Privacy Policy
Last updated: April 7, 2026
Data we collect
Email address (auth and billing), API request logs (timestamp, endpoint, response time), Stripe customer ID for paid plans.
How we use it
Email is used for sign-in and transactional emails. Request logs power usage stats and rate limiting.
No sale of data
We never sell, rent, or share your personal data with third parties for marketing purposes.
Third parties
Cloudflare (hosting), Stripe (payments), Resend (transactional email). They process data on our behalf under their own privacy policies.
GDPR
EU users have the right to access, correct, export, or delete personal data. Contact privacy@xr8.io.
Cookies
A single first-party authentication cookie (xr8_token). No tracking, no analytics, no ad networks.