RATELIMITED Privacy Policy

Last updated on March 2nd, 2019

---

Welcome to RATELIMITED

This is RATELIMITED's privacy policy, we're not into legal stuff ourselves, so we've made it as simple as possible to understand.

We withold the rights to changing this policy at any time without notice.

1. What data we collect

Let's be straight up, everyone collects your data nowadays, here's a list of what we collect:

User Data

• Your username & email address
• Your IP address
• A bcrypt-encrypted version of your password
• Variables about you (If you're on a paid tier, if you're banned from uploading, etc.)
• Your API keys and their "Friendly Names"

Upload Data

• The file itself
• The filename and the original filename (before upload)
• The UNIX Timestamp of the file upload
• The MD5 Hash of the file
• The SHA1 Hash of the file

Usage Statistic Data

We use Google Analytics, FullStory, Cloudflare, and Mixpanel in getting usage statistics for our website. These services collect various data on you.

We also use Application Monitoring services, such as New Relic APM, and Datadog. These services collect anonimized, generalized data on our servers and allow us to analyze the usage of the API

Security Logging

We use Sqreen to protect against automated attacks, SQL injections and more. Request metadata might be sent to Sqreen in some cases to validate if a request is legitimate or not

Error Logging

We use Sentry for in-service error logging. Your API key, your username and your e-mail may be sent over to Sentry when an error occurs.

2. Requesting Your Data

You may contact [email protected] in order to request a copy of your data. The process can take up to a month, but usually it takes a few hours after the first response.

Please include the following in your e-mail: Any of your API keys, and your username. You are expected to send an e-mail from the same address that your account is registered with.

3. Requesting Deletion of Your Data

You may request to have your data deleted by contacting support, [email protected] The process can take up to a month, but usually it takes a few hours after the first response.

Please include the following in your e-mail: Any of your API keys, and your username. You are expected to send an e-mail from the same address that your account is registered with.

Note that our database backups will still retain your data for 7 (Seven) to 10 (Ten) days after deletion.