Volleyball API privacy policy

Privacy policy.

Last updated 10 October 2026

1. What we keep

• Your account: your email address, your name and your plan, and the country your first visit came from.
• Your API keys, only as a fingerprint. The key itself is shown to you once and never kept.
• Usage counts: calls per key per day.
• Support tickets you send.
• Page and API logs: the page or endpoint, the time, the browser and the network address.

Your card details are never held by us. Stripe takes the payment and keeps the card.

2. Signing in with Google

You sign in with your Google account. When you do, Google shares your name, your email address and your profile picture with us. We keep the name and email address and do not keep the picture.

On pages you see while signed out (the home page, pricing, the documentation and sign-in), Google's sign-in script loads so it can offer to sign you in. It is Google's script, under Google's privacy policy.

3. Why we keep it

To run the API, bill your plan, answer support, stop abuse and keep the service secure. Nothing is sold, and there is no advertising tracking.

4. Who else handles it

• Stripe, for payments.
• Cloudflare, for the network and security.
• Our email provider, through Developer Data, for account and billing emails.
• Google, for signing in.
• Our hosting company, which runs the servers.

5. Cookies

All first-party. No third-party analytics cookies.

• vba_s: keeps you signed in. 30 days.
• volleyballapi_ot: protects the Google sign-in from forged requests. 10 minutes.
• volleyballapi_st: the same, for the Continue with Google link. 10 minutes.
• volleyballapi_out: after you sign out, tells Google not to offer to sign you straight back in. 1 minute.
• ap_click: remembers which partner sent you, so they can be credited for a purchase. It holds no personal details and lasts 60 days; a newer partner link replaces it.

6. How long it is kept

• Your account and what you put in: while the account is open.
• After the account is deleted: gone within 30 days, backups included.
• Billing records (invoices, payments): as long as tax and accounting law requires, even after the account is deleted.
• Page, API and security logs: 30 days. After that a page view keeps only its counts, without the address or browser.
• Support tickets: while the account is open, then deleted with it.

7. Your rights

You can ask to see what we hold about you, have it corrected, take a copy, or have it deleted. Ask through support; we answer within 30 days.

8. Deleting your account

Delete your account yourself from your account page. When you do:

• any subscription is cancelled at once, and the unused part is not refunded;
• every API key stops working at once;
• you are signed out;
• the account and what you put in are deleted within 30 days;
• billing records stay as the law requires.

If you cannot sign in, ask through support.

9. Children

Volleyball API is not for anyone under 18.

10. Changes

A new version is posted here with its date. A change that matters is emailed to members first.