Privacy Policy | CloudAPIcredits

Last updated: November 2, 2026

This Privacy Policy explains how {{COMPANY_LEGAL_NAME}}, {{ENTITY_TYPE, e.g. a Texas limited liability company}} ("CloudAPIcredits", "we", "us" or "our"), collects, uses and shares personal information when you visit https://www.cloudapicredits.com (the "Site"), and the choices and rights you have. It also serves as our Notice at Collection for California residents.

The short version: you do not need an account to use the Site. We collect the technical data any website receives when you load a page, we record clicks on outbound affiliate and referral links so cloud and AI providers can pay us a commission, we load analytics and advertising pixels only after you accept them in the consent banner, and we keep the name and email you give us when you submit an offer or write to us. If you choose to sign in with Google, we keep the basic profile Google sends us and the offers you save. We do not sell your personal information for money. Some of the advertising cookies we use may count as a "sale" or "sharing" under California law or "targeted advertising" under Texas law, and you can opt out on our Your Privacy Choices page.

1. Who we are

{{COMPANY_LEGAL_NAME}} is the controller (in the language of state privacy laws) of the personal information described in this Policy. Our address is {{STREET_ADDRESS}}, {{SUITE_OR_UNIT}}, {{CITY}}, TX {{ZIP}}, United States. For anything privacy-related, write to {{PRIVACY_EMAIL}}.

2. Information we collect

2.1 Information collected automatically

When you load a page on the Site, our hosting provider and content delivery network receive and briefly log:

your IP address and an approximate location derived from it (country, state, city);
the browser, operating system and device type you use, your screen size and language setting;
the page you requested, the page that referred you (for example a Google search result or a Facebook ad), and the time of the request;
any campaign parameters in the URL you arrived on, such as utm_source, gclid or fbclid.

When you click an outbound link to a provider, our redirect service records a click event: the timestamp, the destination provider, the page and offer you clicked from, your IP address, your user agent, and a random click identifier that we pass to the affiliate network or the provider's referral system so the signup can be attributed. We keep server logs and click logs for 90 days and then delete them, except where a specific log entry is needed to investigate fraud, a security incident or a legal claim.

2.2 Information you give us

If you use the "Submit an offer" form, we collect the offer details, the provider it applies to, the link to the provider's official page, any description you write, and, optionally, your first name and email address so we can tell you whether the offer was published. If you contact us by email or through the contact form, we keep the email thread. If you report an accessibility problem or an offer that stopped working, we keep the report.

We do not ask for and do not want your API keys, billing account identifiers, password, payment card details, Social Security number, government ID, health information, precise geolocation or any other sensitive data. If you send us any of that by mistake, we will delete it.

The Site offers an optional account created through Sign in with Google. You never need an account to see or claim an offer. If you choose to sign in, Google sends us your Google account identifier, your name, your email address and your profile picture URL, and we store these together with the providers and offers you mark as saved. We use this information only to show you your account page and your saved items, and to recognize you on later visits. We do not post to your Google account, read your contacts, access your Google Cloud or Gemini API projects, or receive your password. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Sign-in sessions use a signed cookie named sph_user that expires after 30 days or when you sign out. You can delete your account at any time from the account page; deletion removes the stored profile and saved items immediately.

2.4 Information from cookies and pixels

After you accept analytics or advertising cookies in the consent banner, the third-party tools listed in Section 3 set cookies and collect usage data such as pages viewed, time on page, clicks, scroll depth, device and browser details, a pseudonymous cookie identifier, and whether you reached the Site from one of our ads. Our Cookie Policy lists each cookie and how long it lasts.

2.5 Information we do not collect

We have no password-based login, no newsletter signup that requires more than an email address, and no app. We do not collect precise geolocation, biometric data, or data from children knowingly. We do not purchase data about you from data brokers. We never see what you build with a provider, the prompts you send, the models you call or the usage charges on your provider account.

