Privacy Policy

1. Why we use your information

We use your information to sign you in, store and show the APIs and content you save, create the exports and share links you ask for, run the MCP connection, keep the service secure, fix problems, and improve it based on overall usage. We don't sell your personal information or use it for advertising.

2. What we collect

We collect only what we need to run the service:

• Google account details: when you sign in with Google, we receive your Google account ID, email address, and name.
• Content you save: API names, URLs, request parameters, response fields, descriptions, sample responses, combos, and product ideas you write.
• Keys and tokens: API keys and your encryption key are stored encrypted. Your sign-in token and MCP URL are stored as hashes or in encrypted form, never in plain text.
• Server logs: the request method, the path (with personal tokens masked), the status code, and the response time. Our app logs don't record request bodies or IP addresses.
• Browser storage: your sign-in token in your browser's local storage, and a cookie that remembers your language.
• Usage analytics: we use Google Analytics to see which pages people visit and how they use the site (for example, pages viewed, device and browser type, and approximate location).

3. How long we keep it

We keep your account and the content you save until you delete it or ask us to delete your account. Server logs are kept only as long as needed to run and secure the service. Google Analytics data is kept according to the retention setting in our Google Analytics account.

4. Who can see your information

We don't sell or rent your information. It's shared only in these cases:

• Share links you create: anyone with the link can see that API or combo until you turn sharing off.
• AI tools you connect: an AI tool you connect with your MCP URL can read and change the content in your drawer. That tool's own policy covers what it does with the data.
• When the law requires it.

5. Service providers

These providers process data for us so we can run the service:

• Google: Google sign-in and Google Analytics.
• Hosting and network providers that run our website and server.

6. Where your data is processed

Your data may be processed in South Korea, the United States, or other countries where our service providers operate.

7. Your choices and rights

You can:

• See, edit, and delete the APIs, samples, and combos you saved, right in the app.
• Ask us for a copy of your data, or to correct or delete it, by email.
• Sign out to turn off your current personal URL, and get a new MCP URL on the Connect AI page so the old one stops working.
• Block analytics cookies in your browser or install the Google Analytics Opt-out Browser Add-on.

8. Deleting your account

To delete your account, email us from the address you signed in with. We'll delete your account and everything in your drawer, and confirm by email. Copies that other people made from your share links belong to them and aren't affected.

9. How we protect your data

We use HTTPS, encrypt API keys and your encryption key, store sign-in tokens only as hashes, and keep request bodies out of our logs. No method of storing or sending data is completely secure, but we work to protect your information.

10. Cookies and similar technologies

We use your browser's local storage to keep you signed in and a cookie to remember your language. Google Analytics sets its own cookies to measure usage. You can clear or block these in your browser settings; if you clear local storage, you'll need to sign in again.

11. Children

API Drawer isn't meant for children under 14, and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it.

12. Changes and contact

If we change this policy, we'll update the effective date and, for significant changes, post a notice on the site. For any privacy questions or requests, contact us at the email below.