Privacy Policy
SiteUp has no accounts, no ads, no analytics and no tracking cookies. We only process what we need to host your site and keep the service safe. Here is exactly what that means.
Who is responsible
SiteUp is run by an independent developer, who is the data controller for the processing described here. Contact: hello@siteup.fyi.
What we process
- Your site. The files you upload, the link name, the lifetime and your settings. If you add a password, we store only a secure hash of it, never the password itself.
- Network data for security. When you publish, update or report, we use your IP address to calculate a keyed one way code. That code, not your IP, is used for rate limits and abuse protection.
- Creator IP address. For each site we keep the IP address it was published from, encrypted, for one year, so we can answer valid legal requests.
- Reports. The reported address, the reason, the details you write, an optional email address and the security code of your network.
- Visits to sites. Our hosting provider handles the technical data that every website request includes. We keep only an approximate view count per site, as a number.
- Password cookie. On password protected sites, a functional cookie remembers that a visitor has unlocked the site for 7 days. It is not used for anything else.
What we never do
- No accounts or profiles.
- No analytics, advertising or tracking scripts, and no tracking cookies.
- No selling, renting or sharing of personal data for marketing.
Data kept in your browser
The list in My sites, including each site’s private manage token, and your theme and language choices are saved in your browser’s local storage. They stay on your device. The manage token is only sent to us when you manage that site. Clearing your browser data removes them.
Why we process it
We process this data to provide the service you ask for, to protect SiteUp and its visitors from abuse, which is our legitimate interest, and to meet legal obligations.
How long we keep it
- Sites: until they expire, plus the 7 day grace period, or until you delete them. Deleted files are removed from storage shortly after.
- Fingerprints of removed content: kept so the same content cannot be uploaded again.
- Encrypted creator IP addresses: one year.
- Reports: as long as needed to handle them and for at most one year after.
- Security codes for rate limits: a few days at most.
Service providers
SiteUp runs on Cloudflare, which provides hosting, storage and network protection. Links inside published sites may be checked against Google’s Web Risk service to spot dangerous addresses. These providers may process data outside Türkiye, under their own safeguards and terms.
Your rights
Depending on where you live, laws such as Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the GDPR give you rights to learn whether your data is processed, to access it, to have it corrected or deleted, to object, and to complain to a data protection authority such as the Personal Data Protection Authority (KVKK) in Türkiye.
To use your rights, write to hello@siteup.fyi. Since there are no accounts, we may ask for the manage link to confirm that a site is yours.
Children
SiteUp is not meant for children under 13 to use on their own. Younger children should use it with a parent or teacher.
Changes
If this policy changes, we will update it here and change the date at the top.