Scoopkit is a one-person project. This page describes exactly what gets collected and stored, not boilerplate legal language copied from somewhere else.
What's collected
When you request a free API key, your email address is stored alongside the key so a lost key can be recovered and so Pro upgrades can be matched to the right account. That's the only personal information collected at signup.
Every API request increments a daily counter, keyed to your API key, used only to enforce the rate limit and show you how much quota you have left. These counters live in Redis and reset daily; they aren't used for tracking or sold to anyone.
If you upgrade to Pro, billing is handled directly by Stripe. Scoopkit stores a Stripe customer ID to know your subscription status, but never sees or stores your card details; that stays with Stripe.
What's not collected
Basic access logs (request method, path, status code, timing) go to standard output for debugging, with no IP address logging at the application level. Vercel Web Analytics runs on the marketing site (scoopkit.dev) for aggregate, cookieless traffic counts, not individual tracking.
Your data
Email keys@scoopkit.dev to ask what's stored under your email address or to have it deleted. As a solo operator, there's no formal legal team behind this policy, just an honest description of what the code actually does, kept up to date as the system changes.