Privacy policy

Who we are

Elevator Uptime is a free, public platform for reporting and tracking elevator and escalator outages. We are the organization responsible for the personal information described here.

What we collect

• Outage reports. When you report an outage we collect the note you write, any photo you attach, and a fingerprint hash computed in your browser. The hash is used to limit abuse; it is not your name or email address.
• Outage alerts. If you sign up for alerts we collect your email address, the buildings or transit lines you follow, and a proof-of-consent record that includes a hashed form of the IP address the signup came from.
• Session attribution. When you arrive from a campaign link or an external site, a small record of the landing path, the referrer host, any UTM parameters, and the first-seen time is stored in your browser’s sessionStorage. It uses no cookie, so it does not change how pages are cached or served, and it is not linked to your identity.
• Analytics. We use Google Analytics 4 (GA4), Microsoft Clarity, and Vercel Analytics to understand how the site is used. These tools use cookies and similar identifiers and record things like pages viewed, approximate location derived from IP address, device and browser type, and — for Clarity — session replays with input masked.

Why we collect it, and on what basis

• To publish and moderate outage reports, keep the map accurate, and prevent spam and abuse. This is our legitimate interest in running a trustworthy public service, and — for the note and photo — your decision to submit them.
• To send the outage alerts you asked for. This is based on your consent, which you can withdraw at any time.
• To measure and improve the site. This is based on your consent where the law requires it.

Who processes it, and where it goes

We do not sell your personal information. We share it with the service providers that run the site and send our email, and with the analytics tools named above:

• Supabase hosts our database and the photo storage for reports.
• Vercel hosts and serves the website and provides Vercel Analytics.
• Postmark delivers our alert and notification email and processes delivery, bounce, and complaint events.
• Cloudflare Turnstile checks forms for automated abuse.
• Google provides Google Analytics 4.
• Microsoft Clarity provides session analytics.
• Automated moderation Submitted notes are checked by a text classifier running on third-party language models (Anthropic, OpenAI, and DeepSeek) through Cloudflare’s AI Gateway.

Some of these providers store and process data outside Canada, including in the United States. Where they do, the transfer is covered by the provider’s contractual protections.

Retention

We keep personal information only as long as we need it for the purposes above, or as the law requires. Our current rules:

Reporter fingerprint hashes

Removed after 90 days.

Unsubscribed alerts email address

Deleted after 30 days if you have no active follows. We keep a one-way suppression hash so we do not email you again.

Alert consent records

Kept while we rely on your consent and for 3 years after it ends, as proof of when and how you opted in.

Notification delivery records

Kept for 13 months.

Session attribution

Kept for 25 months.

Your rights and choices

• Unsubscribe. Every alert email includes a one-click unsubscribe link that takes effect immediately.
• Manage your follows. The links in any alert email let you see and change which buildings or lines you follow.
• Delete your data. Email info@elevatoruptime.com and we will delete your subscriber record, follows, and delivery history. We keep only a minimal consent record as proof of your opt-in, and a suppression entry so we do not contact you again.
• Contact us. Reach us at the address above with any question or request about your personal information. Depending on where you live, you may also have the right to access, correct, or port your information, or to complain to your local privacy regulator.

CASL and CAN-SPAM

Our alert email follows Canada’s Anti-Spam Legislation (CASL) and the United States CAN-SPAM Act. We only send alerts to addresses that opted in, every message identifies Elevator Uptime as the sender and includes our mailing address, and every message includes a working unsubscribe link.

Children

Elevator Uptime is a general-audience service and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

When we change this policy we update the version date at the top of the page. If a change is material we will make it prominent before it takes effect.