Privacy Policy

patchBay ("we", "us", "our") is an API directory operated from Belgium. This policy explains what data we collect, why, and what rights you have over it.

What We Collect

• API submission data. When you submit an API, we collect the information you provide (API name, description, URL, category). An email address field is available but optional.
• Payment data. If you purchase a featured listing, payment is processed by Stripe. We do not store your credit card details. Stripe may collect your name, email, and billing address.
• Analytics data. Vercel Analytics collects anonymous, aggregated usage data (page views, referrers, country). No cookies are used for analytics, and no personally identifiable information is tracked.
• Server logs. Standard server logs may temporarily record IP addresses for rate limiting and security purposes via Upstash.

How We Use Your Data

• To list and display submitted APIs on patchBay.
• To contact you about your submission (only if you provided an email).
• To process featured listing payments through Stripe.
• To protect the service from abuse (rate limiting, spam prevention).
• To understand how the site is used in aggregate (Vercel Analytics).

Third-Party Services

We rely on the following services, each with their own privacy policies:

• Supabase — database hosting (EU region)
• Vercel — website hosting and privacy-friendly analytics
• Stripe — payment processing
• Upstash — rate limiting
• Google Search Console — search indexing (no user data shared)

Cookies

patchBay does not use tracking cookies. Stripe may set strictly-necessary cookies during the payment flow.

Open-Source Data

API listing data is community-sourced from open-source repositories (including marcelscruz/public-apis and APIs.guru) published under MIT and CC0 licenses. This data is publicly available and does not contain personal information.

Your Rights (GDPR)

As we operate from Belgium, the EU General Data Protection Regulation (GDPR) applies. You have the right to:

• Access — request a copy of any personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing of your data.

To exercise any of these rights, email us at privacy@patchbay.cc. We will respond within 30 days.

Data Retention

Submitted API data is retained as long as the listing is live. Email addresses provided during submission are kept only as long as needed for communication about the listing. Rate-limiting logs are automatically purged after a short retention window. Payment records are retained as required by Belgian tax law.

Changes to This Policy

We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page.

Contact

Questions about this policy? Reach us at privacy@patchbay.cc.