Privacy

What we store

• Your account. Your email address, and your name if you sign in with Google. We use them to sign you in and to email you about your account.
• API keys. A one-way hash of each key and its first few characters, so we can check requests without keeping the key itself.
• Usage counts. For each account, per day and per endpoint: how many requests, how many credits and how many errors. They power billing, limits and your dashboard. We don’t keep a per-account history of what you searched for or what came back.
• Free tries without an account. We count requests per IP address per day to enforce the free limit, and use Cloudflare Turnstile to check you’re not a bot.
• Purchases. Stripe runs checkout. We receive a record of each purchase (amount, credits, date), never your card number.
• Cookies. One sign-in cookie, set only when you log in. No advertising or tracking cookies.

What we fetch

When you make a request, LurkAPI fetches publicly available pages from the platform you asked about. We don’t log in to anyone’s account and don’t access private content. Responses may be cached briefly to make repeat requests faster; the cache isn’t linked to your account.

Who else sees it

• Cloudflare hosts the site, the API and the database, sends our emails and processes request logs (such as IP addresses) to run and protect the service.
• Stripe processes payments.
• Google, only if you choose to sign in with Google.

We don’t sell or rent your data, and we don’t use it for advertising.

How long we keep it

Account data, keys and usage counts stay until you delete your account. Purchase records are kept as long as tax and accounting rules require. Per-IP counts are only needed for the day they’re counted.

Your choices

Email support@lurkapi.com to get a copy of your data, correct it or delete your account. Deleting your account removes your email, keys and usage counts; we keep purchase records where the law requires it.