UpstateYour data
What leaves your server
Upstate is read-only. The observer reports over outbound HTTPS, opens no ports and accepts no commands. This is everything it sends, and what it never collects.
What leaves your server
CPU, memory, and disk usage; container state and image versions; health results; request counts and timings from kamal-proxy; selected Docker facts and labels; and basic cloud provider identity when available.
What the observer doesn’t collect
Container environment values, database contents, and application files. Application logs stay local by default.
Optional: a short log snapshot
Enable snapshots separately for the account and each server to see recent container logs. Tails are bounded, redacted before upload and again before storage, encrypted, and deleted after 72 hours. Redaction can’t catch every secret; opt in only for logs you’re authorized to share.
How long this is kept and who processes it is in the privacy policy .