Privacy policy

Last updated 21 October 2026

The operator and data controller for this website is DeveloperData.net (Developer Data), Empire Tower, 41st Floor, Unit 4106-7, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand. Contact: [email protected].

01What we keep

Your account: your email address, your name and your plan. Your API keys, only as a fingerprint for checking them and a sealed copy so you can copy your current key from your account. How many calls you make, to which endpoints, and the countries they come from. Your support tickets. Page and API logs.

02Card details

We never hold them. Stripe takes the payment and keeps the card; we see only its brand and last four digits.

03Why we keep it

To run the service, bill it, answer support, stop abuse and keep it secure. Nothing is sold, and there is no advertising tracking.

04Who else handles it

Stripe, for payments. Cloudflare, for the network and security. Our email provider, through Developer Data. Google, when you sign in with Google: it shares your name, email address and profile picture with Developer Data, and we keep your name and email but not your picture. While you are signed out, our pages load Google's sign-in script, so Google receives your IP address and may use its own cookies. And the company that hosts our servers.

05Cookies

hra_s keeps you signed in, for 30 days. hra_ot is a check against forged sign-ins, for 10 minutes. hra_gs holds the sign-in step when you sign in through Google's page, for 10 minutes. hra_new shows your first key once, for 10 minutes. hra_out stops Google's pop-up opening the moment you sign out, for 1 minute. ap_click remembers which partner sent you, so they can be credited for a purchase: it is first-party, holds no personal details, and lasts 60 days (a newer partner link replaces it). There are no third-party analytics cookies.

06How long it is kept

Your account and what you put in: while the account is open, and gone within 30 days of deleting it, backups included. Billing records: as long as tax and accounting law requires, even after the account is deleted. Page, API and security logs: 30 days. Support tickets: while the account is open, then deleted with it.

07Your rights

You can see what we hold, have it corrected, take a copy, or have it deleted. Ask through Support and we answer within 30 days.

08Deleting your account

Do it yourself from your account: Delete my account, in the account overview. It cancels any plan at once without refunding the unused part, stops every key at once, signs you out, and deletes the account and what you put in within 30 days. Billing records stay as the law requires. If you cannot sign in, ask through Support.

09Children

HorseRacingAPI is not for anyone under 18.

10Changes

A new version is posted here with its date. A change that matters is emailed to you first.