Privacy Policy

Effective Date: April 12, 2026

1. Overview

IonArchive ("we," "us," "our") operates ionarchive.com. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

We are committed to privacy-first data practices. We do not sell your data.

2. Information We Collect

Information You Provide

Account registration: Email address and hashed password when you create an account
API usage: Email associated with your account and API usage statistics
Communication: Any information you voluntarily provide when contacting us

Information Collected Automatically

API request logs: Timestamps, IP addresses, and endpoint paths for rate limiting and security
Website analytics: Pages visited, referrer, browser type — collected via our self-hosted Umami analytics (no Google, no cookies, no tracking)
Error reports: Device IDs and messages submitted through our report form

Payment Information

We do not collect payment information. API access is free and does not require payment.

3. How We Use Your Information

We use collected information to:

Provide and maintain the Service
Enforce API rate limits
Detect and prevent abuse, fraud, or security incidents
Respond to your support requests
Send transactional emails (account-related, not marketing)

We do not use your data for: Marketing, advertising, profiling, or sharing with third parties.

4. Data Retention

Data Type	Retention Period
Account credentials (hashed password)	Until account deletion
API logs	90 days
Error reports	Indefinitely (for data quality)

5. Cookies & Tracking

Our website uses one cookie: a short-lived session identifier for authenticated users.

We do not use:

Google Analytics or any third-party tracking
Advertising cookies
Cross-site tracking or fingerprinting

Our analytics are powered by Umami, a self-hosted, privacy-focused tool that does not use cookies, does not track across sites, and stores data on our own servers.

6. Data Sharing

We share data only in these circumstances:

With our hosting provider (Vultr) for infrastructure
When required by law — valid legal requests from authorities

We do not sell, rent, or trade your personal information.

7. Data Security

Passwords hashed with secure algorithms (never plaintext)
API keys transmitted over HTTPS and stored hashed
Rate limiting to prevent abuse

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data in a machine-readable format

To exercise any rights, contact us at support@ionarchive.com. We will respond within 30 days.

9. Third-Party Services

Service	Purpose
Vultr	Cloud hosting
Umami	Self-hosted website analytics

10. Contact

For privacy-related questions or to exercise your rights:
Email: support@ionarchive.com
Website: https://ionarchive.com