Privacy

What is stored

• Your email address and a hash of your password (argon2id).
• A hash of your API keys and of the tokens of the applications you allow, never their value.
• The applications you allowed, and when.
• The number of calls per day, per key or application and per kind of call, kept 13 months.

What is never stored

No birth date, neither yours nor anyone else's: the profiles you send are computed in memory for the time of the request, then forgotten. Comparing your profile with a relative's therefore leaves no trace of their birth date.

Logs and IP addresses

• The logs of the service record the method, the path, the status, the duration and the id of the key or application, without the content of the requests or the IP address; they are kept 14 days.
• The entry proxy (Traefik) records the IP address, time, path and browser of requests; its logs are kept 30 days and are also used for the server's visit statistics.
• IP addresses are also used, in memory only, for rate limits; they are never written to the database.

Retention

Email tokens deleted 7 days after they expire; application tokens deleted when they expire; accounts never activated deleted after 30 days.

Your rights

From your account, you can remove an application's access, replace your key, and delete your account: keys, tokens, authorizations and usage are then erased.