API Widget (“we”, “our”, “the app”) respects your privacy and is committed to handling data responsibly and transparently. This Privacy Policy explains how the app processes data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data We Process
API Widget does not collect, store, or process personal data as defined in GDPR Article 4(1).

The app accesses only the data source URL that you provide, such as a JSON API endpoint. The content and structure of the data source are fully controlled by you.

API Widget does not identify users and does not associate any processed data with individuals.

2. Data Fetching and Temporary Caching
To render widgets, the API Widget service retrieves the latest response from your configured data source.

For performance and reliability purposes, the most recent successful response may be cached temporarily. This cache:

• is overwritten automatically,
  
• is used only to generate widget content,
  
• is not analyzed, shared, or linked to identifiers,
  
• is not retained on a long-term basis.
  

3. Technical Data and Internal Analytics
We may process minimal technical data strictly necessary for operating and improving the service. This may include:

• IP addresses in anonymized or truncated form, used only to estimate the number of unique widget requests,
  
• non-personal usage statistics (such as which widget themes or layouts are used) to guide product improvements,
  
• technical cookies used solely to exchange configuration parameters required for widget rendering.
  

These cookies do not track users and do not contain personally identifiable information.

API Widget does not use third-party analytics services, advertising technologies, or cross-site tracking.

4. Legal Basis for Processing
Data processing is performed solely to provide the service requested by the user.

The applicable legal bases under GDPR Article 6 are:

• Article 6(1)(b) — performance of a service requested by the user,
  
• Article 6(1)(f) — legitimate interest in maintaining, improving, and securing the service.
  

No processing is based on user consent.

5. Data Retention
The only data retained by API Widget is:

• a temporary cache of the most recent response from your data source,
  
• minimal internal analytics as described above.
  

Cached data is overwritten frequently and removed when no longer required. No historical records, user profiles, or long-term logs are created.

6. Data Sharing
API Widget does not share, sell, or disclose any data, including cached or analytical data, to third parties.

All data processing is performed internally and is strictly limited to operating the service.

7. International Data Transfers
Data may transit through international networks as part of standard internet communication.

API Widget does not transfer data to external processors or third-party service providers.

8. Your Rights
Although API Widget does not store personal data, you may exercise your rights under GDPR where applicable, including the right to access, rectification, erasure, restriction, objection, and data portability.

In most cases, these rights relate to your own data sources rather than to API Widget’s internal processing.

9. Contact Information
If you have questions about this Privacy Policy or data processing practices, please contact:

Email: hello@apiwidget.com

10. Changes to This Policy
This Privacy Policy may be updated to reflect legal requirements or service improvements. The latest version will always be available on our website.