Privacy Policy | Free World Geographical Data Bank

Our Core Privacy Commitments:

We do not sell, rent, or monetize your personal information or API traffic.
We do not use advertising trackers, fingerprinting scripts, or third-party cookies.
API access logs are automatically pruned and deleted after 30 days.

1. Information We Collect

We restrict data collection to the absolute technical minimum necessary to provide the service:

Account Credentials: Developer name, email address, and an argon2/bcrypt password hash upon registration.
Authentication Metadata: Generated API keys, project identifiers, and assigned scopes.
API Access Telemetry: Request timestamps, HTTP methods, endpoint URIs, response status codes, IP addresses, and user-agent strings.

2. Purpose of Processing

Telemetry data is processed strictly for:

Enforcing monthly quota limits and per-minute burst rate protection.
Preventing malicious DDoS attempts, credential stuffing, and botnets.
Powering developer dashboard analytics so you can monitor your own application's API latency and error rates.

3. 30-Day Automated Log Rotation

Detailed request logs containing originating IP addresses are partitioned in PostgreSQL and automatically purged on a rolling 30-day schedule. After 30 days, only high-level anonymized metric counts (e.g. total monthly requests) are retained.

4. Third-Party Disclosures

We do not share developer telemetry with data brokers, ad networks, or analytics firms. Disclosures will only be made if compelled under lawful court order or subpoena.

5. Account & Data Deletion

You maintain full ownership of your developer profile. You can delete your account at any time via the developer dashboard settings. Account termination permanently purges your credentials, projects, and active API keys from the database.

6. Privacy Contacts

If you have data deletion requests or technical questions about our privacy infrastructure, please reach out via the Support Console.