Privacy Policy

We collect information you provide when creating an account: your name, email address, and authentication provider (Google or GitHub). We also collect usage data including API call timestamps, success/failure status, and partner service identifiers.

Your information is used to provide and improve the Service, authenticate your identity, process token verification requests, and communicate with you about service updates. We do not sell your personal information.

Session tokens contain no personally identifiable information. They are random strings valid for 5 minutes. We log token verification requests for audit and analytics purposes but do not store the tokens themselves.

We share limited information with partner APIs solely for identity verification purposes: a unique user identifier and token validity status. We do not share your email, name, or any other personal information with partners without your explicit consent.

Account information is retained until you delete your account. Usage logs are retained for 90 days. Static key hashes are retained for the lifetime of the key. You can request deletion of your data at any time.

We implement industry-standard security measures including encryption at rest and in transit. Static keys are stored as bcrypt hashes. Session tokens are generated using cryptographically secure random number generators and are never persisted after expiry.

We use GitHub and Google for authentication. These services have their own privacy policies. We do not control and are not responsible for their data practices.

You have the right to access, correct, or delete your personal data. You can manage your account settings from the dashboard or contact us to exercise these rights.

We may update this policy from time to time. Material changes will be communicated via email or through the Service.

For privacy-related inquiries, please reach out through our GitHub repository or the support contact listed in your dashboard.