3. Cookies, analytics and advertising pixels

The Site uses a cookie-consent banner. Until you make a choice, only strictly necessary cookies (the consent record itself, the sign-in cookies if you signed in, and anti-abuse tokens on forms) are set. Analytics and advertising tags load only after you accept them. You can change your choice at any time from the "Privacy choices" link in the footer.

With your consent we use:

Google Analytics 4 (Google LLC), which measures how visitors use the Site. IP addresses are not logged or stored by GA4. We have enabled Google Consent Mode, so when you decline, GA4 sends only cookieless, aggregated pings or nothing at all.
Google Ads conversion tracking and remarketing (Google LLC), which tells us when a visitor who clicked one of our Google ads reached a page or clicked out to a provider, and lets us show ads to past visitors on Google properties.
Meta Pixel (Meta Platforms, Inc.), which measures the results of ads we run on Facebook and Instagram and lets us show ads to past visitors on Meta properties. Meta may link pixel data to your Meta account under its own privacy policy.
Microsoft Clarity (Microsoft Corporation), which records anonymized session replays and heatmaps so we can see where pages confuse people. Clarity masks text you type into forms.

Each of these companies processes data under its own privacy policy and may use it for its own purposes, including improving its services. You can read Google's at policies.google.com/privacy, Meta's at facebook.com/privacy/policy, and Microsoft's at privacy.microsoft.com.

4. Affiliate and referral tracking

When you click a link to a provider, you usually pass through an affiliate network before reaching the provider, or you land on the provider's signup page with our referral identifier in the URL. The networks we currently work with are Impact, CJ Affiliate, Rakuten Advertising, Partnerize, Awin and direct partner programs. The network receives the click identifier, a referrer that identifies CloudAPIcredits, the destination URL, your IP address and user agent, and the time of the click. The network and the provider then set their own cookies on the provider's domain, or record the referral against your new account, so that, if you sign up or spend within the attribution window (usually 7 to 90 days, set by each provider), the signup is credited to us.

We receive back a report of the click identifier, the provider, the fact that a signup or qualifying spend occurred, the commission earned and sometimes a plan tier. We do not receive your name, email address, payment details, API keys, project names or the services you use, unless a provider includes a plan name in its reporting, in which case we use it only for aggregate statistics and do not connect it to you.

Affiliate networks and providers are independent businesses that act as controllers of the data they collect. Their policies are available on their own websites.

5. How we use personal information

We use the information described above to:

deliver the Site, balance load, prevent abuse and keep it secure;
route your click to the right provider and get paid for it;
measure which pages, offers and ads work, so we can improve the Site;
run and optimize our advertising on Google and Meta, including by showing ads to past visitors where you have consented;
review, verify, edit and publish offers you submit and, if you asked, tell you what happened to them;
operate your account and show you your saved providers and offers, if you signed in;
answer your questions, process privacy requests and handle legal notices;
comply with law, enforce our Terms of Use and protect our rights and the rights of others.

We do not use personal information to make decisions that have legal or similarly significant effects on you, and we do not use it for profiling in that sense.

We share personal information only with:

Service providers that host the Site, deliver its content, send our email, store form submissions and account records, and provide analytics, under contracts that restrict their use of the data to our instructions. This includes our hosting and CDN provider, our form and email providers, and Microsoft Clarity when it acts as our processor.
Advertising partners (Google and Meta) through their pixels and tags, as described in Section 3. Under California law this may count as "sharing" for cross-context behavioral advertising; under Texas law it may count as "targeted advertising". You can opt out as described in Section 10.
Affiliate networks and providers, which receive click data as described in Section 4.
Authorities and others when required, for example in response to a subpoena, court order or lawful request, to investigate fraud or abuse of the Site, or to defend legal claims.
A successor in a merger, acquisition, financing or sale of assets, in which case this Policy continues to govern the data until the successor posts a new one.

We do not sell personal information in exchange for money, and we do not share it with data brokers. We never share your account data or saved offers with a provider or an advertising platform.

