___  __ _| |_ _ __(_)_ __   __ _
/ __|/ _` | __| '__| | '_ \ / _` |
\__ \ (_| | |_| |  | | | | | (_| |
|___/\__,_|\__|_|  |_|_| |_|\__, |
                             |___/
curated paid API directory for AI agents

Privacy Policy

Last updated: April 2026

What We Collect

Satring collects the minimum data necessary to operate the directory and provide analytics to service owners.

  • IP addresses: Logged by nginx for rate limiting, abuse detection, and aggregate traffic analytics. IP addresses are not stored permanently in our database; they exist only in server access logs which are rotated regularly.
  • Usage data: Page views and API requests are aggregated hourly (hit counts and unique IP counts per route). Individual request details are not retained after aggregation.
  • User-agent strings: Classified into agent categories (e.g., "browser", "GPTBot", "ClaudeBot") for traffic analytics. Raw user-agent strings are not stored in the database.
  • Service submissions: Name, URL, description, pricing, protocol, owner name, and contact information you provide when listing a service.
  • Ratings: Score, comment, and reviewer name you provide when rating a service.
  • Payment data: Lightning invoice payment hashes are recorded to prevent double-spend. We do not store wallet addresses, private keys, or payment amounts beyond what is needed for verification.

IP Geolocation

Paid audience analytics endpoints resolve visitor IP addresses to approximate geographic locations (country, region, city) using the MaxMind GeoLite2 database. This processing occurs:

  • Only on-demand when a service owner purchases an audience analytics report
  • Using a locally hosted database (no IP addresses are sent to third-party geolocation services)
  • At the aggregate level only (reports show country/region/city distribution counts, not individual visitor identities)

This product includes GeoLite2 data created by MaxMind, available from maxmind.com.

How We Use Data

  • Service health monitoring: We probe listed service URLs periodically to detect liveness and protocol support.
  • Abuse prevention: IP-based rate limiting, scraper detection, and automated blocking of abusive traffic patterns.
  • Analytics for service owners: Aggregated traffic data (hit counts, unique visitors, geographic distribution, agent classification) is available to verified domain owners.
  • Directory quality: Usage data informs popularity rankings and service discovery.

Data Retention

  • Usage analytics: Aggregated hourly data retained for 90 days, then automatically purged.
  • Nginx access logs: Rotated by the operating system log rotation policy (typically 14 days).
  • Service listings: Retained until deleted by the owner or purged for inactivity.
  • Payment hashes: Retained indefinitely for replay protection.

No Accounts, No Tracking

Satring does not require user accounts, does not use cookies for tracking, and does not employ third-party analytics services. There are no advertising trackers, no social media pixels, and no fingerprinting.

Third-Party Services

  • Lightning wallet: Invoice creation and payment verification for L402/MPP payments (self-hosted).
  • xpay.sh: x402 USDC payment facilitation (Coinbase).
  • MaxMind GeoLite2: Offline IP geolocation database (no data sent to MaxMind).
  • Tailwind CSS / htmx: Frontend libraries loaded from CDN.

Contact

For privacy questions or data removal requests: botlab.dev/contact