legal

Privacy policy

Last updated: August 2026

The short version: API Craft is built so that we hold as little of your data as possible. The application has no account system, no telemetry, and your API projects never leave your machine.

Data controller: Florian Varrin, Rue des Peupliers 7, 1400 Yverdon-les-Bains, Switzerland. Contact: [email protected].

The application (desktop app and CLI)

  • Your project data (specs, requests, environments, secrets, responses) is stored as files on your own disk. It is never transmitted to us or to any third party by the application. There is nothing to breach on our side, because nothing is there.
  • No telemetry. The application sends no usage analytics, no crash reports, no identifiers.
  • Update check. The desktop app periodically checks releases.api-craft.dev for updates. Like any HTTPS request, this exposes your IP address to our hosting provider (Cloudflare). No identifier or usage data is attached.
  • License verification happens entirely offline, against a public key embedded in the application. Your license file is read locally and never uploaded.

This website

  • The site is static, served by Cloudflare Pages. Cloudflare processes standard server logs (IP address, user agent) to operate the service; see Cloudflare's privacy policy.
  • No analytics scripts, no advertising, no third-party trackers, no cookies. A single localStorage entry stores your light/dark theme preference; it never leaves your browser.
  • Team interest form (on the pricing page): if you submit your email, we store it (email address and timestamp, nothing else) to send you one notification when the Team tier ships. We do not add you to a newsletter. Email [email protected] any time to have it deleted.

Purchases

Checkout is operated by Paddle.com Market Ltd as merchant of record. Paddle collects the data needed to process payment and tax (name, email, billing country, payment details) under Paddle's privacy policy. We never see your payment details.

From Paddle we receive your email address and order details, which we use to issue and send your license file and to provide support. We keep this purchase record for as long as licensing and accounting obligations require.

Support

Support runs through a public GitHub repository, where anything you post is public under GitHub's privacy policy, and through [email protected], hosted with Proton Mail.

Your rights

You can request access to, correction of, deletion of, or a portable copy of any personal data we hold (in practice: a purchase record and possibly a Team-interest email). Write to [email protected]. We respond within one month, as required by Swiss and EU data protection law. If we need more time, we will tell you and give you a new deadline.

You also have the right to lodge a complaint with a supervisory authority: the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or your national data protection authority if you reside in the EU/EEA.

We do not sell personal data. We share it only with the processors named above (Cloudflare, Paddle, Proton, GitHub), each strictly for the purpose described.

Changes

If this policy changes materially, the "last updated" date above changes and license holders are notified by email.