Legal

Privacy notice

Last updated 28 October 2026

The operator and data controller for this website is DeveloperData.net (Developer Data), Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand. Contact: [email protected].

What we keep

• Your account: your email address, your name and your plan.
• Your API key, only as a fingerprint, never the key itself.
• Usage: how many calls your key makes each day, and the recent calls themselves (the address called, the answer code and how long it took).
• Support tickets you send us.
• Page and API logs, for security.

Card details

We never hold card details. Stripe takes the payment and keeps the card.

Why we keep it

To run OilAPI, bill it, answer support, stop abuse and keep it secure. Nothing is sold, and there is no advertising tracking.

Who else handles it

• Stripe, for payments.
• Cloudflare, for the network and security.
• Our email provider, through Developer Data, for account emails.
• Google, when you sign in with Google. Google shares your name, email address and profile picture with Developer Data; we keep your name and email address, not the picture. While you are signed out, pages load Google's sign-in script, so Google receives your IP address and may use its own cookies.
• Our hosting company.

Cookies

OilAPI sets only these, all first-party, and no third-party analytics cookies:

• oilapi_sid: keeps you signed in, for 30 days or until you sign out.
• oilapi_gs and oilapi_gn: hold your place while you sign in with Google, for 10 minutes.
• oilapi_ot: a one-time check value while you sign in with the Google pop-up, for 10 minutes.
• oilapi_out: a one-minute marker after you sign out, so the Google pop-up does not open again at once.
• ap_click: remembers which partner sent you, so the partner can be credited for a purchase. It holds no personal details and lasts 60 days; a newer partner link replaces it.

The docs keep your API key in your browser's own storage, so Run works on every docs page. It never leaves your browser except in the calls you make.

How long we keep it

• Your account and what you put in: while your account is open.
• After you delete your account: gone within 30 days, backups included.
• Billing records: as long as tax and accounting law requires, even after the account is deleted.
• Page, API and security logs: up to 30 days. Your recent calls are kept 7 days.
• Support tickets: while your account is open, then deleted with it.

Your rights

You can see what we hold about you, have it corrected, take a copy, or have it deleted. Ask through support; we answer within 30 days.

Deleting an account

Delete it yourself from your account (Billing, Delete my account), or ask through support if you cannot sign in. Your key stops working at once, any subscription is cancelled at once (the unused part is not refunded), your support tickets are removed, and your account is deleted within 30 days. Billing records stay as the law requires. We email you when it is done.

Children

OilAPI is not for anyone under 18.

Changes

The new version is posted here with its date. A change that matters is emailed to members before it applies.