Privacy Policy
Last updated
Overage is operated by North Park ("we", "us"). This policy explains what we collect when you use the Overage website, REST API, MCP server and feeds (the "Service"). In short: we collect very little, we do not sell it, and we do not run advertising or cross-site tracking.
What we collect
Request logs
When you or your software call the Service, we record one log entry per request, or per message for the MCP server. An entry holds:
- the time, host, HTTP method, path and query string, response status and how long it took;
- your user agent, and a label we derive from it (for example browser, AI agent, crawler or MCP client);
- your country, your network's name (ASN) and the Cloudflare data centre that served you;
- for the MCP server, the client name and version, the tool called and the arguments passed, such as the services you asked about, and whether it returned results or an error;
- a short visitor hash, described below.
We do not store your IP address in these logs. The visitor hash is made from your IP address and user agent combined with the current UTC date, and only a truncated result is kept. It lets us count unique visitors within a day, and because the date changes the input, we cannot link the same visitor across days.
Do not put personal or confidential information into API queries or MCP prompts. Query strings and tool arguments are stored as sent.
Corrections
If you submit a correction, we store what you send: the service, the field, your suggested value, your note, any source link and the optional handle you choose to give. We do not ask for your name or email. Please do not include personal information in the note.
Bot check
The corrections form uses Cloudflare Turnstile to stop automated abuse. Turnstile runs in your browser and may collect technical signals to tell people from bots, and we send your IP address with the check so Cloudflare can verify it. Cloudflare handles that data under its own privacy policy. The check loads only on pages with the form.
Browser storage and cookies
The site saves your light or dark theme choice in your browser's local storage. It never leaves your device. We set no advertising or analytics cookies for visitors. A cookie is used only for the password-protected admin area, and only for people who sign in there.
How we use it
- to run, secure and debug the Service and to block abuse;
- to understand aggregate use, such as which services and tools are most requested and which clients and crawlers visit, so we can decide what to cover;
- to review corrections and improve the data.
We do not use this data for advertising, profiling or to identify individuals, and we do not sell it.
Who handles it
The Service runs on Cloudflare, which processes requests and serves our pages, stores our data and provides edge analytics on traffic, as our infrastructure provider. We do not share the contents of our logs with anyone else, except where the law requires it. Aggregate figures that cannot identify you, such as total request counts, may be published.
How long we keep it
Request logs are deleted automatically after 30 days. Corrections are kept while we review them and as a record of why the data changed. The shared pricing data itself holds no personal information.
Your choices and rights
Because we do not keep your IP address or ask who you are, we usually cannot tell which log entries are yours. If you want to ask what we hold, or ask us to delete something you submitted, email support@overage.io with enough detail to find it, such as a correction's text and approximate time. Depending on where you live, such as the EU, UK or California, you may have rights to access, correct or delete your personal data and to object to its use. We will respond within the time the law requires. You can also stop us logging by not using the Service, and your browser's privacy settings can limit what it sends.
Children
The Service is not directed at children under 13 and we do not knowingly collect their data.
Security
Traffic is encrypted in transit, logs are accessible only to administrators behind a login, and we keep what we collect to a minimum. No system is perfectly secure, so we cannot guarantee absolute security.
International use
We are based in the United States and Cloudflare runs a global network, so your requests may be processed in other countries than yours.
Changes
We may update this policy. The date above shows the latest version. Material changes will be noted on this page.
Contact
Questions about privacy: support@overage.io. See also our Terms of Use.