vercel hosts the website and runs the daily checks. Like any web host, it processes technical data such as IP addresses and request logs.
• Neon hosts our Postgres database, where the data above is stored.
• Resend delivers sign-in emails and the status emails you can switch on in your dashboard, and forwards feedback to our own inbox. It receives your email address and the content of the email (for status emails: your websites’ addresses and check results). We don’t send newsletters or marketing emails.
• Cloudflare provides our DNS, stores uploaded logos, runs Turnstile (a privacy-friendly check that you’re human when you sign in, claim an address, add a website or send feedback without signing in) and forwards analytics events to Plausible. Turnstile receives your IP address and browser information.
• Plausible Analytics counts visits without cookies and without storing personal data. Your IP address and browser user agent are only used to calculate an anonymous visitor identifier that changes every day, and are not stored. We also count a few sign-up steps (such as “page claimed”), without your email address, page address or website URLs.

Some of these providers are based in the United States. Where data leaves the European Economic Area, we rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Cookies

We only use functional cookies: a session cookie while you’re signed in (30 days), and cookies that remember your language and theme choice (one year). We don’t use tracking or advertising cookies, so there is no cookie banner.

No ads, no selling

Connecty shows no ads. We don’t sell or rent your data, and we don’t share it with anyone other than the providers above.

How long we keep data

• Sign-in links: 15 minutes, then removed by the daily clean-up.
• Sessions: up to 30 days, or until you sign out.
• Connected apps: until you disconnect them in your dashboard, or 30 days after their last use. Expired tokens are removed by the daily clean-up.
• Your email address, page address, websites, check history and logo: until you delete your account or ask us to. Removing a website in your dashboard deletes its check history right away, and removing your logo deletes the file.
• Feedback: until we have handled it, and at most two years, or until you ask us to delete it.
• Technical logs at our providers are kept for a limited period, according to their own retention policies.

Deleting your account

Email [email protected] from your account’s email address and include your status page address. We’ll delete your account, sessions and sign-in links, websites and check history, and your logo, and confirm by email.

Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, and to restrict or stop processing it. Email [email protected] from the address you signed up with. We’ll respond within one month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

If we change this policy, we’ll update this page and the date above.