Privacy Policy
Last updated: October 31, 2026
What We Collect
To provide you with an API key, we require you to authenticate via Discord or Google OAuth2. We store:
| Data | Source | Purpose |
|---|---|---|
| OAuth ID — a unique identifier issued by the provider | Discord or Google | Link your account to your API key |
| Provider name (Discord or Google) | Discord or Google | Know which provider to sign you in with |
| Email address, if the provider has verified it | Discord or Google | Contact you about your account (see below) |
| API key and quota counters | Generated by us | Authenticate your requests and enforce your daily limit |
| Request statistics per account (route, status, count) | Your API requests | Operate the Service and detect abuse |
We do not collect:
- Your name, avatar, or any other profile information
- Any data from your Discord or Google account beyond the OAuth ID and verified email
- The content of the responses we send you
Your email is refreshed from the provider each time you sign in. If the provider does not share a verified email, we store none.
How We Use Your Data
Your OAuth ID is used solely to:
- Link your account to an API key
- Allow you to renew or delete your key in the future
Your email address is used only to contact you about your account — for example, to warn you about usage that breaks the Terms and Conditions, to inform you that your account has been blocked, or to answer an appeal. We never use it for newsletters, marketing, or announcements, and we never display it publicly.
Request statistics are used to keep the Service reliable and to detect abusive or illegitimate use, as described in the Terms and Conditions.
Data Sharing
We do not share, sell, or disclose your data to any third parties.
Data Retention & Deletion
Your data is kept while your account exists. You may delete your account at any time by clicking Unregister in the Profile section of this site. Doing so permanently removes your OAuth ID, email address, and API key from our database. We keep only a one-way hash of your OAuth ID, which cannot be turned back into your ID, so that deleted or blocked accounts cannot be re-registered.
Contact
For any privacy-related concerns, please reach out via Discord or email support@starcitizen-api.com.