xhr

Appearance

Privacy Policy for xhr.dev ​

Last updated: 02/11/2025

This privacy notice for xhr.dev ("we," "us," or "our") describes how and why we might collect, store, use, and/or process your information when you use our services ("Services"), such as when you:

  • Visit our website at https://xhr.dev/
  • Engage with us in other related ways, including any sales or marketing activities.

This privacy notice applies to the personal information we process as a 'data controller' when you sign up for an API key. It does not apply when we act as a 'data processor' on behalf of our users; in those situations, our users are the 'data controller,' and we process information according to their instructions.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@xhr.dev.

Summary of Key Points ​

This summary provides key points from our privacy notice. You can find more details about any of these topics by clicking the relevant section in the table of contents below.

  • What personal information do we process? We collect and process your email address when you sign up for an API key.
  • Do we process any sensitive personal information? We do not process sensitive personal information.
  • Do we receive any information from third parties? We do not receive information from third parties, except for Stripe, which handles payment information.
  • How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, and comply with the law.
  • In what situations and with which parties do we share personal information? We share your email address with Stripe for payment processing and may share information if required by law.
  • How do we keep your information safe? We have implemented organizational and technical measures to protect your personal information.
  • What are your rights? You have certain rights regarding your personal information, such as access and deletion.

Table of Contents ​

  1. What Information Do We Collect?
  2. How Do We Process Your Information?
  3. What Legal Bases Do We Rely On To Process Your Personal Information?
  4. When and With Whom Do We Share Your Personal Information?
  5. How Long Do We Keep Your Information?
  6. How Do We Keep Your Information Safe?
  7. Do We Collect Information From Minors?
  8. What Are Your Privacy Rights?
  9. Controls for Do-Not-Track Features
  10. Do We Make Updates To This Notice?
  11. How Can You Contact Us About This Notice?
  12. How Can You Review, Update, or Delete The Data We Collect From You?

1. What Information Do We Collect? ​

In Short: We collect personal information that you provide to us.

Personal Information You Disclose to Us ​

We collect your email address when you sign up for an API key.

Payment Data ​

We use Stripe to process payments. Stripe may collect your payment information, and their privacy policy can be found here: Stripe Privacy Policy.

Log Data ​

We log only the URL when you use our service. We do not log the response, body, or payload.

All personal information that you provide to us must be true, complete, and accurate. You must notify us of any changes to such personal information.

2. How Do We Process Your Information? ​

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law.

We process your personal information for a variety of reasons, including:

  • To deliver services: We use your email to provide access to our service.
  • To process payments: Your payment data is processed through Stripe.
  • To protect vital interests: In rare cases, we may process data to prevent harm.
  • To monitor usage: URL logs are used to improve performance.

3. What Legal Bases Do We Rely On To Process Your Personal Information? ​

In Short: We only process your personal information when legally permitted under applicable law.

We may rely on the following legal bases:

  • Consent: You can withdraw consent at any time.
  • Performance of a Contract: For example, processing your email when signing up for an API key.
  • Legitimate Interests: Such as analytics or improving user experience.
  • Legal Obligations: Compliance with applicable laws.

4. When and With Whom Do We Share Your Personal Information? ​

In Short: We may share data in specific situations described below.

Situations Where Sharing May Occur: ​

  • Payment Processing: Data shared with Stripe for payments.
  • Legal Obligations: Disclosures required by law.
  • Business Transfers: During mergers or acquisitions.

5. How Long Do We Keep Your Information? ​

In Short: Only as long as necessary for legitimate business purposes or legal requirements.

For example:

  • Email addresses: Retained until no longer needed.
  • URL logs: Retained for a maximum of 2 weeks.

Once no longer needed, data is deleted or anonymized.

6. How Do We Keep Your Information Safe? ​

In Short: Through organizational and technical security measures.

Examples include:

  • Hosting in Docker containers.
  • Using GitHub for code hosting.
  • Employing AWS services like ECS Fargate, CloudWatch, and Code Pipeline.

However, no system is completely secure; transmission is at your own risk.

7. Do We Collect Information From Minors? ​

In Short: No data is knowingly collected from children under 18 years old.

If discovered, such data will be deleted promptly. Contact us at legal@xhr.dev if you believe we have collected such data.

8. What Are Your Privacy Rights? ​

In Short: Depending on your region (e.g., EEA), you may have specific rights like accessing or deleting data.

You can withdraw consent at any time or request changes by contacting us via email at legal@xhr.dev.

9. Controls for Do-Not-Track Features ​

We currently do not respond to DNT browser signals but will update this policy if that changes.

10. Do We Make Updates To This Notice? ​

In Short: Yes, updates will occur as necessary to stay compliant with relevant laws.

The updated version will include a "Revised" date at the top of this page.

11. How Can You Contact Us About This Notice? ​

For questions or comments about this notice, contact us at:

Email: legal@xhr.dev

12. How Can You Review, Update, or Delete The Data We Collect From You? ​

You can request access to review or delete data by submitting a request via email at legal@xhr.dev.