Skip to content

Privacy & cookie policy

Last updated October 24, 2026

Public APIs is a free directory of public APIs, operated with APILayer. This page explains what we collect when you use the site, why, and the choices you have.

What we collect

  • Usage analytics (only as described under Cookies): pages viewed, the site that referred you, approximate location from your IP address (country/city, the IP itself isn't kept by us), device and browser type, and which links, filters and searches you use. We use this to see which APIs and articles are useful and to improve the site.
  • Reviews you submit: your rating, comment, the name you enter and, if you choose to give it, your email (never shown publicly; used only to contact you about your review). To limit spam we store a salted one-way hash of your IP address, not the address itself.
  • Content team accounts: for people who sign in to the content dashboard, an email address, name and password (stored hashed).

We don't sell personal data and we don't run advertising on this site.

Cookies and similar storage

Always on (strictly necessary): your theme choice (light/dark) and your cookie choice are stored in your browser's local storage. Content team members get a login cookie.

Analytics (only if you accept):

  • Google Analytics 4 (Google LLC): sets _ga and _ga_* cookies to measure visits. Until you accept, Google Consent Mode keeps analytics storage off.
  • PostHog (PostHog Inc.): product analytics and error tracking, including anonymised session recordings with form inputs masked. Until you accept, PostHog stores nothing in cookies or local storage.

You can change your choice anytime: . Browser settings and extensions that block cookies also work.

Who processes data for us

  • Vercel (hosting and image storage)
  • Turso (database)
  • Google (Google Analytics)
  • PostHog (analytics and error tracking)

These providers may process data outside your country under their own safeguards.

How long we keep data

  • Reviews: while they're published, or until you ask us to remove them.
  • Rejected reviews and IP hashes used for spam limits: deleted when no longer needed for moderation.
  • Analytics: according to the retention settings of Google Analytics and PostHog.

Your rights

Depending on where you live (for example under the GDPR or CCPA) you can ask to access, correct or delete your personal data, object to its use, or withdraw consent. Contact APILayer and we'll respond within 30 days.

Changes

We'll update this page when our practices change. See also our terms of use.