Privacy Policy
Effective 11 October 2026
Who we are
Countries API (“we”, “us”) is operated by reqi. For privacy requests and questions about this policy, contact hello@reqi.dev.
Scope
This policy applies when you use our website, the /v1 API, flag routes, and related assets on api.reqi.dev and cdn.reqi.dev. We do not offer user accounts. When x402 micropayments are enabled for /v1 data routes, payment is handled by your wallet and on-chain facilitators; we do not store card numbers or wallet keys on our servers.
What we process
When you use the Service, our hosting provider (Vercel) and related infrastructure may automatically process technical data such as IP address, request time, URL path, HTTP method, user agent, referrer (where present), and response status. This is typical web server and CDN logging used for security, debugging, and capacity planning.
We do not intentionally collect names, email addresses, or traditional payment card details through the public API or landing page, and we do not build advertising profiles from API use. On-chain payment metadata from x402 (when enabled) is processed by third-party facilitators under their terms.
Query parameters and your data
We do not use query parameters or request paths to target advertising. You and your applications control what you send in URLs; please do not pass personal or sensitive data in query strings. Such data may still be recorded in logs that our infrastructure processes.
Cookies and local storage
The public landing page does not set analytics or advertising cookies. If we add optional analytics in the future, this policy will be updated.
Why we process information
We use log and technical data to operate and protect the Service, understand aggregate usage, diagnose errors, and improve reliability. We do not sell personal information.
Legal bases
Where applicable, we process technical data based on our legitimate interests in running and securing a public API, and on legal obligations when required. We keep country-specific legal references minimal; contact us if you need more detail about your situation.
Subprocessors
Vercel hosts the Service and processes technical data on our behalf. Vercel’s privacy practices are described at https://vercel.com/legal/privacy-policy.
Sharing
We share data only with infrastructure providers that process it on our behalf to deliver the Service, or when required by law. We do not sell personal information.
Retention
Server and CDN logs are retained for a limited period according to our host’s defaults and operational needs, then deleted or aggregated.
International transfers
Infrastructure providers may process technical data in multiple countries as part of delivering the Service globally.
Children
The Service is not directed at children under 16. We do not knowingly collect personal information from children.
Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete personal data we hold about you. Because we do not operate user accounts, we may only be able to respond based on information you provide (for example, approximate time and IP address of a request). Email hello@reqi.dev to submit a request.
Changes
We may update this policy from time to time. The effective date at the top of this page indicates the latest revision.