This Privacy Policy explains how Yourseoboard LLC, 400 Harbour Pl Dr, Apartment 1262, Tampa, FL 33602, United States ("we"), the controller of personal data, processes personal data when you use apkapi.cc and the APK Arcade. Contact for privacy questions: [email protected].
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Email, name, password hash (never the password itself) | Account and sign-in | Contract, Art. 6(1)(b) | Until the account is deleted |
| Google account ID and email (if you sign in with Google) | Sign-in with Google | Contract, Art. 6(1)(b) | Until you unlink Google or delete the account |
| Passkey public keys and their names | Passwordless sign-in | Contract, Art. 6(1)(b) | Until you delete the passkey or the account |
| API keys (stored only as hashes), request counters per key and per day | Providing the API, limits and quotas, usage statistics in your account | Contract, Art. 6(1)(b) | Account lifetime; daily counters up to 13 months |
| Credit balance and history of purchases and grants; queried app IDs and search terms in our response cache (not linked to your account) | Billing of API calls; faster repeated answers | Contract, Art. 6(1)(b) | Account lifetime; cache up to 7 days |
| IP address and email of sign-in attempts | Protection against password guessing | Legitimate interest in security, Art. 6(1)(f) | 7 days |
| Plan, Stripe customer and subscription IDs, subscription status | Billing | Contract, Art. 6(1)(b); legal obligations, Art. 6(1)(c) | Account lifetime; accounting records as required by law |
| Web server logs (IP, time, URL, user agent) | Operation and security | Legitimate interest, Art. 6(1)(f) | Up to 14 days |
We do not receive or store card numbers: payments are entered on Stripe's pages. We do not sell personal data and do not use it for advertising or profiling.
Our database contains information that app developers publish on their Google Play pages: developer name, website, privacy policy link and, where provided, support email, phone number, postal address and legal name. Some developers are individuals, so this can be personal data. We process it on the basis of our legitimate interest in providing a market-data service (GDPR Art. 6(1)(f)); contact details are shown only to Business customers bound by our Terms. If you are a developer and want your contact details removed or corrected, write to [email protected] — we act on such requests within 30 days, and removed data stays out of later updates.
Some of these providers may process data outside the EU/EEA; in that case transfers rely on adequacy decisions or the EU Standard Contractual Clauses.
We use only the cookies needed to run the site: a session cookie after you sign in and a cookie that remembers your interface language. There are no analytics or advertising cookies. Details: Cookie Policy.
Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. You can change most data yourself in your account. To exercise your rights write to [email protected]; we answer within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in your country of residence.
Passwords are hashed with Argon2id, API keys are stored only as SHA-256 hashes, integration secrets are encrypted, the site works only over HTTPS, and sign-in is protected against brute-force attempts. Passkeys never leave your device.
The Service is not intended for children under 16, and we do not knowingly collect their data.
We may update this policy; the date above shows the current version. We will inform registered users about material changes by email or in their account.