Privacy policy
Last updated 2026-08-25
This describes what the service stores, why, and for how long. The descriptions below are drawn from how the software actually behaves, not from a template.
What is stored about you
Only what is needed to run an account and bill it.
| What | Why | How long |
|---|---|---|
| Email address, password hash, account name | To let you sign in and to reach you about your account | Until you delete the account |
| API key identifier, a hash of the secret, and any IP allowlist you set | To authenticate your requests. The secret itself is never stored, only a hash, so it cannot be recovered even by us | Until you delete the account; rotated keys are kept so past usage stays attributable |
| Counts of requests, per day and per hour | To enforce your quota and show you your usage | Daily totals are kept for billing history; hourly detail is deleted after 45 days |
| Payment provider customer and subscription identifiers, plan, status and billing period | To know what you are entitled to. Card details are never seen or stored by this service; they go directly to Lemon Squeezy | As long as required for accounting obligations |
| Your own IP address, in the server request log | To investigate abuse of the site itself (sign-in attempts, floods of the registration form) and to enforce the rate limits that protect it | Kept only as long as the rolling container log, which is capped by size and not archived |
| A line per API call: time, request identifier, which endpoint, the result, and the IP address the call came from | So a refused call can be explained when you ask about it. Support cannot answer "why was I blocked" from usage totals | 7 days, then deleted automatically |
The addresses you look up
This service does not keep a record of which IP addresses you look up. Usage is stored as counts only (how many requests, on which day, against which key), with no per-request row and no address attached to your account.
An address is of course processed while your request is answered, and the detection engine behind the API keeps its own operational logs in order to run and improve scoring. Those logs are not linked to your account.
Who else is involved
The service relies on a small number of providers.
- Lemon Squeezy, as merchant of record for payments. Card details are entered on their pages and never pass through this service, which is why this service never holds a card number.
- The hosting provider running the servers and the database.
Your rights
You can ask for a copy of the data held about you, ask for it to be corrected, or ask for it to be deleted. Write to the contact address and say which.
Deleting your account removes your credentials and your usage history. Records that must be retained for accounting purposes, such as issued invoices, are kept for as long as the law requires.
Cookies
The site sets a cookie to keep you signed in, one to protect forms against cross-site submission, and one to remember your language. There is no analytics, advertising or third-party tracking, which is why there is no cookie banner: none of these are optional and none of them follow you elsewhere.
Contact
Questions about any of this go to the address on the contact page.