Privacy Policy
At FREE API, we respect developer privacy and build with minimal data collection. This policy outlines how we handle operational request logs, browser preferences, security metrics, and your rights as an API consumer.
Key Privacy Principles — Executive Summary
Zero Third-Party Tracking
We do not serve advertising trackers, sell user profiles, or leak request metadata to third-party ad networks.
Minimal Log Retention
Server request logs (IP, route, latency) are retained solely for performance monitoring and DDoS prevention for 30 to 90 days.
Essential Storage Only
Local storage is restricted to essential preferences (UI themes, search states, and rate limit tokens).
Encrypted in Transit
All REST endpoints and website traffic are strictly enforced over HTTPS using TLS 1.3 encryption.
GDPR & CCPA Rights
Developers retain full rights to request log access, data erasure, and opt-out of optional telemetry.
Direct Controller Contact
Operated directly by AJIT DEV with transparent developer contact paths for security or privacy inquiries.
01 Scope & Data Controller
This Privacy Policy applies to the website, public developer portal, hosted APIs, and REST endpoints located at https://api.ajitdev.com/ ("FREE API", "the Platform").
The Data Controller responsible for processing your information under applicable European Union General Data Protection Regulation (GDPR), UK Data Protection Act, and California Consumer Privacy Act (CCPA/CPRA) is:
Platform Operator: AJIT DEV
Official Portal: https://www.ajitdev.com/
Primary Service: Public Developer API Directory & First-Party REST API Hosting
02 Information We Collect
We process two distinct categories of information to maintain service quality, protect developer endpoints, and enable interactive API sandbox testing:
Automated Technical & Request Logs
- Internet Protocol (IP) address
- HTTP Request Method & API endpoint URI
- Timestamp of API invocation
- User-Agent header & SDK metadata
- Response HTTP status code & execution latency (ms)
- Request payload size and rate-limit counters
Voluntary User & Developer Input
- API Submissions: Name, endpoint URL, documentation link, category
- Interactive Sandbox Inputs: Parameters tested inside browser console
- Feedback & Support: Email address and messaged details
- Command Palette queries (processed locally in-memory)
04 How We Use Your Information
Collected data is processed strictly under legitimate interest and service necessity grounds for the following specific purposes:
- API Infrastructure Operation: Routing REST API requests, validating HTTP parameters, and serving JSON payloads for hosted APIs (`/student_api`, `/todo_api`).
- Abuse & DDoS Protection: Detecting abnormal request rates, bot attacks, automated credential spraying, or scraping abuse to apply rate limits.
- Service Performance Tuning: Calculating endpoint latency (ms), monitoring uptime statistics, and debugging server errors.
- Directory Curation: Reviewing user-submitted public APIs for safety, working links, and accurate documentation.
05 Data Sharing & Third-Party Disclosure
Operational information is shared only under limited technical or legal necessity:
- Infrastructure Partners: Hosting providers, CDN edge networks, and DNS service providers operating under strict confidentiality agreements.
- Legal Compliance: When required by enforceable court orders, lawful subpoenas, or to defend platform integrity against malicious attacks.
06 Data Retention & Security Controls
Server access logs are rotated automatically every 30 to 90 days, after which raw IP and header records are permanently erased or aggregated into anonymous numerical traffic metrics.
We employ industry-standard technical safeguards, including TLS 1.3 encryption for data in transit, automated web application firewall (WAF) filtering, rate-limit throttling, and server-level access controls.
07 Your Rights (GDPR & CCPA/CPRA)
Depending on your physical location (such as the European Economic Area, UK, or California), you possess statutory rights regarding your personal information:
08 Children's Privacy & International Transfers
FREE API is intended for developer education, testing, and application integration. We do not knowingly solicit or collect personal information from children under 13 years of age (COPPA compliance). If you believe a child has submitted personal data, contact us for prompt removal.
As a global developer service, operational data may be transferred to and processed on secure cloud infrastructure located in servers worldwide, subject to standard contractual safeguards.
09 Contact Information & Privacy Officer
For questions regarding this policy, exercising privacy rights, or security disclosures, please reach out directly through the official website:
AJIT DEV — Platform Owner
Official Portal & Support Center