7. How long we keep information

Server and click logs: 90 days.
Analytics data in Google Analytics 4: 14 months of user-level data, then aggregated only.
Advertising cookie data: for the cookie lifetimes listed in the Cookie Policy, and in Google's and Meta's systems as their policies describe.
Offer submissions: for as long as the offer or its verification history is useful to the Site, then deleted or anonymized. Your name and email are deleted within 12 months of the last message about the submission.
Account records: until you delete your account, or 24 months after your last sign-in, whichever comes first.
Contact and privacy-request correspondence: 24 months after the thread closes, or longer if needed to show we complied with the law.
Arbitration opt-out notices and legal correspondence: for the life of the legal relationship plus the applicable limitations period.

8. Security

We use HTTPS across the Site, limit administrative access to named individuals with multi-factor authentication, keep form submissions and account records in access-controlled systems, sign session cookies so they cannot be forged, and delete logs on the schedule above. No website can promise perfect security. If we learn of a breach that affects your personal information, we will notify you and the relevant authorities as Tex. Bus. & Com. Code § 521.053 and the law of your state require.

9. Children

The Site is for adults who hold or are opening a cloud or API account. You must be at least 18 to use it. We do not knowingly collect personal information from anyone under 13 as defined by the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501 to 6506, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us personal information, email {{PRIVACY_EMAIL}} and we will delete it.

10. Your privacy rights

Many US states now give residents rights over their personal information. We apply the rights below to every US resident who contacts us, whether or not the law of your state requires it, with the state-specific details noted in Sections 11 through 13. The rights are:

Access and know: confirm whether we process your personal information and get a copy of it.
Delete: ask us to delete personal information we collected from you, subject to legal exceptions.
Correct: ask us to fix inaccurate personal information.
Opt out of sale, sharing and targeted advertising: stop advertising cookies and pixels. You can do this instantly through the "Privacy choices" link in the footer, by sending a Global Privacy Control signal, or by emailing us.
Portability: receive the information you gave us in a usable format.
No retaliation: we will not deny you content, charge a different price or treat you differently for exercising a right.

10.1 How to make a request

Email {{PRIVACY_EMAIL}} with the subject line "Privacy request", tell us which right you want to exercise and the state you live in, and give us an email address we can reply to. You can also write to {{STREET_ADDRESS}}, {{SUITE_OR_UNIT}}, {{CITY}}, TX {{ZIP}}, United States. There is no fee. If you have an account, you can delete it yourself from the account page without contacting us.

10.2 Verification

Unless you signed in, the information we hold about you is usually tied to an IP address, a cookie identifier or the email address you used to contact us. We will verify your request by confirming you control the email address involved and, if needed, asking you for the approximate date and page of your submission or visit. For account data, we verify by asking you to sign in or to reply from the Google address on the account. We will not ask for more information than we need. If we cannot match your request to any data we hold, we will tell you.

10.3 Timing

We respond within 45 days of receiving a verifiable request. If we need more time, we will tell you within the first 45 days why and when to expect a response, and we may extend by up to 45 more days as the law allows.

10.4 Authorized agents

You may have someone else submit a request for you. We will ask the agent for your signed permission, or for a copy of a power of attorney, and may also ask you to confirm the request directly with us, as 11 CCR § 7063 and other state regulations allow.

10.5 Appeals

If we decline all or part of your request, we will explain why and how to appeal. See Section 12.2 for the Texas process and Section 13 for other states. Section 11 covers California.

11. California residents

This Section applies to residents of California under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together the "CCPA"), Cal. Civ. Code § 1798.100 et seq., and its regulations at 11 CCR § 7000 et seq.

