Privacy policy
Last updated 27 August 2026
This policy covers the My Geocode API, the compatibility hosts, the JavaScript loaders, the dashboard and this website. We have kept it short so you can read all of it.
What we collect when you call the API
Each request is logged with the client IP address, the endpoint, the query parameters, the API key identifier if one was sent, the response status, the response time, a request ID and the user agent. We need the IP address to enforce the per-key IP limits and to spot abuse; the rest is for debugging and for the usage view in your dashboard.
Retention: raw request logs are deleted after 30 days. IP slot records are deleted three days after the slot ends. Per-day counts per key are kept for as long as the account exists, because they are the basis of your usage history and credit deductions.
The lookup values themselves (the addresses and coordinates you send, the IP addresses you ask about) are treated the same way as the rest of the log line and are not used to build profiles, train models or enrich any other dataset.
What we collect when you have an account
Your name, your email address, a password hash, and your API keys (a hash to check them and an encrypted copy so you can see them again in the dashboard). That is the whole list; we do not ask for a company. If you add an invoicing address for your own records, we keep that too. Payments go through Polar (cards) or NOWPayments (crypto); we store only their transaction reference and the amount, never card details or wallet keys. Receipts are kept for as long as tax law requires, typically seven to ten years.
What we collect on the website
The marketing pages set no cookies and load no analytics scripts. Fonts are loaded from Google Fonts, which means Google sees your IP address for those requests; we plan to host them ourselves. The demo page sends requests from your browser directly to the API with the key you paste in, and the API logs them as described above. The dashboard uses one session cookie to keep you logged in.
Who else sees data
- Hosting providers that run our servers, in the European Union and the United States.
- Polar and NOWPayments, which handle the payments themselves: Polar for cards, as merchant of record, and NOWPayments for crypto.
- The email provider that sends invoices, alerts and replies to support.
Each of these is bound by a data processing agreement. We do not sell data, share it with advertisers, or pass API query contents to anyone.
We disclose data when the law requires it and will tell you when we are allowed to.
Where data is stored
Request logs are stored in the region that served the request. Account data is stored in the European Union. Transfers outside the EU rely on standard contractual clauses.
Your rights
You can see, correct, export or delete your account data from the dashboard. For anything the dashboard cannot do, or if you are not an account holder and want to know what we hold about your IP address, write to support@mygeocode.com. We reply within 30 days. If you are in the EU or UK you can also complain to your data protection authority.
When you delete your account, its API keys stop working at once and your details, tickets and sign-in history are removed. Invoices and payment records stay for as long as tax law requires. A copy of the account data is kept for one year in case of a billing question or dispute, and then deleted.
Children
The service is not directed at children under 16 and we do not knowingly hold their data.
Changes
We will note changes to this policy on this page and, for material changes, email account holders 30 days before they take effect.