World Data API is designed to know as little about you as possible while still functioning. This policy explains what we collect and why.

Account information Handled entirely by Auth0 (our identity provider). We never store your email or other account details on our own service.

Billing information Handled entirely by Polar.sh (our Merchant of Record and payment provider). We never see or store your payment details.

API usage data Request counts, timestamps, endpoint paths, response codes, and response times — are tied to your account ID for billing and rate limiting purposes.

We do not log IP addresses, user agents, query parameters, request bodies, or response payloads. We have no analytics, no tracking pixels, no session recording. Our API is the sole product — you are not.

Polar.sh (our Merchant of Record and payment provider) handles payments, tax compliance, and billing disputes.

Fly.io (our hosting provider) runs our infrastructure in the EU region.

No other third parties have access to your data.

• Account data: Deleted within 30 days of account closure

• Billing records: Retained by Polar.sh per their policies

• Usage logs: Retained by Polar.sh per their policies

If World Data API ever shuts down entirely, we will provide minimum 90 days notice.

One cookie: a session token to keep you logged in. No advertising or tracking cookies. The only cookie you agree to have stored is when you create an account for our service.

Material changes will be emailed before they take effect.