11.1 Notice at collection

In the 12 months before the Last updated date above, we collected the following categories of personal information, as the CCPA defines them:

Identifiers (§ 1798.140(v)(1)(A)): IP address, cookie and click identifiers, and, if you provided them, your name, email address, Google account identifier and profile picture URL. Source: you, your device and Google (if you sign in). Purpose: operating the Site, attribution, analytics, advertising, your account, responding to you. Disclosed to: service providers, affiliate networks, advertising partners.
Internet or other electronic network activity (§ 1798.140(v)(1)(F)): pages viewed, links clicked, referrer, campaign parameters, session recordings, saved offers. Source: your device and our tags. Purpose: analytics, advertising, your account, improving the Site. Disclosed to: service providers, advertising partners.
Geolocation data (§ 1798.140(v)(1)(G)), approximate only, derived from IP address. Source: your device. Purpose: analytics, fraud prevention, regional ad delivery. Disclosed to: service providers, advertising partners.
Commercial information (§ 1798.140(v)(1)(D)): the provider you clicked out to and, from affiliate reports, that a signup or qualifying spend occurred, not linked to your name. Source: affiliate networks and providers. Purpose: paying us, measuring the Site. Disclosed to: none beyond the network that supplied it.
Inferences (§ 1798.140(v)(1)(K)): advertising audiences created by Google and Meta from your visits, such as "visited the Google Cloud credits page". Source: our tags. Purpose: advertising. Disclosed to: advertising partners.

We do not collect sensitive personal information as defined in § 1798.140(ae). We retain each category for the periods in Section 7.

We do not sell personal information for money. We do "share" identifiers, internet activity and inferences with Google and Meta for cross-context behavioral advertising, as § 1798.140(ah) defines that term, when you have accepted advertising cookies. We do not knowingly sell or share the personal information of consumers under 16.

11.3 Your CCPA rights

You have the right to know what personal information we collect, use, disclose, sell and share (§§ 1798.100, 1798.110, 1798.115); to delete it (§ 1798.105); to correct it (§ 1798.106); to opt out of sale or sharing (§ 1798.120); to limit the use of sensitive personal information (§ 1798.121), which does not apply because we collect none; and to be free from discrimination for exercising your rights (§ 1798.125). We do not offer financial incentives in exchange for personal information.

To opt out of sharing, use the "Privacy choices" link in the footer, visit Your Privacy Choices, or send a Global Privacy Control signal from your browser. We treat a GPC signal as a valid opt-out request for that browser, as 11 CCR § 7025 requires. To exercise any other right, follow Section 10.1. You may use an authorized agent as described in Section 10.4.

11.4 Shine the Light

Under Cal. Civ. Code § 1798.83, California residents may ask once a year for a list of third parties to whom we disclosed personal information for their direct marketing purposes. We do not make such disclosures.

12. Texas residents

This Section applies to Texas residents under the Texas Data Privacy and Security Act, Tex. Bus. & Com. Code Chapter 541 (the "TDPSA"), which took effect July 1, 2024.

12.1 Your rights and our disclosures

Under § 541.051 you may confirm whether we process your personal data and access it; correct inaccuracies; delete personal data provided by or obtained about you; obtain a portable copy of data you provided; and opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We engage in targeted advertising through Google and Meta pixels when you consent, and you may opt out of it. The TDPSA defines a sale as an exchange of personal data for monetary or other valuable consideration. We do not make such exchanges, but because regulators sometimes treat disclosure to advertising platforms as a sale, we treat your opt-out as covering both targeted advertising and sale. We do not process sensitive data or biometric data, so the TDPSA's required notices about selling those categories (§ 541.102(b)) do not apply. We do not profile.

We honor browser-based universal opt-out signals such as Global Privacy Control as a request to opt out of targeted advertising and sale, as § 541.055 requires.

12.2 How we respond and how to appeal

We respond to requests within 45 days under § 541.052, with one 45-day extension if reasonably necessary, in which case we will tell you within the first 45 days. If we decline to act, we will tell you why and how to appeal. You may appeal by replying to our decision email or writing to {{PRIVACY_EMAIL}} with "Privacy appeal" in the subject line within a reasonable time after the decision. Under § 541.053 we will respond to your appeal in writing within 60 days of receiving it, with the reasons for our decision. If we deny your appeal, you may submit a complaint to the Texas Attorney General at www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint, and we will give you that link in our response.

13. Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Montana and other states

If you live in Virginia (Va. Code § 59.1-575 et seq.), Colorado (C.R.S. § 6-1-1301 et seq.), Connecticut (Conn. Gen. Stat. § 42-515 et seq.), Utah (Utah Code § 13-61-101 et seq.), Oregon (ORS 646A.570 et seq.), Montana (Mont. Code Ann. § 30-14-2801 et seq.), or in Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Rhode Island or Tennessee, you have the rights listed in Section 10 to the extent your state's law grants them. The practical notes:

Several of these laws exempt small businesses below a threshold of consumers processed. We extend the rights above to you regardless.
Where your state requires us to honor universal opt-out signals (currently including Colorado, Connecticut, Oregon, Montana, Delaware, New Jersey, New Hampshire, Minnesota, Maryland and Nebraska), we treat Global Privacy Control as an opt-out of targeted advertising and sale.
If we deny a request, you may appeal by writing to {{PRIVACY_EMAIL}} with "Privacy appeal" in the subject line. We will respond within 45 days (60 days where your state allows). If we deny the appeal, we will tell you how to contact your state Attorney General.
Oregon residents may ask for the specific third parties, not just categories, to which we disclosed personal data. The current list is Google LLC, Meta Platforms, Inc., Microsoft Corporation and the affiliate networks named in Section 4.
Colorado residents under 18 and Connecticut residents under 18: we do not knowingly process your data for targeted advertising.

14. Nevada residents

Nevada residents may direct a website operator not to sell covered information under NRS 603A.300 to 603A.360. We do not sell covered information as Nevada defines a sale (an exchange for monetary consideration with a person who will license or sell it onward). You may still send us an opt-out request at {{PRIVACY_EMAIL}} and we will record it.

15. Do Not Track and Global Privacy Control

Browsers can send a "Do Not Track" (DNT) header. There is no accepted standard for what DNT requires, and the Site does not change its behavior in response to DNT alone, which we disclose here as Cal. Bus. & Prof. Code § 22575(b)(5) requires. The Site does respond to the Global Privacy Control (GPC) signal: when your browser sends it, we treat it as an opt-out of advertising cookies, sale and sharing for that browser, suppress the advertising tags, and record the choice in the consent cookie. GPC is available as a setting in Firefox, Brave and DuckDuckGo, and through extensions in Chrome, Edge and Safari.

16. International visitors

The Site is operated from Texas, hosted in the United States and intended for people in the United States. If you visit from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country. We do not target residents of the European Economic Area, the United Kingdom or other regions and do not knowingly offer goods or services to them. If you are in one of those regions and believe we hold your personal data, you may still contact {{PRIVACY_EMAIL}} and we will handle your request.

17. Email and marketing

We send email only to answer you, to tell you what happened to an offer you submitted, to tell you about your account, or to deliver a newsletter you explicitly asked for. Every marketing email we send identifies {{COMPANY_LEGAL_NAME}}, includes our postal address and has a working unsubscribe link, as the CAN-SPAM Act, 15 U.S.C. § 7701 et seq., requires. Unsubscribe requests take effect within 10 business days. We do not send text messages.

18. Changes to this Policy

We may update this Policy. The "Last updated" date at the top will change, and for material changes we will post a notice on the Site for at least 30 days before the change takes effect. If a change would allow a new use of personal information we already hold that is materially different from what this Policy describes, we will ask for your consent where the law requires it.

19. Contact us

Privacy requests, appeals and questions: {{PRIVACY_EMAIL}} Mail: {{COMPANY_LEGAL_NAME}}, Attn: Privacy, {{STREET_ADDRESS}}, {{SUITE_OR_UNIT}}, {{CITY}}, TX {{ZIP}}, United States

If you have a disability and need this Policy in another format, email {{CONTACT_EMAIL}} and we will provide it.