Privacy Policy

Last updated: March 1, 2026

1. Introduction

StripFeed ("we", "us", "our") operates the stripfeed.dev website and API service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect the following types of information:

Account Information

When you sign up via GitHub or Google SSO, we receive your name, email address, and profile image from your identity provider. This information is managed by Clerk, our authentication provider.

Usage Data

We log API requests including the requested URL, response status, token counts, response time, and the API key used. This data is stored in Convex, our database provider, and is used to display analytics in your dashboard and to enforce rate limits.

Cached Content

Fetched and converted content may be temporarily cached in Upstash Redis to improve performance. Cached content expires automatically based on TTL settings (default 1 hour, maximum 24 hours).

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To authenticate your identity and manage your account
  • To enforce rate limits and usage quotas
  • To display usage analytics and request history in your dashboard
  • To send transactional emails (account notifications, billing updates)
  • To respond to support requests and feedback
  • To detect and prevent abuse or unauthorized access

4. Third-Party Services

We use the following third-party services to operate StripFeed. Each has its own privacy policy governing how they handle your data:

  • Clerk - Authentication and user management
  • Convex - Database and backend functions
  • Upstash - Redis caching and rate limiting
  • Vercel - Hosting and serverless functions
  • Resend - Transactional email delivery

5. Data Retention

Account information is retained for as long as your account is active. API request logs are retained indefinitely to provide usage history and analytics. Cached content is automatically deleted after its TTL expires. If you delete your account, we will remove your personal information and API keys within 30 days. Anonymized aggregate usage data may be retained for analytics purposes.

6. Cookies

We use essential cookies required for authentication and session management, provided by Clerk. We do not use advertising or tracking cookies. No third-party analytics cookies are used.

7. Your Rights

You have the following rights regarding your data:

  • Access - You can view your usage data and request history in your dashboard at any time
  • Export - You can request an export of your data by contacting support
  • Deletion - You can request deletion of your account and associated data by contacting support
  • Correction - You can update your account information through your identity provider (GitHub or Google)

8. GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). We process your data based on legitimate interest (to provide the Service) and consent (when you create an account). You may exercise your rights under GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, and objection, by contacting us at the email address below.

9. Data Security

We take reasonable measures to protect your information. API keys are hashed using SHA-256 before storage and are never stored in plain text. All data is transmitted over HTTPS. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@stripfeed.dev.