Privacy Policy

What we receive

When your application requests an icon, our edge receives the domain you asked about, the requested size, the request's IP address, timestamp, user agent and referrer. That is the whole set — we do not ask for names, emails or payment details to use the API.

How we use it

• Serving and caching the icon you requested.
• Operational monitoring — uptime, error rates, cache health.
• Abuse prevention and fair-use enforcement.

We do not sell request data, build advertising profiles, or use it to identify end users.

Cookies

The API sets no cookies. This website stores a single local preference — your light or dark theme choice — in your own browser. Nothing is sent to us.

Third-party fallbacks

When a site publishes no usable icon, we fall back to trusted public icon providers and to the site's own root favicon paths. Those requests are made by our edge, and the requested domain is shared with the provider that resolves it.

Retention

Raw request logs are kept for up to 30 days, then deleted. Aggregate counters that carry no IP addresses may be kept longer for capacity planning. Cached icons are refreshed on their own revalidation schedule.

Your rights

You may ask what we hold about a request, ask for deletion of logs tied to an IP range you control, or ask us to stop serving a particular domain's icon. Write to us and we will answer within 30 days.

Changes

If this policy changes materially, the date above changes with it and the summary at the top is updated. Continued use after that date means the new version applies.