1. Information We Collect
We collect minimal information necessary to provide our services:
- Account Information: When you sign in with Google OAuth2, we collect your name, email address, and profile picture.
- API Usage Data: IP addresses, request timestamps, endpoints accessed, and response times for analytics and rate limiting.
- Technical Data: Browser type, device information, and operating system for service optimization.
- Cookies: Essential cookies for authentication and session management. Analytics cookies with your consent.
2. How We Use Your Information
Your data is used exclusively for:
- Service Delivery: Authenticating users, managing API keys, and enforcing rate limits.
- Security: Detecting abuse, preventing fraud, and protecting our infrastructure.
- Analytics: Understanding usage patterns to improve performance and reliability.
- Communication: Sending essential service updates and security notifications.
We never sell or share your personal information with third parties for marketing purposes.
3. Data Storage & Security
We implement industry-standard security measures:
- Encryption: All data in transit uses TLS 1.3.
- OAuth Authentication: We use Google OAuth 2.0 for secure authentication. We do not store or manage passwords.
- Access Controls: Strict role-based access to production systems and databases.
- Data Minimization: We only collect and retain data necessary for service operation.
- Geographic Storage: Data is stored on secure servers in geographically distributed data centers.
4. Data Retention
- Account Data: Retained while your account is active.
- Cached Data: Temporary cache entries expire automatically (10 minutes to 24 hours based on data type).
5. Your Rights (GDPR/CCPA)
You have the right to:
- Access: Request a copy of all data we hold about you.
- Rectification: Correct inaccurate or incomplete information.
- Deletion: Request deletion of your account and associated data.
- Portability: Export your data in a machine-readable format.
- Opt-Out: Decline analytics cookies (essential cookies are required for service operation).
To exercise your rights, email us at [email protected]
6. Third-Party Services
We use the following third-party services:
- Google OAuth2: For user authentication (see Google Privacy Policy)
- MaxMind GeoIP2: For IP geolocation (no data sharing, local database)
- Cloud Hosting Providers: Our infrastructure is hosted on secure VPS providers
7. Cookies Policy
We use two types of cookies:
- Essential Cookies: Required for authentication and session management. Cannot be disabled.
- Analytics Cookies: Track usage patterns to improve our service. Optional and require your consent.
You can manage cookie preferences via our cookie consent banner.
8. Children's Privacy
Our services are not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we discover such data, we will delete it immediately.
9. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date.