Rootiest privacy notices

Status page privacy notice

Last updated 10 November 2026

This notice covers the Rootiest status page at status.rootiest.dev, including its RSS feed and status badges. The Rootiest Status Android app and the support desk have their own notices: Rootiest Status app and support desk.

In short: you can read the status page without signing in, and then nothing about you is stored. If you choose to sign in with RootiestID, a cookie in your browser holds your name, profile picture link and groups for up to 14 days.

There are no ads, no analytics and no tracking, and we never sell your data.

Who is responsible

Chris Laprade, who runs Rootiest, is responsible for the status page and the personal data described here. To contact us about your data, see Contact.

What we collect and why

When you visit without signing in

The page sets no cookies and runs no analytics. Like any website, our server sees your IP address and browser details while it answers each request, but the status page keeps no record of them: our web server keeps no access log for it.

When you sign in with RootiestID (optional)

Signing in shows you the services your RootiestID groups give you access to. RootiestID sends us your display name, a link to your profile picture and your group memberships. We use them to:

We don't store this in a database. It goes into a signed cookie in your browser, which lasts up to 14 days or until you press Sign out. Your browser loads your profile picture directly from RootiestID.

When you sign in, our server writes one line to its log with your display name and groups, so we can check that people see the right services. The log is limited in size, so older lines are deleted automatically as new ones are written.

The Android app's push address

If you use the Rootiest Status Android app, it gives the status page a push address so the page can tell it to refresh. This address is random and doesn't identify you. It is deleted when the app hasn't renewed it for 30 days. See the app's notice for details.

RootiestID itself

Your RootiestID account (at auth.rootiest.dev) is a separate Rootiest service. This notice covers only what the status page receives from it.

Legal basis

For visitors in the EU, UK and similar jurisdictions: we process this data because of our legitimate interest in running a status page that shows each person only what they may see, and keeping it secure (GDPR Article 6(1)(f)). Signing in is your choice, and you can sign out at any time.

Where the data is kept

The status page runs on servers we rent in the United States, in Buffalo, New York and Ashburn, Virginia. If you visit from outside the United States, your requests and any sign-in data are processed there. The hosting provider runs the hardware, but we run the servers and the status page ourselves.

The status page's own database holds service history and the app push addresses described above. It is backed up to Backblaze B2 in the eastern United States, encrypted on our server before it leaves, so Backblaze cannot read it. Backups are kept for up to 6 months.

How long we keep it

Your rights

Depending on where you live, you may have the right to:

Because the status page stores almost nothing about you, signing out removes most of it at once. For anything else, contact us.

Children

The status page is not aimed at children, and we don't knowingly collect data from them.

Changes

If what the status page collects changes, we'll update this notice and the date at the top.

Contact

Open a request on the support desk under Privacy & Data Request: support.rootiest.dev/new?category=privacy (sign in with RootiestID).

No RootiestID? Use the email form at support.rootiest.dev/guest, choose General Questions, and say it's a privacy request.