StatusCake Privacy Policy

Last updated: 03 February 2026

1. Who we are

StatusCake is a website monitoring and performance monitoring service operated by TrafficCake Limited, a company registered in England and Wales.

TrafficCake Limited is the data controller for personal data collected in connection with:

• the StatusCake website;
• StatusCake user accounts; and
• StatusCake monitoring services, including Status Pages.

This privacy policy explains how TrafficCake Limited collects, uses, and protects personal data when you use the StatusCake website and services.

2. Scope of this policy

This privacy policy applies to:

• visitors to the StatusCake website;
• customers who create and use StatusCake accounts;
• individuals added by customers to receive alerts or notifications via the StatusCake service;
• individuals who receive StatusCake service communications; and
• subscribers to customer Status Pages (as explained further below).

This policy does not cover other products operated by TrafficCake Limited or its group companies that have their own separate privacy notices.

3. Children

StatusCake is intended for business use only. It is not directed at children, and we do not knowingly collect personal data from children.

If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.

4. Contact details

If you have any questions about this privacy policy or how we handle personal data, you can contact us at:

Email: [email protected]
Company: TrafficCake Limited

5. Updates to this policy

We may update this privacy policy from time to time to reflect changes to our services, legal requirements, or how we process personal data.

When we do, we will update the “Last updated” date at the top of this policy.

6. What personal data we collect

Depending on how you interact with StatusCake, we may collect the following categories of personal data:

Account and user information

• Name
• Email address
• Username or account identifier
• Login and authentication details
• User role or permission level within an account

Team members

StatusCake accounts may have multiple users. For each user we collect:

• Name
• Email address
• Access role (e.g. read-only, full access)

We do not collect job titles or employment details.

Alert and notification recipients

• Email addresses
• Telephone numbers
• Optional labels or aliases associated with alert contacts (which may include a person’s name)

Customers are responsible for ensuring they have the appropriate authority to provide us with contact details for alert recipients.

Status Page subscribers

• Email address
• Subscription preferences
• IP address

Technical, usage, and audit data

• IP address
• Browser and device information
• Login timestamps
• Records of actions taken within the service (such as creating or modifying tests, alert settings, or users)

Support communications

• Support requests and correspondence
• User identifiers
• IP address
• Browser or device metadata associated with support interactions

Alert delivery metadata

• Alert delivery status (e.g. sent or failed)
• Timestamps
• Delivery channel (e.g. email or SMS)

Billing information

• Billing contact details
• Transaction and payment metadata

Payment card details are processed by third-party payment providers and are not stored by us.

7. Our role as data controller and data processor

When we act as a data controller

TrafficCake Limited acts as a data controller for personal data relating to:

• StatusCake account holders and users
• Team members added to accounts
• Individuals added to receive alerts or notifications
• Visitors to the StatusCake website
• Service-related communications

In these cases, TrafficCake Limited determines the purposes and means of processing personal data.

When we act as a data processor

In relation to Status Page subscribers, TrafficCake Limited acts as a data processor on behalf of the customer who operates the Status Page.

In this context:

• The customer is the data controller
• TrafficCake Limited processes subscriber data only to provide the Status Page and related notification services
• Processing is carried out in accordance with our Data Processing Agreement

Subscribers should refer to the customer’s own privacy information for details of how their personal data is used.

Data Processing Agreement

Where TrafficCake Limited processes personal data on behalf of customers as a data processor, such processing is governed by our Data Processing Agreement (DPA).

Our DPA sets out the respective data protection responsibilities of TrafficCake Limited and our customers in accordance with applicable data protection laws.

A copy of our Data Processing Agreement is available at:
https://www.statuscake.com/gdpr-statuscake-data-processing-agreement/

8. Lawful bases for processing personal data

We process personal data only where we have a valid lawful basis to do so under the UK General Data Protection Regulation (UK GDPR).

Contract

We process personal data where it is necessary to:

• Create and manage StatusCake accounts
• Provide the StatusCake services
• Send service-related communications (such as alerts, maintenance notifications, or changes affecting service operation)

Legitimate interests

We process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests include:

• Improving and developing our services
• Monitoring usage and performance
• Ensuring security and preventing misuse or fraud
• Communicating with customers about product updates or account-related changes

You can opt out of non-essential communications at any time.

