Legal
Privacy Policy
Probe Uranus is an HTTP API for public X data. This policy covers the account you create here — what we collect, why, and how to get rid of it.
The short version
- Signing in with Google gives us your name, email address, and Google account ID. Nothing else.
- We use that to identify your account and bill you. We do not sell it, advertise against it, or train models on it.
- We never see your card number. Stripe processes payments and holds the card details.
- There are no analytics, no trackers, and no advertising pixels on this site.
- Email support@probeuranus.fun and we will delete your account and its data.
Who we are
Probe Uranus (“we”, “us”) operates the website at probeuranus.fun and the API at api.probeuranus.fun. We are the controller of the personal data described below. We are not affiliated with X Corp., Google, or any of their subsidiaries.
What we collect
Google account data
Google sign-in is the only way to create an account. We request the standard openid, email, and profile scopes — no Gmail, Drive, Calendar, Contacts, or other restricted or sensitive scopes. From that grant we store:
- Your email address, which is the identity of your account and where billing and service notices go.
- Your name, shown to you in the dashboard so you can tell which account you are signed into.
- A Google account identifier, so we can recognise you as the same user on your next sign-in.
- Session and OAuth tokens issued during sign-in, held by our authentication layer to keep you signed in. These are not readable by us in the product UI and are discarded when the session ends or you sign out.
Google also returns a profile picture URL as part of the profile scope. We do not display it anywhere in the product.
API keys
Your API key is generated on our servers and shown to you exactly once. We store only a SHA-256 hash of it plus a short non-secret prefix so you can tell your keys apart. We cannot recover a lost key — you rotate it and get a new one.
Usage data
To enforce rate limits and quotas we keep per-account counters for the current minute, day, and month. We also write a short request log containing the endpoint path, HTTP status code, and response time. That log carries no request bodies, no query parameters, and no results, and it is deleted automatically after about two days. Anonymous, account-free totals (how many requests the platform served, and how many succeeded) are kept indefinitely to power the uptime figures on the homepage.
Billing data
Subscriptions are sold by us and processed by Stripe. Your card details go to Stripe and never touch our servers — we only ever see the last four digits and the card brand, through the Stripe dashboard. Stripe also collects the billing address it needs to calculate tax. What we store is the state of your subscription: which plan you are on, whether it is trialing, active, past due or cancelled, and when the current period ends.
Your browser
A session cookie keeps you signed in. Your light or dark theme preference sits in localStorage. When a key is displayed to you it is held in sessionStorage so the dashboard’s “Try it” panel can use it, and your browser drops that when you close the tab. None of these are used for tracking.
What we do not collect
We run no analytics service, no tag manager, no advertising pixel, and no session recorder. There is no third-party JavaScript on this site collecting anything about you.
How we use Google user data
The data we receive from Google APIs is used for exactly three things: identifying your account when you sign in, associating your API key and quota with you, and sending billing and service correspondence to your email address.
We do not use Google user data for advertising or ad personalisation of any kind. We do not sell it. We do not use it to develop, improve or train generalised artificial intelligence or machine learning models. We do not allow humans to read it, except where you have given explicit consent for a specific support request, where it is necessary for security purposes such as investigating abuse, or where we are compelled to by law.
Probe Uranus’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share it with
We do not sell personal data and we do not share it for anyone else’s marketing. We rely on a small number of service providers to run the product, and each only receives what its job requires:
- Google — sign-in. Google receives the fact that you authenticated with us, per its own privacy policy.
- Convex — the database and backend that stores your account record, key hash, and usage counters.
- Stripe — payment processor for subscriptions. Receives your email address, billing address, and payment details to bill you and issue receipts.
- Vercel — hosts the website you are reading.
We may also disclose data where we are legally required to, or to protect the service and its users from abuse. If the business is ever sold or merged, account data may transfer with it, and we will say so here before that takes effect.
Data about X users
The API returns information that is already publicly visible on X: profiles, posts, follower relationships, search results and the like. If you are an X user rather than a customer, note that we do not build long-term profiles of you. Responses are fetched on demand and we keep only a short-lived cache so repeated lookups do not re-fetch: a cached profile stops counting as current after about five minutes, and the stored copy is deleted within 24 hours of being fetched. We do not retain posts, timelines, or search results. Deleting or making something private on X removes it from our results too. If you believe we are holding something we should not, write to support@probeuranus.fun.
If you use our API, you become the controller of whatever you collect through it, and you are responsible for handling it lawfully. See the Terms of Service for what that means.
How long we keep things
- Account data — for as long as your account exists, and then deleted on request.
- Request log — roughly two days, then deleted automatically.
- Cached X profile data — deleted within 24 hours of being fetched.
- Usage counters — for the life of the account, so your quota can be enforced.
- Anonymous platform totals — indefinitely. These contain no account identifiers.
- Billing records — retained by us and by Stripe for as long as tax and accounting law requires.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict, or delete the personal data we hold about you, and to object to how we process it. Under the GDPR our lawful bases are contract (running the account you signed up for) and legitimate interest (keeping the service secure and abuse-free).
To exercise any of these, or to have your account and its data deleted outright, email support@probeuranus.fun from the address you signed up with. We will action it within 30 days. Deleting your account revokes your API keys immediately. You can also revoke our access to your Google account at any time from your Google account permissions page, though that alone will not delete data already stored here.
If you are in the EU or UK and think we have handled this badly, you can complain to your local data protection authority.
Security
All traffic to the site and the API is encrypted in transit with TLS. API keys are stored only as SHA-256 hashes, so a copy of our database does not yield working keys. Any operational credentials we hold are encrypted at rest. Administrative access is restricted to a small number of accounts. No system is perfect, and we make no claim otherwise — if you find a hole, tell us at support@probeuranus.fun.
International transfers
Our providers operate in the United States and elsewhere, so your data may be processed outside your country. Where required, those transfers rely on the Standard Contractual Clauses or an equivalent safeguard.
Children
This is a developer tool and is not directed at children. Do not use it if you are under 13, or under the digital age of consent where you live. If we learn we are holding a child’s data we will delete it.
Changes
If we change this policy we will update the effective date at the top, and for anything material we will email account holders before it takes effect.
Contact
Questions, requests, or complaints: support@probeuranus.fun.