Security

Passwords

Account passwords are stored only as bcrypt hashes (PHP password_hash). We never see, log or email your password. Password resets use single-use, expiring tokens.

Payments

Subscriptions are handled entirely by PayPal. Card and bank details never touch our servers; we receive only PayPal's payment notifications (IPN), which we cryptographically verify with PayPal before acting on them.

Monitoring data

We store the public DNS records, certificate details and HTTP responses of the domains you monitor — information that is public by design. Check history is retained according to your plan and deleted with your account on request.

Transport

All traffic to uptimevitals.com is HTTPS-only. Sessions use secure, HTTP-only cookies. Our own infrastructure is monitored by the same engine our customers use — see the public status page.

Reporting a problem

Email info@uptimevitals.com with "Security" in the subject. Reports are read by the operator, not a ticket queue.