Consent

We rely on consent where required by law, for example:

• Where individuals subscribe to receive Status Page updates
• Where required for certain cookies or similar technologies
• Where individuals choose to receive optional marketing communications

You can withdraw consent at any time.

Legal obligations

We may process personal data where necessary to comply with legal or regulatory obligations, including financial and tax record-keeping.

9. How we use personal data

We use personal data for the following purposes:

Providing the StatusCake service

• Creating and managing accounts
• Authenticating users
• Monitoring websites and services
• Sending alerts and notifications
• Providing Status Pages and updates

Service communications

• Alerts, incident notifications, and status updates
• Maintenance and operational notices

These communications are necessary for service delivery and cannot be opted out of.

Account management and administration

• Managing subscriptions and billing
• Processing payments
• Maintaining audit logs

Product improvement and analytics

• Understanding how the service is used
• Monitoring reliability and performance
• Improving and developing features

Where possible, analytics data is aggregated or anonymised.

Marketing and product updates

• Sending product updates, feature announcements, or newsletters to existing customers

You can opt out of non-essential marketing communications at any time.

Security and fraud prevention

• Protecting systems and accounts
• Preventing unauthorised access or misuse

Legal and compliance purposes

• Complying with legal obligations
• Enforcing our terms
• Protecting our legal rights

Aggregated and anonymised data

We may aggregate and anonymise personal data so that it can no longer be used to identify any individual.

We use aggregated and anonymised data for purposes such as analysing service performance, understanding usage trends, and improving our products and services.

Aggregated and anonymised data is not personal data and is not subject to data protection laws.

10. Cookies and similar technologies

We use cookies and similar technologies to support website functionality, analytics, and marketing.

Types of cookies

• Essential cookies – required for core functionality
• Analytics cookies – help us understand usage (e.g. Google Analytics, Mixpanel, Hotjar)
• Advertising cookies – used to measure and promote our services (e.g. Google Ads)

You can manage cookies through your browser settings. Disabling cookies may affect site functionality.

We may update our use of cookies over time and, where required, implement additional consent mechanisms.

11. Data sharing and third-party processors

We may share personal data where necessary to operate the service, comply with legal obligations, or protect our rights. We do not sell personal data.

Third-party service providers

We use trusted third-party providers for:

• Hosting and infrastructure (e.g. AWS, GCP, Vultr, & DigitalOcean)
• Email delivery (e.g. SparkPost, Mailchimp)
• Payment processing (e.g. Stripe)
• Analytics (e.g. Google Analytics, Mixpanel, Hotjar)
• Customer support (e.g. Intercom)
• SMS delivery (e.g. Twilio)
• Status communications (e.g. Atlassian Statuspage)

Depending on context, these providers may act as processors or independent controllers. Appropriate contractual safeguards are in place.

Group companies

We may share personal data with ChangeCrab Limited where necessary for shared personnel, infrastructure, support, or security.

Professional advisers

We may share personal data with our accountants, auditors, and legal advisers where necessary and subject to appropriate confidentiality obligations.

Legal disclosures

We may disclose personal data where required by law or to protect our rights, customers, or others.

12. International data transfers

Personal data is primarily stored and processed in the United Kingdom.

StatusCake is a global service. Communications may be sent to individuals worldwide, and some third-party providers may process or access data outside the UK.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy decisions or approved contractual protections.

13. Data retention

We retain personal data only for as long as necessary for service provision, legal compliance, and legitimate business purposes.

• Account data is retained while an account remains active.
  Some accounts may remain where they have not been actively closed, as we cannot always distinguish abandoned accounts from active ones.
• Alert recipient and subscriber data is retained while required for notifications or until removed or unsubscribed.
• Billing records are retained for statutory periods.
• Backup data may be retained briefly and securely.
• Analytics data may be retained longer, including in aggregated or anonymised form.

14. Your rights

You have rights under UK data protection law, including the right to:

• Access your personal data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Object to processing
• Receive certain data in a portable format

Where we rely on consent, you may withdraw it at any time.

Requests can be made using the contact details above.

Status Page subscribers

Where we act as a processor, requests should be directed to the relevant customer (the data controller).

Complaints

You have the right to complain to the UK Information Commissioner’s Office (ICO).

15. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, secure infrastructure, monitoring, and contractual safeguards with providers.

While no system is completely secure, we take reasonable steps to protect personal data in line with industry standards.

16. Contact us

TrafficCake Limited
Email: [email protected]