Privacy Policy

Last updated: March 28, 2026

1. What We Collect

We collect the minimum data necessary to provide our service:

API key registration: Email address and optional name/project description.
Newsletter signup: Email address only.
Payment (paid tiers): Processed by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription ID.
API usage: Request counts per API key (daily and total). We do not log individual API request content.
Anonymous visitors: IP address (for rate limiting only, not stored persistently). Standard web server logs.

2. How We Use Your Data

To provide and maintain the API service (authentication, rate limiting, usage tracking).
To process payments via Stripe.
To send the weekly newsletter (if you opted in). You can unsubscribe at any time.
To respond to support requests.

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as required to provide the service (Stripe for payments, Supabase for database hosting).

3. Third-Party Services

Stripe: Payment processing. See Stripe's Privacy Policy.
Supabase: Database hosting. Data stored in AWS ca-central-1 (Canada). See Supabase's Privacy Policy.
Hetzner: Website hosting. See Hetzner's Privacy Policy.

4. Cookies

We use minimal cookies for essential functionality only (no tracking cookies, no advertising cookies). We do not use Google Analytics or similar third-party tracking services.

5. Data Retention

API keys and associated usage data are retained as long as your account is active. If you request deletion of your data, we will remove your API key record and associated email within 30 days.

6. Your Rights

You have the right to:

Request a copy of the data we hold about you.
Request deletion of your data.
Unsubscribe from the newsletter at any time.
Revoke your API key.

To exercise any of these rights, email api@statisticsoftheworld.com.

7. Security

We use industry-standard security measures including HTTPS encryption, secure API key generation, and Stripe webhook signature verification. However, no system is 100% secure. Keep your API key confidential.

8. Changes

We may update this policy from time to time. We will post changes on this page with an updated date.

9. Contact

Questions about privacy? Email api@statisticsoftheworld.com.