1. What we collect
- Account info from Google sign-in: your name, email, and profile picture, returned by Google OAuth when you choose to sign in.
- API keys: if you generate an API key through the service, we store it on our servers so the tools can act on your behalf.
- Analytics: we use Google Analytics and Microsoft Clarity to understand which features are used and to spot UI problems. This covers pages visited, clicks and scrolls, device and browser info, approximate location (from IP), and anonymised interaction recordings with input fields automatically masked.
- Logs: basic server logs (IP, timestamp, request path) used for security and debugging.
- Payments (Pro): if you support us through Buy Me a Coffee, they send us the payment's transaction id, the name and email you entered at checkout, the amount and currency, and any message you wrote. The checkout itself happens on Buy Me a Coffee under its own privacy policy; we never see or store card details. Support payments are not refundable (see the Terms of Service).
2. How we use it
- To run and improve the tools.
- To authenticate you and keep your account secure.
- To diagnose issues and understand product usage.
- To prevent abuse of the service.
- To match a Buy Me a Coffee payment to your account by email and switch the account to Pro.
We don't sell your data, and we don't use it for advertising.
3. Legal basis (GDPR)
If you are in the EU/UK, we process your data on the following bases:
- Consent — for analytics and session recordings via Google Analytics and Clarity.
- Contract — to provide the service you signed in for.
- Legitimate interest — to keep the service running, secure, and free of abuse.
Payment data is processed to perform our agreement with you: unlocking Pro on the account you paid for.
4. Sharing
We share data only with the processors that help us run the service:
- Google (sign-in and analytics)
- Microsoft Clarity (session analytics)
- Our hosting and infrastructure providers
- Buy Me a Coffee (payments: they run the checkout and send us the payment details listed above)
We don't sell or rent your personal data to anyone. We may disclose data if required by law.
5. Retention
Account data is kept while your account exists. Analytics data is retained for as long as the provider defaults allow (typically up to ~12 months). Logs are rotated regularly. When you delete your account, we remove your stored API key and profile info within a reasonable period. Payment records are kept as the proof of your Pro purchase and for our accounting.
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. To make a request, reach us via the contact page.
7. Cookies & tracking
We use a small number of cookies and similar technologies for sign-in sessions and for the analytics services above. You can clear cookies or block them in your browser; some features may stop working if you do.
8. Children
The service is not directed at children under 13, and we don't knowingly collect their data.
9. Changes
We may update this policy. Material changes will be reflected with a new "last updated" date at the top of this page.
