Privacy Policy

Last updated: 18.02.2025

1. Introduction

This Privacy Policy outlines how Cookie API ("we", "us", or "our") collects, uses, and protects user data. By using our Service, you acknowledge and consent to the data practices described in this Privacy Policy. We are committed to ensuring the privacy and security of our users while maintaining the necessary functionality of our API. This document provides detailed insights into the types of data we collect, how it is used, and the measures we take to safeguard user information. If you do not agree with any part of this policy, you should discontinue the use of our Service.

2. Information We Collect

We collect various types of information to enhance user experience and improve the API's performance. The types of data we collect include:

• Account Information: When users sign up using an email address, GitHub, Google, or Discord account, we collect basic profile data such as name, email, and authentication tokens.
• API Usage Data: We log all authenticated API requests, including timestamps, request parameters, and responses.
• Analytics Data: We use Google Analytics 4 to gather insights about API usage patterns, feature popularity, and system performance.
• Stored Data: Transcripts are stored in Cloudflare R2, while user-related data, including API keys and request logs, are maintained in an isolated AWS VPC subnet.

We do not collect sensitive personal data such as payment details directly. All payments are processed securely through Stripe, and we do not store credit card information.

3. How We Use Collected Information

We utilize the collected information for various purposes, including but not limited to:

• Authenticating users and managing API access levels.
• Monitoring and analyzing API usage to improve performance and scalability.
• Enhancing security measures to detect and prevent unauthorized access.
• Providing users with access to their request logs and API analytics via the dashboard.
• Communicating important updates, such as changes to our policies, through official channels.

We do not sell, rent, or share user data with third parties for advertising purposes. All collected data is used strictly for service improvement and operational purposes.

4. Data Storage and Security

We implement robust security measures to protect user data from unauthorized access and breaches:

• User data and API keys are stored in an AWS VPC with restricted access controls.
• Cloudflare R2 is used for securely storing generated transcripts.
• All data transfers are encrypted using industry-standard SSL/TLS protocols.
• Access to user data is strictly limited to authorized personnel and is logged for auditing purposes.
• Regular security assessments and audits are conducted to ensure compliance with best practices.

Despite our best efforts, no online service can be 100% secure. Users are responsible for keeping their API keys confidential and reporting any suspected unauthorized activity.

5. Third-Party Services

We integrate with third-party services to enhance functionality, including:

• Google Analytics: Used for analyzing website traffic and user behavior.
• Stripe: Handles payment processing for premium subscriptions.
• Cloudflare: Provides security and content distribution services.
• Amazon web services (AWS): Provides server resources.

These third-party providers have their own privacy policies, and we encourage users to review them. We are not responsible for data collection and handling by these external entities.

6. Data Retention

We retain user data for as long as necessary to provide our services and comply with legal obligations. Specific retention periods include:

• API request logs: Retained indefinitely to ensure service accountability and debugging capabilities.
• Stored transcripts: Retained until the user deletes their account or as per internal data management policies.
• User account data: Retained for the duration of the user’s account and deleted upon account termination.

Users cannot delete individual request logs, as this data is necessary for service integrity and security audits.

7. User Rights and Control

Users have the following rights regarding their data:

• The right to access their request logs and account details via the dashboard.
• The right to request account deletion, which will remove all associated personal data.
• The right to opt out of Google Analytics tracking via browser settings.

To exercise these rights, users can contact our support team through our discord server (https://discord.cookie-api.com) or via email ([email protected]).

8. Compliance with Legal Requirements

We comply with applicable laws and regulations regarding data protection and user privacy. In cases where law enforcement requests access to user data, we will only disclose information if required by legal orders from German authorities. We take all necessary steps to ensure user privacy is respected while fulfilling legal obligations.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Significant changes may be announced through our official Discord server, but users should review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated terms.

10. Contact Information

If you have any questions or concerns regarding this Privacy Policy, please reach out to us through our discord server (https://discord.cookie-api.com) or via email ([email protected]). We are committed to addressing user inquiries promptly.