Privacy Policy

Version 1.0 · Effective 8 July 2026

The short version

The public site and free API collect no personal data: no accounts, no cookies, no analytics scripts, no fingerprinting. If you never buy anything, we hold nothing about you.

Public read path

• No cookies are set and no client-side tracking runs. Reading a figure requires no JavaScript at all.
• Our hosting and CDN provider (Cloudflare) processes IP addresses transiently to serve requests and mitigate abuse, as any host does; we do not build profiles from server logs.

API key holders

If you buy a paid tier we hold the minimum needed to operate it:

• Held by us: a mapping from your hashed API key to your customer reference, tier, rate limits and credit balance. Keys are stored hashed and are revocable.
• Held by Stripe: your billing details (name, email, payment method, invoices). Stripe acts as payment processor; we never see or store card numbers. See Stripe's privacy policy.
• Alerts and correction notices (Company tier) go to the contact email you give us, used for that purpose only.

Retention and your rights

• The key↔customer mapping is deleted or anonymised within 90 days of subscription end, except records we must keep for tax and accounting law.
• Under UK GDPR you may request access, correction or deletion of personal data we hold, and complain to the ICO (ico.org.uk).
• Contact for privacy matters: the operator contact published on the pricing page once paid tiers open; until then the repository contact.

Changes

Material changes to this policy are announced on the changelog before they take effect.