What we hold, and why.

For a paying subscriber, our own database (Cloudflare D1) holds two tables. A subscriptions record: email address, Stripe customer id and subscription id, plan (price id), subscription status, and current billing period end. If you hold an API key, an api_keys record: a SHA-256 hash of the key (never the key itself), the key's visible prefix, your customer id and email, key status, when it was created, when it was last used, and a per-day request counter used to enforce fair-use limits. We do not store payment card details — those are held by Stripe, our payment processor, under its own terms.

Cloudflare, our hosting provider, retains standard server request logs (request metadata such as IP address, path, and timestamp) for 3 days for operational and abuse-prevention purposes, then discards them.

We set one functional cookie, close_customer, which identifies a signed-in subscriber so the site can check subscription status. It is not used for advertising or cross-site tracking. The site also stores a theme preference (light/dark) in your browser's local storage, which never leaves your device.

We run no advertising pixels and no third-party analytics.

Two processors handle subscriber data on our behalf: Stripe (payment processing and billing) and Cloudflare (hosting, database, and server logs). Neither uses your data for its own advertising purposes under our agreements with them.

We keep the subscriptions and api_keys records described in §1 for as long as the subscription or key is active, and for a reasonable period after cancellation for billing and legal records. You can request deletion of your account data at any time by emailing the contact below; we will delete what we hold, including revoking any API key, except where we are required to retain billing records by law.

For any privacy question, access request, or deletion request, contact ns@nicolasschaerer.ch.