Stored information and purposes
We retain your email, password hash, API key hash, and abuse-prevention IP information for account access and authentication. Payment transaction records are stored for credit accounting and verification. These details support our independent historical archive operations without implying live Reddit affiliation. The service also stores API key prefixes and credit usage. Passwords and API keys are not stored as plaintext account secrets. This list describes storage categories, not publication of actual hashes or records. Hashing does not guarantee protection against every form of unauthorized access.
Browser state and sessions
The account widget saves invoice and user identifiers in localStorage separately for each hostname to recover saved invoice state. The raw API key is not persisted there. A Secure HttpOnly session cookie serves account authentication separately from the retrieval key header. HttpOnly applies to that cookie, not localStorage. Your application’s server credentials are a separate responsibility: do not expose its archive key in public code, logs or responses merely because you signed into the account panel.
Analytics and retention boundaries
Pages include Statinside analytics counter 43 for website analytics. No exact provider data-field list or cookie behavior is specified here. No fixed retention or automatic-deletion deadline is established for account information. That does not promise indefinite storage, a particular deletion date or a user-operated deletion workflow. It also says nothing about archive record permanence or availability. Responses you retain in your own integration are distinct from the service’s account and payment records and need their own handling decisions.
