Privacy Policy
Effective date: April 14, 2026
Our commitment
We take user privacy seriously. CornerdataStore is a data API — not an advertising platform, data broker, or analytics business. Your data is never sold, rented, or shared with third parties for marketing or profiling purposes.
What we collect
API key registration. When you sign up for an API key we collect your email address. We use it only to send you your key and, if you opt in, important service announcements such as breaking changes or planned maintenance.
API usage logs. Each API request is associated with your API key. We record the endpoint called, a timestamp, and a request count for billing and quota enforcement. We do not log request payloads or response bodies beyond what is necessary for debugging reported errors.
Standard server logs. Our infrastructure retains standard HTTP access logs (IP address, timestamp, HTTP method, path, status code) for up to 30 days for security and operational purposes.
x402 payments — fully anonymous
Payments made via the x402 protocol are settled on-chain using cryptocurrency. We receive only a wallet address and a transaction hash. We have no way to link an x402 payment to any personal identity, and we make no attempt to do so.
x402 payments are completely anonymous by design. No account, email address, or personal information is required to pay for API access this way.
What we don't do
- We never sell or rent your email address or usage data to third parties.
- We never use your usage patterns to build advertising profiles.
- We never share individual usage data with data brokers or analytics vendors.
- We never store payment card information — billing is handled by third-party processors or settled on-chain.
Third-party services
We use the following third-party services to operate the platform:
- Metronome — usage-based billing metering. Receives anonymized event counts keyed to your customer ID.
- x402.org facilitator — on-chain payment verification. Receives only the transaction hash and amount.
We do not use Google Analytics, Meta Pixel, or any behavioral tracking scripts on this website.
Data retention
API keys and associated email addresses are retained until you request deletion. Usage counters are retained for up to 13 months for billing reconciliation. Server access logs are retained for 30 days.
Your rights
You may request deletion of your account and associated data at any time by emailing us at the address below. We will process deletion requests within 30 days.
Security
API keys are stored as SHA-256 hashes — we cannot recover a key once issued. All traffic is encrypted in transit via TLS. Our infrastructure runs in a private Kubernetes cluster with no public database endpoints.
Changes to this policy
We may update this policy as the service evolves. Material changes will be announced via the email address associated with your API key at least 14 days before taking effect.
Contact
Questions about this policy or data deletion requests: privacy@cornerdatastore.com