Aviso de privacidad

If CorsAPI is offered as a hosted service, the operator may act as controller. In self‑hosted setups, you or your organization may be the controller. This notice covers data processed through the web UI and account management.

Identity and contact: name, email, and profile details from OAuth where applicable.

Account and security: password hashes, session/JWT‑related technical data.

Project configuration: CORS origins, host/path rules, quotas, and security settings.

Usage and analytics: request counts, error codes, latency summaries, logs (depending on configuration).

Proxy traffic: target URLs, headers, and response summaries; full payloads may not always be stored.

Purposes: account creation and authentication; abuse prevention; service delivery and improvement; legal compliance.

Legal bases may include contract performance, legitimate interests, consent where required, or other grounds under GDPR/KVKK and local law.

Data is kept as long as necessary for the purposes above and any mandatory legal retention. You should cap retention for logs and analytics per your policies. On account deletion, data should be erased or anonymized subject to legal exceptions.

Hosting, email delivery, and OAuth providers may process data on our behalf. Their privacy policies apply. International transfers require appropriate safeguards under applicable law.

We aim to apply access controls, encryption in transit where appropriate, and secure development practices; no method of transmission over the Internet is completely secure.

Depending on applicable law, you may have rights to access, rectify, erase, restrict processing, object, and data portability. Use account export/delete tools in settings or contact channels published on the site.

We may use cookies or local storage for sessions and preferences. You can control these via browser settings; some features may be limited.

The Service is not directed at individuals under 18. We do not knowingly collect data from children.

This Notice may be updated. Material changes should be communicated by reasonable means. For questions, use the contact or support address published on the website.