Privacy policy

Who we are

The controller of your data is DeveloperData.net (Developer Data), Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand.

What we keep

• The account: your email address and name from Google, your plan, and when you signed up.
• What you put in: the labels you give your keys, and your support tickets and our replies.
• API keys: only a fingerprint of each key and its first few characters, never the key itself.
• Usage counts: how many calls each key makes a day, and when it was last used.
• Page and API logs: the page or endpoint, the time, the response status, the referring site (its name only), the browser's user agent, the IP address and the country Cloudflare reports for it.

Card details

We never hold card details. Stripe takes the payment and keeps the card; we receive the plan, the amount, the date and whether the payment went through.

Why we keep it

To run the service and your account, to apply each plan's limits, to bill paid plans, to answer support, to stop abuse and to keep the service secure. Nothing is sold, and there is no advertising tracking.

Who else handles it

• Stripe, for payments.
• Cloudflare, for the network and security in front of the site, the API and the MCP server.
• Google, for signing in with your Google account. Signing in with Google shares your name, email address and profile picture with Developer Data; we keep your name and email address, and not the picture. While you are signed out, our pages load Google's sign-in script, so Google receives your IP address and may use its own cookies.
• Our email provider, through Developer Data, for account and support emails.
• The company that hosts our servers.

Cookies

Reading the site sets no cookies of ours, unless you arrive through a partner's link. Signing in and out sets the others, all needed for your account to work, and no third-party analytics cookies are used:

• ap_click: set only when you arrive through a partner's link. It remembers which partner sent you, so they can be credited if you buy a plan. It is ours (first-party), holds no personal details, and lasts 60 days; a newer partner link replaces it.
• cdb_s: your signed-in session, for up to 60 days.
• cdb_os: a one-time check while you sign in with Google, for up to 10 minutes and removed once you are in.
• cdb_next: the page to return to after signing in, for up to 30 minutes.
• cdb_ot: a one-time check when you sign in from Google's pop-up or button, for up to 10 minutes and removed once used.
• cdb_out: set when you sign out, so Google's pop-up does not sign you straight back in, for one minute.

How long we keep it

• The account and what you put in: while the account is open.
• After the account is deleted: gone within 30 days, backups included.
• Billing records (invoices and payments): as long as tax and accounting law requires, even after the account is deleted.
• Page, API and security logs: 30 days.
• Support tickets: while the account is open, then deleted with it.

Your rights

You can ask to see what we hold about you, have it corrected, take a copy, or have it deleted. Ask through support, and we answer within 30 days.

Deleting an account

Delete it yourself from Plan and billing on your account; if you cannot sign in, ask through support. When it is deleted, any paid plan is cancelled at once and the unused part is not refunded, every API key stops working, and the account and what you put in are gone within 30 days. Billing records stay as the law requires, tied to the Stripe customer rather than a live account.

Children

The service is not for anyone under 18.

Changes

A new version is posted here with its date. A change that matters is emailed to members before it applies.