Developer Privacy Policy
This policy explains how Mast handles developer account information, API keys, and API usage data.
Last updated May 15, 2026
Overview
Developer dataMast uses developer information to create accounts, verify email addresses, issue API keys, secure access, provide account support, monitor API usage, and protect the service from abuse.
Account data
RegistrationWhen you register as a developer, Mast may store your email address, name, password-derived authentication data, email verification state, developer terms acceptance time, account status, license key records, security settings, and account timestamps.
Passwords should be stored only in protected derived form. Passkey private keys remain on your device; Mast stores public credential information needed to verify future sign-ins.
Mast sends email verification links when you register and may send your API key after verification or when you request a resend. Mast may use an email delivery provider to send those messages.
API logs
Usage and securityMast may log API request details such as request time, route, method, account identity, license key label or type, IP address, user agent, accepted request counts, rejected request counts, and rejection reasons.
These logs help Mast show account usage, troubleshoot integrations, diagnose errors, investigate invalid keys, detect abuse, and protect service availability. Mast does not need to display full secret keys in admin request logs.
Payments
Future billingMast currently provides developer API access through account registration. If paid subscriptions are enabled later, payment and subscription data may be processed by a payment provider and linked to your Mast developer account for access management and support.
Sharing
Service providersMast may use hosting, email, security, analytics, AI, payment, or operations providers to run the developer service. Those providers may process limited developer data on Mast's behalf.
Mast may disclose developer information if needed to protect the service, respond to abuse, comply with legal obligations, or enforce developer terms.
Retention
Operational recordsMast keeps developer records as long as reasonably needed to provide API access, maintain security, support accounts, investigate abuse, comply with obligations, and preserve operational history.
Your choices
Account controlYou can sign in to manage account security, request your API key by email, and review available account details. For account deletion, correction, or privacy questions, use the contact method published with the Mast project or site owner.
Changes
UpdatesMast may update this Developer Privacy Policy as developer features, providers, or operations change.