The short version, which is not the notice
- Your name and email from Google, your key, your usage, and your Stripe billing identifiers. That is the lot.
- Card details never reach us. Stripe holds those.
- Four small cookies, all needed to sign you in. No trackers, no analytics, nothing sold.
- Ask us for a copy or a deletion at any time, and we answer within 30 days.
1What this notice covers
This notice explains what DeveloperData.net (Developer Data) does with personal data when you use dartsapi.com. It covers the website, the dashboard and the API.
The operator and data controller for this website is DeveloperData.net (Developer Data), Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand. Contact: [email protected].
It does not cover darts match data. That is public sporting record, not personal data about you.
2What we hold, and why
Account
Your name and email address, taken from Google when you sign in, and your plan. Google also shares your profile picture with us at sign-in; we do not keep it. We need these to run your account, to bill you, and to write to you about the service.
Your key and its use
Your API key, stored encrypted, and a record of calls made with it: the time, the endpoint, the response status and the IP address it came from. We need this to meter usage against your plan, to show you your usage, and to spot abuse.
Billing
Your Stripe customer and subscription identifiers, your plan, and your invoice history, which lives with Stripe. We never see or hold your card number.
Support
Anything you write in a support ticket, and the account facts attached to it, kept with the thread so the conversation makes sense later.
Sign-in and security
A session cookie so you stay signed in, short-lived cookies during Google sign-in, and a record of sign-ins with the IP address, which you can see in your own activity log.
While you are signed out, our pages load Google's sign-in script so you can sign in with one tap. Google therefore receives your IP address and may use its own cookies, under Google's privacy policy.
What we do not do
No advertising trackers, no third-party analytics, no selling or renting your data to anyone, and no profiling you for marketing.
3The legal basis
- To perform our contract with you: running your account, issuing your key, metering usage, taking payment.
- Our legitimate interests: keeping the service secure, preventing abuse, and keeping the records a business needs.
- Legal obligation: keeping tax and accounting records.
We do not rely on consent for any of this, and we do not send marketing email you have not asked for.
4Who else is involved
We use a small number of processors, each doing one job:
- Google handles sign-in, and shares your name, email address and profile picture with us. We keep the name and email address, not the picture.
- Stripe takes payments, holds your card details, and issues your invoices.
- Cloudflare sits in front of the site for TLS and protection against attack.
- Our hosting provider runs the servers the service sits on.
We do not share your personal data with anyone else unless the law requires it.
5Where it is kept, and for how long
- Account records: for as long as the account is open, then deleted within 30 days of closure.
- Request logs: 90 days, then deleted.
- Support threads: two years from the last message.
- Billing records: for as long as tax law requires, which is usually six years.
Our servers and our processors sit outside Thailand in some cases. Where data moves between countries, it moves under the safeguards those providers publish.
6Your rights
You can ask us to give you a copy of your data, correct it, delete it, or restrict what we do with it, and you can object to processing we base on legitimate interests.
Most of it is already in your hands: your dashboard shows your account, your key, your usage and your activity, and Manage billing shows every invoice.
For anything else, open a ticket on the support page and we will answer within 30 days. If you think we have got it wrong, you can complain to your local data protection authority.
7Cookies
We set five cookies, all first-party, and no others:
da_session keeps you signed in, and lasts 30 days.
da_oauth exists only during Google sign-in, and lasts ten minutes.
da_ot protects a one-tap Google sign-in against forgery, and lasts ten minutes.
da_out stops the Google sign-in pop-up opening again straight after you sign out, and lasts one minute.
ap_click remembers which partner sent you here, so that partner can be credited if you buy a plan. It holds no personal details, lasts 60 days, and a newer partner link replaces it. It is set only when you arrive from a partner link.
There are no advertising or analytics cookies, which is why this site asks you to accept nothing.
8Changes, and how to reach us
If we change how we handle personal data, we will update this page and change the date at the top. For a material change, we will write to active accounts first.
For any question about this notice, open a ticket on the support page.