Privacy policy
1. Introduction
This policy describes how servicedowntoday.com processes personal data, in compliance with Regulation (EU) 2016/679 (GDPR).
2. Data controller
The data controller is Benjamin Jerez (a sole proprietorship based in France, registered with the Avignon RCS under number 105 336 457). Contact: dalbian.app@gmail.com.
3. Data processed
3.1 Outage reports
- a pseudonymized fingerprint (salted SHA-256 hash of IP and User-Agent): the IP address is never stored in plaintext;
- the type of problem reported (optional);
- the date and time of the report.
3.2 Comments
Pseudonym (optional), comment text with e-mail addresses and phone numbers masked, pseudonymized hash. A comment is published immediately if it passes an automatic filter (insults, links, spam) and kept hidden otherwise; hidden comments are deleted after 30 days.
3.3 Data we do NOT collect
- no account or sign-up;
- no email address (except when you contact us voluntarily via the form);
- no precise geolocation (GPS);
- no advertising tracking.
Usage statistics (audience) are collected in aggregated form, without cookies and without direct personal data (see §4.4).
4. Cookies
- 4.1 Essential technical cookies: required for the site to work.
- 4.2 Advertising cookies: none.
- 4.3 Third-party cookies: no third-party profiling cookies.
- 4.4 Usage statistics: we use PostHog to measure audience in aggregated form, without cookies and without local storage (in-memory persistence only, no identifier kept between visits). When statistics are on, the only requests sent to PostHog are the event requests (page views and clicks): we do not use its feature flags, surveys, experiments or session recordings. If you switched statistics off in Cookie settings, or if your browser sends Do Not Track or Global Privacy Control, PostHog is not loaded at all: no script, no request, nothing stored. Data is hosted in the European Union. Visits to the /admin section are not tracked. Your choice is kept in your browser only (one local-storage entry,
sdt-analytics, written only when you switch statistics off).
5. Processing, legal bases, retention and recipients
| Purpose | Data | Legal basis | Retention | Recipients |
|---|---|---|---|---|
| Outage reports | problem type, city (optional), IP/User-Agent hash, date and time | legitimate interest | 30 days | Vercel, Neon |
| Anti-spam / security | pseudonymized fingerprint (hash of IP + User-Agent) | legitimate interest | 30 days | Vercel, Neon |
| Comments | pseudonym, text (personal data masked), hash, filter outcome (published / hidden) | legitimate interest | until removal | Vercel, Neon |
| Contact and service suggestions | email, message, and for a suggestion the name and official website of the service | legitimate interest / pre-contractual measures | duration of handling the request | email provider |
| Technical logs / security | service logs | legitimate interest | short | Vercel, Neon |
| Usage statistics (audience) | navigation events, device type, approximate country, referrer; no plaintext IP, no cookies | legitimate interest | aggregated (PostHog retention) | PostHog (EU) |
6. Data retention
- reports: 30 days maximum (automatic deletion);
- anti-spam data (hashes): 30 days maximum;
- published comments: until removal;
- comments hidden by the automatic filter: 30 days maximum (automatic deletion);
- aggregated hourly statistics: kept in aggregated form.
7. Data sharing
Data is never sold or shared with third parties for commercial purposes.
8. Providers and transfers outside the EU
Some providers are based in the United States: Vercel Inc. (hosting) and Neon Inc. (database). Transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCC). Usage statistics are handled by PostHog, with data hosted in the European Union (EU instance, no transfer outside the EU). Data is never sold or shared for commercial purposes.
9. Your rights (GDPR)
You have the right to access, rectify, erase, object to and port your data. You can exercise these rights by writing to dalbian.app@gmail.com.
10. Complaint to a supervisory authority
The controller is established in France: the lead authority is the CNIL (France). Users residing in the EU can also contact their local data protection authority. You have the right to lodge a complaint under Article 77 of the GDPR.
11. Changes
This policy may be updated over time. Last updated: July 2026.