Privacy Policy

Last updated: September 21, 2026

1. Information We Collect

We collect information you provide directly to us when you create an account, use our services, or contact us for support. This includes:

  • Account information: email address, name, and password (hashed)
  • Usage data: API requests, endpoints created, and storage usage
  • Communication: emails, support tickets, and feedback you send us

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our mock API and JSON tools services
  • Authenticate your account and secure your endpoints
  • Process payments and manage subscriptions via DODO Payments
  • Send service-related communications (billing, security, updates)
  • Analyze usage patterns to optimize performance and develop features
  • Respond to your inquiries and provide customer support
  • Comply with legal obligations and enforce our Terms of Service

3. Data Storage & Security

Your data is stored securely using relational data and object storage on Cloudflare's edge network. We implement:

  • Encryption at rest and in transit (TLS 1.3)
  • Row-level security policies in our database
  • Automatic HTTPS enforcement via Cloudflare
  • Rate limiting and DDoS protection at the edge
  • Regular security audits and dependency updates

Free tier endpoints are public by default. Pro users can create private endpoints protected by API keys with granular permissions.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion:

  • Personal data is deleted within 30 days
  • JSON payloads are purged within 7 days
  • Anonymized usage analytics may be retained for product improvement
  • Billing records are retained per tax/legal requirements

5. Third-Party Services

We use trusted third-party processors who adhere to strict data protection standards:

  • Cloudflare: Hosting, database, storage, Workers, and security protection
  • Better Auth: Authentication and session management
  • DODO Payments: Payment processing for Pro subscriptions

We do not sell your data or use it for advertising.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at support@mockjsonapi.com.

7. Cookies & Tracking

We use minimal, first-party cookies only for session authentication, security protection, and theme preferences. We do not use third-party analytics cookies or tracking pixels.

8. International Transfers

Cloudflare's global network processes data across multiple jurisdictions. By using our services, you consent to this secure routing and processing.

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or through a notice on our website.