Your data
What LastSeen keeps, for how long, how to take it with you, and how to delete it.
What we keep, and for how long #
| What | Kept for |
|---|---|
| Readings (every heartbeat, with its value) and website check results | 7 days |
| Each monitor's history (up, down, late, restarts) and the alerts sent | 30 days |
| Monitors, channels, profiles, members and settings | Until you delete them |
Older data is deleted automatically.
Keys and secrets #
Ping keys, API tokens and agent tokens are stored as hashes, so they can't be read back from our database. So that admins can see a monitor's key again, it's also kept encrypted, with the encryption key stored separately from the database. Webhook signing secrets are shown only to admins.
Taking it with you #
On Monitors, export your monitors and their recent readings as JSON or CSV. Viewers and up can export. The API reads everything too.
Email and consent #
LastSeen emails an address only once its owner has confirmed they want alerts there. Each confirmation email has a link to stop LastSeen ever emailing that address again, whoever asks; alert emails have an unsubscribe link, and mail apps' one-click unsubscribe works.
Deleting #
- A monitor or channel: its page has Delete; its history goes with it.
- An organization: an owner can delete it from its page, after typing its name. Everything in it is deleted at once.
- Leaving: see Organizations and roles.
A few records that protect other people outlive an organization: that an address asked not to be emailed, and counts of recent invitations and confirmation emails (without the organization), so deleting and recreating one can't be used to get around the limits.