Privacy Policy

What we collect

When you register: your name (optional) and your email address. Your password is never stored as text — it is stored only as a bcrypt hash, which cannot be turned back into your password.

API keys: keys are stored only as SHA-256 hashes and shown to you once, when created. We cannot show you a key again later — if you lose it, revoke it and create a new one.

Usage stats: to run the dashboard counters, we count API calls and store client IPs only as SHA-256 hashes (for the Visitors count) plus the last endpoint called. No raw IP addresses are kept.

On your own browser: the site uses localStorage on your device to keep your login session and your saved API key. Nothing else is stored on your device.

What it is used for

Your account data is used only to run the API: logging you in, checking your API keys, enforcing the 60-calls-per-minute limit, sending the verification email, and showing the dashboard stats. Nothing else.

What we do NOT do

No ads. No third-party trackers. No analytics scripts. Your data is never sold, shared, or given to anyone else. We do not read the content you send to the endpoints beyond what is needed to answer the call.

Retention and deletion

Stats are aggregate counts, not a history of your calls. Your account, keys and verification records are deleted when your account is deleted. Delete your account any time from the dashboard ("Delete my account" button) or by emailing gxaym1@gmail.com from your account email.

Your rights

You can see your keys and account details on the dashboard, create or revoke keys at any time, and delete your account at any time as described above. If you have any question about your data, contact gxaym1@gmail.com.