Privacy notice

Cookies

We group cookies into three categories:

Strictly necessary

Authentication cookies (the xoptics.sid session cookie and the small set of cookies the anti-CSRF middleware emits). These are always set; the app cannot function without them and they are exempt from consent under the UK PECR. They never carry third-party identifiers.

Functional

UI preferences when stored as cookies (theme, layout choices). Default off. Opting in via the banner enables these — opting out leaves the app fully usable; we just won't remember small UI choices on this device.

Analytics

Page-view analytics. Default off, and only ever switched on with your consent via the cookie banner. Where the operator has enabled Google Analytics it runs under Google consent mode — nothing is stored until you accept — with IP anonymisation on. With analytics declined, or where the operator has configured no analytics at all, no analytics cookies are set and the banner does not appear.

SysOptics Desktop can also send usage data to your organisation's portal: which screens you open and which features you use; how long SysOptics Desktop is open and which version you have; your computer's operating system, .NET version, screen resolution and scaling, processor cores, memory and language and region setting; and how many servers your estate holds and which SQL Server versions they run, but never their names. It is recorded against your account, so it is not anonymous. It is off until you turn it on in the desktop's settings, and nothing is sent before you sign in.

Your choices

Where analytics is enabled, the cookie banner appears on first visit and analytics stays off until you accept. To change your mind, clear this site's storage in your browser and reload — the banner will reappear so you can choose again. See the cookie policy for details.

Data we hold

For signed-in users we hold the data described under Settings → Account: your email, optional avatar URL, your organisation memberships, audit-trail entries you generated, and any analytics events fired while you had consent enabled.

What we collect and why

At a high level, the platform handles three kinds of information:

• Account and sign-in information — enough to identify you, sign you in and link you to your organisation.
• Monitoring data — the operational data your organisation collects through the platform, used to run the monitoring, alerting and reporting features.
• Technical and security information — such as your IP address and request details, used to keep the service secure, apply rate limits and prevent abuse.

We process the technical and security information on the basis of our legitimate interest in keeping the service safe and available.

Selling data

We do not sell your data or your organisation's monitoring data, and we do not share it with third parties for their own marketing. We may produce and share aggregated, anonymised statistics that do not identify you, your organisation or any monitored system.

Where your data is processed

The platform is hosted on Microsoft Azure, which processes data on our behalf as a sub-processor. Other operational providers may be used from time to time; where they are, they act under the same processor obligations.

Data Protection

If you are in the UK or EU and want to exercise your data subject rights (access, erasure, portability, rectification, objection), email the operator address on your install. The operator is the data controller for your organisation; Aireforge is processor for the underlying platform.