Privacy Policy

Who we are

Gimme Fast ("we", "us", "our") operates the API service at gimme.fast, the dashboard at dash.gimme.fast, and related services. This policy explains what data we collect and how we handle it.

What we collect

We collect the minimum data needed to operate the service:

• Account data: email address, name, and wallet address provided during signup via Dynamic.xyz.
• API usage data: request counts, endpoints called, timestamps, IP addresses. Used for rate limiting, abuse prevention, and usage billing.
• Payment data: billing email, plan selection. Payment processing is handled by Stripe — we never see or store your card details.
• Technical data: IP address, user agent, and request headers sent with API calls.

What we don't collect

• We don't track you across websites.
• We don't use advertising cookies or third-party trackers.
• We don't sell or share your data with third parties for marketing.
• We don't store your payment card information.

How we use your data

• Authenticate your API requests.
• Enforce rate limits and usage quotas.
• Process billing and subscriptions.
• Detect and prevent abuse or unauthorized access.
• Send service-related communications (outage notices, billing alerts).
• Improve the service based on aggregate usage patterns.

Data storage and security

Your data is stored on servers in the European Union (Hetzner, Germany and Finland). API keys are hashed with SHA-256 before storage — we cannot retrieve your raw key after creation. All connections are encrypted via TLS. Access to production systems is restricted to key-based SSH authentication.

Third-party services

We use the following third-party services that may process your data:

• Dynamic.xyz — authentication (email, wallet login).
• Stripe — payment processing and subscription management.
• Hetzner — infrastructure hosting (EU).

Each operates under their own privacy policy. We do not share your data with any other third parties.

Data retention

Account data is retained as long as your account is active. API usage logs are retained for 90 days. If you delete your account, we will remove your personal data within 30 days. Anonymized aggregate data may be retained indefinitely.

Your rights (GDPR)

If you're in the EU/EEA, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Object to processing of your data.
• Withdraw consent at any time.

To exercise any of these rights, email privacy@gimme.fast.

Cookies

The dashboard uses a session cookie for authentication (set by Dynamic.xyz). The landing page and API do not use cookies. We do not use analytics or tracking cookies.

Changes

We may update this policy from time to time. Significant changes will be communicated via email or a notice on the dashboard. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy? Email privacy@gimme.fast.