Privacy Policy

Effective date: September 2026

1. What We Collect

• API requests: IP addresses submitted for lookup, your API key identifier, and request timestamps. Cached for up to one hour to improve response times.
• Web UI: Cloudflare Turnstile collects browser signals for bot detection. We do not use cookies or tracking scripts beyond Turnstile.
• Rate-limit counters: Daily per-key and per-/24-prefix counters stored in Cloudflare KV. These contain no personal data and expire automatically within 24 hours.

2. What We Do Not Collect

We do not collect names, email addresses, or payment details directly. Payment processing is handled entirely by Lemon Squeezy; we receive only a confirmation of active subscription status.

3. Data Storage

All data is stored in Cloudflare Workers KV, distributed globally across Cloudflare's edge network. Cached results expire after one hour. Rate-limit counters expire after 24 hours. API key records persist until the account is deleted.

4. Third Parties

IP addresses you submit are forwarded to DNS-over-HTTPS resolvers (Cloudflare 1.1.1.1) to perform DNSBL lookups. The blocklist operators receive standard DNS queries containing the reversed IP address.

5. Lawful Basis

We process queried IP addresses under legitimate interest (Article 6(1)(f) GDPR): providing the blocklist-check service you requested. IP data is cached transiently (max 1 hour) and rate-limit counters expire within 24 hours.

6. Your Rights (GDPR)

If you are in the EEA, you may exercise your rights as a data subject: access, rectification, erasure, restriction, portability, and objection. To request deletion of your API key record or cached data, contact us.

7. Data Controller

Contact: privacy@blocksieve.com