Privacy Policy

1. Who We Are

jsondb.cloud is operated by Agdir Drift AS (Org. No. 921 893 639), a limited liability company registered in Norway, located at Waglesgårdveien 38, 4844 Arendal, Norway. References to “we”, “us”, or “our” refer to Agdir Drift AS.

2. Data We Collect

We collect minimal data to operate the service:

• Account data — your email address and authentication credentials, stored securely in our own authentication system with encrypted session tokens.
• API usage metrics — request counts, response times, and error rates used to maintain service quality and enforce rate limits.
• JSON documents you store — the data you push to jsondb.cloud through the API.

We use Google Analytics on public pages only (landing page, documentation, comparison pages, and other marketing content) to understand how visitors discover and use our website. Google Analytics collects anonymised page-view and interaction data via cookies. We do not load Google Analytics inside the dashboard or any authenticated area. Your private workspace is completely free of third-party tracking scripts.

On your first visit, you will see a cookie consent banner. If you accept, Google Analytics will load on public pages to help us understand how visitors use our website. If you decline, no analytics cookies are set and Google Analytics does not load. Your choice is stored in your browser's local storage and can be changed by clearing your browser data.

If you have suggestions for improving the dashboard experience, we'd love to hear from you at [email protected].

3. How Your Data Is Protected

All data in transit is encrypted via HTTPS/TLS, enforced through Cloudflare. Your authentication sessions are stored in a local SQLite database on the server. JSON documents are stored in Apache CouchDB on encrypted infrastructure volumes.

4. How We Use Your Data

We use your data solely to:

• Provide and maintain the jsondb.cloud service
• Authenticate your API requests
• Monitor service health and enforce usage limits
• Communicate important service updates or security notices

5. Data Sharing

We do not sell your data to third parties. We do not share your data with anyone except:

• Polar.sh — for subscription billing and payment processing
• Cloudflare — for CDN, DDoS protection, and SSL/TLS termination (all requests pass through Cloudflare)
• Infrastructure providers — who host the service under strict data-processing agreements
• Law enforcement — only when required by applicable law

6. Data Retention

Your JSON documents are retained for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days.

7. Breach Notification

In the unlikely event of a data breach, we will notify affected users promptly via email and publish a notice on our status page.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected].

9. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights with respect to your personal information:

• Right to Know. You may request details about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purposes for collecting it, and any third parties with whom it has been shared.
• Right to Delete. You may request that we delete personal information we have collected from you. You can initiate account and data deletion directly from Dashboard → Settings → Danger Zone, or by contacting us at [email protected].
• Right to Opt-Out of Sale. We do not sell your personal information to third parties, and we have not done so in the preceding 12 months. There is nothing to opt out of.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. Exercising these rights will not result in denial of service, different pricing, or a lower quality of service.

To exercise your Right to Know or Right to Delete, submit a verifiable consumer request by emailing [email protected] from the address associated with your account. We will respond within 45 days as required by the CCPA.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

11. Contact

For privacy-related inquiries, contact us at [email protected] or write to: Agdir Drift AS, Waglesgårdveien 38, 4844 Arendal, Norway.