Data Protection

Privacy Policy

Your privacy is paramount. Learn how OGCraft collects, safeguards, and handles your personal information.

Last updated: August 10, 20264 min read

1. Overview

At OGCraft (https://ogcraft.dev), accessible from our website and API, protecting your privacy is one of our main priorities. This Privacy Policy outlines the types of personal data we collect and how we use and safeguard it.

2. Information We Collect

We collect minimal personal information necessary to provide and secure our Service:

Account Information

Email address and authentication details (via OAuth providers or passwordless login tokens).

Billing Data & Security

Credit card details and invoicing addresses are processed directly by Stripe. We do not store full payment card numbers on our servers.

Usage & Technical Data

IP addresses, API key usage counts, browser user-agents, and system logs required for rate-limiting, diagnostic, and security purposes.

3. How We Use Your Information

We use collected information exclusively to fulfill operational purposes:

Operate, maintain, and provide the features of the OGCraft API and Dashboard.
Process subscription payments and manage billing workflows seamlessly.
Send essential transactional emails (verification, quota alerts, invoices) via Resend.
Prevent fraud, abuse, and unauthorized access to our API and infrastructure.

4. Subprocessors & Third-Party Services

We rely on trusted third-party providers to operate OGCraft under strict confidentiality and security agreements:

Stripe

Payment processing and customer portal subscription management.

Railway & Cloudflare

Hosting infrastructure, edge CDN routing, and DNS/SSL security.

MongoDB Atlas

Encrypted cloud database storage for user accounts and API key metadata.

Resend

Transactional email generation, verification links, and delivery.

5. Data Retention & GDPR Compliance

Your GDPR Data Rights

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, export, or request the complete deletion of your personal data at any time.

Data Deletion Process

You can request total account deletion by contacting support. Upon confirmation, your account details, tokens, and associated API keys will be permanently removed from our active database.

6. Security Standards

We implement industry-standard encryption protocols (HTTPS/TLS, SHA-256 hashed tokens, encrypted API keys at rest) to protect your personal information against unauthorized access, loss, or disclosure.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us: