Privacy Policy

Last updated 2026-10-23

What we store

• Account: name, email address, a hashed password, and sign-in sessions (IP address and browser).
• API keys: only a one-way hash of each key plus its first characters; the full key is shown once and never stored.
• Usage: per-key call counts for quota enforcement. We do not store the bodies of your API requests or the dates we return.
• Waitlist: email, platform, optional note, optional answer about pricing, and the link you arrived from.
• Email log: a record of transactional emails we sent you (recipient, subject, time).

What we do not store

Card details. Payments are handled entirely by Polar; we only receive your subscription status and an order reference.

Who processes data for us

• Polar (merchant of record): checkout, payments, invoices, tax.
• Resend: delivery of transactional emails.
• Our hosting provider: servers and database in the EU (Hetzner).
• Umami (self-hosted, if enabled): cookieless, aggregate page analytics.
• Sentry (Functional Software, Inc.), if enabled: error reports, processed in its EU region. Email addresses, API keys, cookies and auth headers are stripped before a report leaves our servers or your browser.

Cookies

A session cookie keeps you signed in. A first-party cookie remembers which link brought you here (for example a community post) for 90 days. No advertising cookies.

Retention and your rights

We keep account data while your account exists and delete it within 30 days of a deletion request. You can ask for a copy of your data, a correction, or deletion by replying to any email from us.