Privacy Policy

Draft. Last updated: not yet published.

What we collect

• Account data: email address, name, organization name, and a password hash (argon2id; we never store the password itself).
• Session data: a session cookie, IP address and user agent for security and audit logs.
• API usage: for each request, the endpoint, status code, response time, request ID, client IP and the key and organization that made it. We use this for quotas, usage reports and abuse prevention.
• Email delivery: verification and password-reset emails are sent through our email provider.

Cookies

The console uses one strictly necessary, HttpOnly session cookie. The public site does not use advertising or analytics cookies.

To be completed

Legal bases, retention periods, sub-processors, international transfers, your rights and contact details.