Privacy policy

1. What we collect and why

• Visiting the site: your IP address is processed by our CDN (Cloudflare) and web server to deliver pages and protect the service. Our daily visitor count uses an anonymous counting method with your country (from the CDN) and does not store IP addresses. We also use a cookieless visit counter from runvia.app.
• Google Analytics: pages viewed, referring site, approximate location, device and browser type, and analytics cookie identifiers, to understand which pages are useful. See section 5.
• Account (optional, for API keys): when you sign in with Google or GitHub through Firebase Authentication we store your sign-in ID, email address, sign-in provider, nickname, the country at first sign-in, and timestamps.
• API keys: key name, platform, optional contact email, service URL, allowed domains, a hash of the key (not the key itself) and daily usage counts, to operate and limit the API.
• Feedback: your message, an optional email address for replies, the page you sent it from and your language.
• Embedded widgets: the domain of the page that embeds a widget and daily view counts. A hashed IP address is kept in memory for one hour only to limit abuse.

2. How long we keep it

• Account and API key data: until you ask us to delete your account. Revoked keys and usage counts are kept with the account.
• Feedback: until it has been handled and is no longer needed, or until you ask us to delete it.
• Google Analytics data: no longer than the retention period set for our property (at most 14 months).
• Rate-limit and security data: short periods only (for example, one hour for embed rate limits).
• When data is no longer needed it is deleted so that it cannot be recovered.

3. Service providers and international transfers

We do not give personal information to third parties for their own purposes. We use these providers to run the service, and data may be processed in the United States and other countries where they operate:

• Google LLC: Firebase Authentication (sign-in) and Google Analytics (site statistics).
• GitHub, Inc.: sign-in with GitHub, if you choose it.
• Cloudflare, Inc.: content delivery and protection against attacks.

4. Your rights

You can ask to access, correct, delete or stop the processing of your personal information, and you can withdraw consent at any time. Email [email protected]; we will reply without undue delay. API keys can be revoked yourself on the account page. If you are in the EEA, the UK or Switzerland you may also complain to your local data protection authority.

5. Cookies and similar technologies

• _ga, _ga_<ID> (Google Analytics): distinguish visitors for statistics; up to 2 years. Not set in the EEA, the UK or Switzerland unless you accept, and never used for advertising (Google signals and ad personalization are off).
• NEXT_LOCALE: remembers the language you chose; 1 year.
• ionoflux-eu: marks that the analytics question applies to you; deleted when you close the browser.
• Browser storage (not sent to us): your analytics choice, recent path searches and the feedback reminder.
• You can change your analytics choice below at any time, block cookies in your browser settings, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The site works without analytics cookies.

6. How we protect it

• Encrypted connections (HTTPS), access to administrative functions limited to authorized staff, API keys stored only as hashes, and no storage of IP addresses in visitor statistics.

7. Children

The service is not directed at children under 14. We do not knowingly create accounts for them.

8. Privacy officer and contact

Privacy officer: Junlab Privacy Officer · [email protected]

For disputes in Korea you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office cybercrime unit (spo.go.kr, 1301) or the National Police Agency cyber bureau (ecrm.police.go.kr, 182).

9. Changes

We will post changes on this page with a new effective date before they apply.