Legal
Privacy Policy
Last updated 9 October 2026
This policy explains what personal data GreyhoundAPI ("we", "us") collects when you use our website and API (the "Service"), how we use it, and the choices you have. The Service is operated by DeveloperData.net (Developer Data), Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand, which is the controller of the personal data described here. The racing data served by the API is not personal data and is covered by our Terms.
1. What we collect
- Account data. When you sign in with Google (by the redirect, the "Continue with Google" button or Google's sign-in pop-up) Google shares your name, email address, profile picture and a Google account identifier with Developer Data. We keep the name, email address and identifier; we do not keep the profile picture. We do not receive your Google password.
- API keys and usage. We store a hash of each API key (never the key itself) and records of API usage: request counts per key per day and short-lived per-minute counters for rate limiting, plus a key's last-used timestamp.
- Billing data. Payments are handled by Stripe. We receive billing status and identifiers (such as a Stripe customer ID) but do not receive or store full card numbers.
- Operational logs. Standard server logs (such as IP address and request metadata) are processed to run and secure the Service.
2. How we use it
- To provide, maintain and secure the Service and authenticate your requests.
- To meter usage and enforce rate limits and plan quotas.
- To process subscriptions and send service and billing emails (for example, a notice if a payment fails).
- To detect, prevent and address abuse, security issues and violations of our Terms.
We do not sell your personal data, and we do not use it for third-party advertising.
3. Cookies and sessions
We do not use advertising or cross-site tracking cookies. The website sets these:
gapi_sess: the session cookie that keeps you signed in, until you close the browser or sign out.Secure,HttpOnlyandSameSite=Lax.gapi_seen: says only that this browser has signed in before, so the menu offers "Sign in" rather than a new key. It holds nothing that identifies you, and lasts up to 400 days.gapi_ot: a random value set for ten minutes when you sign in with Google's pop-up or button, used once to check that the sign-in came from this site.gapi_out: set for one minute when you sign out, so Google's sign-in pop-up does not open again straight away.
While you are signed out, pages load Google's sign-in script from accounts.google.com. Google
therefore receives your IP address and browser details when those pages load, and may use its own cookies under
Google's privacy policy. Once you are signed in, the script is not loaded.
4. Processors and third parties
We share personal data only with service providers who process it on our behalf to run the Service:
- Google: sign-in (OAuth) authentication, including the sign-in pop-up and button.
- Stripe: subscription billing and payment processing.
- Postmark: transactional email delivery.
- Our hosting provider: infrastructure on which the Service runs.
Each processes data under its own terms and security commitments. We may also disclose data where required by law or to protect our rights and the safety of others.
5. Retention
We keep account and billing data for as long as your account is active and as needed to comply with legal, tax and accounting obligations. Usage counters are retained only as long as needed for metering and are pruned routinely. Key hashes are removed when a key is deleted and your data is removed on account closure, subject to any records we must retain by law.
6. Your rights
Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these, or to close your account and have your data deleted, contact support@greyhoundapi.com.
7. Security
We use industry-standard measures including TLS in transit, hashing of API keys, scoped session cookies and access controls. No method of transmission or storage is perfectly secure, but we work to protect your data and to respond promptly to incidents.
8. Children
The Service is intended for adults operating a business or development use case and is not directed to children. Do not use the Service if you are under the age of majority in your jurisdiction.
9. Changes
We may update this policy; the "last updated" date above reflects the current version. Material changes will be given appropriate notice.
10. Contact
Privacy questions: support@greyhoundapi.com. Developer Data, Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand. This policy is governed by the laws of Thailand, and the courts of Bangkok have jurisdiction.