Legal

Privacy

Draft — effective when KiLocker opens for external keys. Until then KiLocker is in private early access.

KiLocker Ltd (company number 17563874, registered office 128 City Road, London EC1V 2NX) is the controller of the personal data described here.

What we keep

Data	Why
Account email	To sign you in and to contact you about your account.
Your API keys	To write them into requests you have allowed. Stored encrypted; never shown or returned to anyone.
Use records	One line per use or refused attempt — time, pass, host, method, path, request size, and the request id a platform sends. So you and the platform can see and reconcile every use.
Security logs	Sign-ins and changes to keys and passes, to protect your account.

Data

Why

Account email

To sign you in and to contact you about your account.

Your API keys

To write them into requests you have allowed. Stored encrypted; never shown or returned to anyone.

Use records

One line per use or refused attempt — time, pass, host, method, path, request size, and the request id a platform sends. So you and the platform can see and reconcile every use.

Security logs

Sign-ins and changes to keys and passes, to protect your account.

What we don't keep

The content of requests and responses. They travel between the pass holder and the provider; KiLocker does not relay or store them.
Advertising or tracking cookies. This site uses none.

Sharing

We don't sell personal data. A platform you have allowed sees the details of its own pass (limits, status, a fingerprint of the key that can't be linked across platforms) and the use records of that pass. We use infrastructure providers to run the service; they process data only on our instructions.

Keeping and deleting

Deleting a key erases it. Use records are kept so that both sides can verify past uses; the retention period will be stated here before KiLocker opens for external keys. You can ask for a copy or deletion of your personal data at contact@kilocker.com.