Privacy Policy
Last updated: July 2, 2026
Who we are
Token Sieve API (“we”, “us”) is operated by Fabio Spoto. For privacy-related questions or requests, contact [email protected].
What we collect
When you request a free beta API key, we collect:
- Your email address (required)
- An optional description of what you are building (
use_case) - Whether you opted in to product and launch updates
When you use the API with your key, we store usage metadata such as:
- Endpoint called, model name, and detected content type
- Token counts and estimated cost/savings figures
- Timestamps linked to your API key
When you use the public demo analyzer on our website, we process the text you paste only to return an estimate. We do not store that content in our database.
For abuse prevention on public endpoints, we may temporarily process your IP address in server memory for rate limiting. We do not persist IP addresses in our application database.
Server logs may contain operational information such as request timestamps, error details, and email addresses when you create an API key.
What we do not store
We do not persistently store the content you send to
/v1/analyze, /v1/trim, or the public demo analyzer.
That content is processed in memory to provide the response and is not saved as part of your account record.
API keys are stored only as cryptographic hashes, not in plain text.
How we use your data
- Service delivery: to issue and manage your API key, enforce limits, and keep the service running.
- Service communication: to send important updates about your beta access, API changes, or account status.
- Marketing (opt-in only): if you check the marketing box, we may email you about launches, pricing, and product news.
- Security and abuse prevention: to detect spam, enforce rate limits, and protect the service.
Legal basis
We process your email and API usage data to provide the service you requested (contract / legitimate interest). Marketing emails are sent only if you give explicit consent via the signup form.
Retention
We keep your account and usage metadata while your beta key is active and for a reasonable period afterward for support, abuse prevention, and legal obligations. Server logs are rotated and retained only as long as needed for operations and security.
Your rights
Depending on your location (including under the GDPR), you may have the right to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to withdraw marketing consent at any time.
To exercise these rights or unsubscribe from marketing emails, contact us at [email protected]. You may also have the right to lodge a complaint with your local data protection authority.
Cookies and tracking
We use Umami, a privacy-friendly analytics service, to count page views on our website. Umami does not use advertising cookies and does not track individual clicks, form submissions, or content you enter on the site. Analytics data is aggregated and used only to understand overall traffic. We do not sell analytics data or use it for marketing profiling.
Third parties
We do not sell your personal data. We may use infrastructure providers to host the API and website; they process data on our behalf under appropriate agreements. To display model pricing information, the API may fetch public model metadata from OpenRouter. Your API request content is not sent to OpenRouter for that purpose.
Security
We apply reasonable technical and organizational measures to protect your data, including hashed API key storage, access controls, and rate limiting. No online service can guarantee absolute security.
Children
Token Sieve API is not directed at children under 16, and we do not knowingly collect personal data from them.
Changes
We may update this policy from time to time. Material changes will be reflected on this page with an updated date.