What we store. Your email address, your API key, a one-way fingerprint of your recovery code (never the code itself), daily usage counters, a log of your API requests kept for 30 days (time, endpoint, parameters, status and response time; never your key or your IP address), which you can read yourself through /v1/logs, and any message you send through the contact form. If you create a key or switch on updates, also the details in the Email paragraph below. Nothing else.
What we do not do. No advertising trackers, no cookies set by this site, no profile of you across other sites, and no sale of your data. We pass your data only to Paddle, Cloudflare and Resend (our email provider), and only so they can do the jobs described here. Some pages also make your browser load files directly from Paddle, ProfitWell and OpenFreeMap, as described below.
Visit statistics. We count visits with Cloudflare Web Analytics. When a page loads, your browser sends Cloudflare the page address (without anything after a question mark), the address of the page you came from, and technical details such as your browser, device type and how fast the page loaded. Cloudflare says this service stores nothing in your browser, sets no cookies, and does not fingerprint visitors from their IP address or browser details. We see totals only, such as visits per page. We use them to learn which pages are read and what to fix. We never put your email address, API key or anything you type into this data, and we do not link it to your account.
Payments. Paid plans are processed by Paddle as merchant of record. Paddle collects the billing details needed to complete a purchase under its own privacy policy; we never see your card details. The pricing and data pages, in English and Arabic, load Paddle's checkout script from cdn.paddle.com as soon as they open, before you choose a plan. That script also loads a script from ProfitWell (public.profitwell.com), a subscription metrics service Paddle has owned since 2022. Loading them sends Paddle and ProfitWell your IP address and basic browser details, as any web request does. Paddle's checkout host also sets one Cloudflare cookie, __cf_bm, on paddle.com. Cloudflare uses it to tell people from bots, and it expires after 30 minutes without activity.
Price map. The street map under the price map comes from OpenFreeMap (tiles.openfreemap.org), a free service run by Hyperknot Software Kft. in Hungary. To draw it, your browser asks OpenFreeMap for the map squares you look at, so OpenFreeMap receives your IP address and the part of the map you are viewing. OpenFreeMap says in its privacy policy that it sets no cookies and leaves IP addresses out of its access logs. Its error logs can include an IP address for up to 7 days, and it may log IP addresses for up to 30 days while it investigates abuse.
Email. We use your address to run your account and to write to you from [email protected] about your key and your account: a welcome note with how to use the key, a notice when the key is replaced or the recovery code is used, when your plan changes, and when you near your monthly allowance. These messages carry no offers. We send updates (new data, new features, sometimes offers) from [email protected] only if you ticked the box on the key form or switched them on in your account, and only after you confirm the address with the link we mail you. If you tick the marketing box in Paddle's checkout and a key here uses the same address, we count that as the same request: we record it as coming from Paddle, with Paddle's customer id and the time Paddle reports, and you can stop it in any update email. Every email has an unsubscribe link. One click stops updates, and "Stop all email" stops everything except a security notice if your key is replaced. To do this we keep your address and whether you confirmed it. We also keep a record of your choice about updates: when you asked, when you confirmed or stopped, where you did it, the id of the wording you saw, and your country as your connection reports it (never your IP address). We keep stopped choices so we can show that we stopped. We also keep a list of the emails we sent you and whether they arrived (the type and time, never the text), which we delete after 90 days. If you ask us to delete your data, we delete the record and keep only a one-way fingerprint of your address so that we never write to it again. Emails go out through Resend, which sees your address and the message. We use no tracking pixels and no link tracking.
Where data lives. Account records, usage counters and email records are stored on Cloudflare infrastructure. The market data we serve is public-record information and contains no personal data.
Your rights. Ask via the contact form and we will show you what we hold about you or delete your key and email entirely. Deleting your key ends any paid plan attached to it.
Contact. Use the contact form for any privacy question.