Account records and their purposes
The service stores your email address, password hash, API key hash and prefix, credit usage, abuse-related information including IP information, and payment transaction records. These support account access, retrieval authentication, credit accounting, payment verification and abuse prevention. Passwords and API keys are not stored as plaintext account credentials. Describing the categories does not publish individual hashes or secrets, and hashing is not a guarantee against every form of unauthorized access.
Browser recovery and sessions
The account widget saves an invoice identifier and user identifier in localStorage separately for each hostname to recover saved invoice state. It does not save the raw API key there. Account authentication uses a Secure HttpOnly session cookie, distinct from the retrieval key header. HttpOnly applies to that cookie, not localStorage. Save the once-shown key in secure storage you control; do not assume signing in can redisplay the original secret.
Analytics and retention boundaries
Pages include Statinside analytics counter 65 for website analytics. This is separate from any analysis you perform on retrieved Reddit content, and no exact provider analytics fields or cookie behavior are specified here. No fixed account-data retention or automatic-deletion deadline is established. This promises neither indefinite account storage nor deletion on a particular date. Account retention says nothing about the permanence, completeness or availability of archived Reddit records, or the duration of research files you keep yourself.
