Privacy Policy

Information we handle

We store your email address, a one-way password hash, verification status, account role and status, login sessions, connected application registrations and authorizations, and daily usage totals. Login records may include IP addresses and browser information. Verification and password reset emails contain short-lived links. Website searches run in your browser; MCP calls send the parameters needed to answer your request. Hosting infrastructure may record technical access and error information. Support emails include your address and message. Never send us your password. We also keep keyed, non-readable identifiers for abuse limits and message-attempt timestamps to enforce free sending limits. Successful website exports and remote MCP icon retrievals record the icon name, style, format, channel, account and usage time. Daily details are kept for 90 days; cumulative per-account and per-icon totals are retained while needed to operate the account and service, until an applicable deletion request is completed. We cannot observe reuse of saved icons outside our service.

How we use information

We use account data to verify email ownership, keep you signed in, authorize connected apps, recover access, prevent abuse and provide support. Essential HttpOnly session cookies can keep your browser signed in for up to 30 days, renewed during use. We keep daily per-account request counts and administrator status-change records, without saving search text as search history. We do not use advertising cookies or advertising analytics.

Website analytics

We collect public page paths, broad referrer categories, device types and daily counts. We estimate daily visitors using a keyed hash that changes each UTC day, derived from an IP address and a limited browser identifier. This analytics store does not retain raw IP addresses, browser strings, referrer URLs, query strings, search text or private account page visits. We use no analytics cookies, and honor Do Not Track and Global Privacy Control for page analytics. Duplicate visits to the same page within 60 seconds count once. Aggregate metrics and daily visitor identifiers are removed after 90 days. Operational authentication, security and service usage records are separate. We also estimate country or region using an offline DB-IP Lite database on our server. No visitor IP is sent to a geolocation provider. Only country codes and aggregate page views and daily visitor counts are retained; VPNs and proxies can affect accuracy.

Service providers and third-party clients

Hosting and email providers may process information needed to deliver these services. When browser and system language preferences do not identify a supported language, the website contacts api.country.is to obtain an IP-based country code. That provider receives your IP address; our request omits cookies, the page URL and search terms, and the application does not persist the returned IP. Your AI client, including ChatGPT, Codex or another MCP client, handles data under its own policies. Providers may process data outside your country. We do not sell personal information; we may disclose information when required by law or necessary to protect the service and legal rights.

Retention

Account data is kept while your account is in use, until a verified deletion request is completed, subject to legal or security needs. Verification links expire after one hour; password reset links after 30 minutes. Browser sessions and refresh tokens normally expire after 30 days; connected apps may renew access while authorized. Daily usage and administrator audit records are removed after 90 days. Search state remains in browser memory. Infrastructure logs follow hosting rotation settings; no uniform fixed retention is promised. Support messages are kept as needed to resolve requests and meet legal obligations. Expired abuse-limit records are removed; message-attempt timestamps are kept for at most 31 days. The browser may store an essential email cooldown timestamp, without an email address.

Your choices

You can sign out, disconnect an app in your client, or use Sign out everywhere on your account page to invalidate all browser sessions and app access. Resetting your password also invalidates existing access. These actions do not delete the account. Email us to request access, correction or deletion of account data; we verify ownership and explain applicable limits. Contact independent clients and service providers about data they hold.

Policy updates

We will update this page and its date when our practices change. Material changes, including future payment processing, will be explained before they apply.

Contact