Privacy Policy
Last updated July 12, 2026
This policy explains what the Flash Props API collects and why. We aim to collect as little as possible.
What we collect
- Email — when you create a key or check out, so we can deliver your key and send critical service notices.
- A hash of your API key — we store only a one-way HMAC hash, never the key itself.
- Usage metadata — per-key request counts and timestamps, used for quotas and abuse prevention.
- IP address — used transiently for rate limiting; we do not build a profile from it.
- Billing identifiers — a Stripe customer id for paid accounts. Card details are handled entirely by Stripe; we never see or store them.
How we use it
To operate and secure the Service, deliver keys, enforce quotas, prevent abuse, and process payments. We do not sell your data or use it for advertising.
Processors
We rely on Stripe (payments) and our hosting provider (Hetzner) to run the Service. They process data only to provide their function.
Retention
Key and usage records are kept while your account is active. Email us to request deletion of your email and account records.
Your choices
You can request access to, or deletion of, your data by emailing us. The API sets no tracking cookies.