Your data, handled with care.

• To create and maintain your account and issue your API key.
• To operate, measure and charge for successful lookups.
• To prevent fraud, abuse and unauthorised access, and to enforce our Terms of Service.
• To respond to support requests and send service-related notices.
• To understand aggregate usage so we can improve the Service.

We use a strictly necessary session cookie to keep you logged in and to protect forms against cross-site request forgery. If analytics is enabled by the site operator, a third-party analytics provider may also set cookies that measure traffic in aggregate. You can block or delete cookies in your browser, but the logged-in areas of the Service will not work without the session cookie.

We share the minimum necessary data with the providers that make the Service work:

• IP intelligence. When sign-up protection is enabled, your IP address is sent to ip-api.com to detect VPNs, proxies and datacenter connections. Results are cached.
• Analytics. If the operator configures a Google Analytics ID, Google receives standard usage data.
• Payments. Purchases are completed on external payment pages operated by third parties, which have their own privacy policies.

We do not sell your personal information.

We keep your account information for as long as your account is active. Credit and usage records are retained to satisfy accounting and fraud-prevention obligations. Sign-up security checks are cached for a short period. When you delete your account, or on request, we delete or anonymise your personal data unless we are required to keep it by law.

Passwords are hashed, API keys are stored in hashed form for authentication, forms are protected with CSRF tokens, and traffic should be served over HTTPS. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

The Service is not directed to anyone under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Our servers and the third parties listed above may be located in countries other than yours. Where required, we take reasonable steps to ensure your data receives an adequate level of protection.

We may update this Privacy Policy from time to time. Material changes will be reflected by a new "Last updated" date on this page. Continued use of the Service after a change constitutes acceptance of the updated policy.