Privacy Policy

Overview

APILens (“we”, “our”, “us”) is operated by Rahul Patel as an indie product. This policy explains what data we collect, why we collect it, and how we use it. We do not sell your data to third parties. We do not run ads.

What data we collect

Account data (via Clerk)

When you sign up, your email address and name are stored by Clerk, our authentication provider. We receive a user ID and email to associate your dashboard data. We do not store passwords — Clerk handles all authentication.

API telemetry (from the npm package)

When you instrument your application with auto-api-observe, the middleware ships the following data to our ingest endpoint:

• ·HTTP method, route pattern (e.g. GET /users/:id — not the actual ID)
• ·HTTP status code
• ·Response duration in milliseconds
• ·Timestamp
• ·Database query count and duration (query text is NOT collected)
• ·traceId (a random UUID generated per request)
• ·Country code derived from IP (IP address itself is not stored)

We never collect request bodies, response bodies, query parameters, or authentication tokens. The middleware instruments timing and counts only.

Analytics (Google Analytics 4)

We use GA4 to understand which pages are visited. This uses cookies and collects anonymized usage data (pages viewed, session duration, browser, country). GA4 is loaded with lazyOnload strategy and does not block page rendering. You can opt out via Google Analytics Opt-out.

How we use your data

• ✓To display your API metrics in the dashboard
• ✓To send you email alerts you configure (via Resend)
• ✓To send quota usage notifications
• ✓To provide customer support when you contact us
• ✓To understand aggregate usage patterns for product improvement

Third-party services

Data retention

API telemetry is retained for 90 days on the free plan. Account data is retained until you delete your account. You can delete your account and all associated data at any time from Dashboard → Settings or by emailing rahul.patel786@gmail.com.

Cookies

We use a session cookie set by Clerk to keep you signed in. GA4 sets analytics cookies (prefixed _ga). No marketing or tracking cookies are used.

Your rights (GDPR / CCPA)

If you are in the EU, UK, or California, you have the right to:

• ·Access the personal data we hold about you
• ·Correct inaccurate data
• ·Request deletion of your data
• ·Object to processing
• ·Request data portability

To exercise any of these rights, email rahul.patel786@gmail.com. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. When we do, we update the “Last updated” date at the top. For material changes, we will notify you by email if you have an account.

Contact

Questions about this policy? Email rahul.patel786@gmail.com or open an issue on GitHub.