Back to API docs

Developer Privacy Policy

This policy explains how Mast handles developer account information, API keys, and API usage data.

Last updated May 15, 2026

Overview

Developer data

Mast uses developer information to create accounts, verify email addresses, issue API keys, secure access, provide account support, monitor API usage, and protect the service from abuse.

Account data

Registration

When you register as a developer, Mast may store your email address, name, password-derived authentication data, email verification state, developer terms acceptance time, account status, license key records, security settings, and account timestamps.

Passwords should be stored only in protected derived form. Passkey private keys remain on your device; Mast stores public credential information needed to verify future sign-ins.

Email

Verification

Mast sends email verification links when you register and may send your API key after verification or when you request a resend. Mast may use an email delivery provider to send those messages.

API logs

Usage and security

Mast may log API request details such as request time, route, method, account identity, license key label or type, IP address, user agent, accepted request counts, rejected request counts, and rejection reasons.

These logs help Mast show account usage, troubleshoot integrations, diagnose errors, investigate invalid keys, detect abuse, and protect service availability. Mast does not need to display full secret keys in admin request logs.

Payments

Future billing

Mast currently provides developer API access through account registration. If paid subscriptions are enabled later, payment and subscription data may be processed by a payment provider and linked to your Mast developer account for access management and support.

Sharing

Service providers

Mast may use hosting, email, security, analytics, AI, payment, or operations providers to run the developer service. Those providers may process limited developer data on Mast's behalf.

Mast may disclose developer information if needed to protect the service, respond to abuse, comply with legal obligations, or enforce developer terms.

Retention

Operational records

Mast keeps developer records as long as reasonably needed to provide API access, maintain security, support accounts, investigate abuse, comply with obligations, and preserve operational history.

Your choices

Account control

You can sign in to manage account security, request your API key by email, and review available account details. For account deletion, correction, or privacy questions, use the contact method published with the Mast project or site owner.

Changes

Updates

Mast may update this Developer Privacy Policy as developer features, providers, or operations change.