Contact
Privacy questions and requests can be sent to support@stubpoint.dev.
We may ask for enough context to understand the request, especially because Stubpoint does not use accounts.
Privacy Policy
Summary
Stubpoint does not require accounts, login, or payment details for the current service.
Stubpoint creates public temporary response endpoints. Anyone with an endpoint URL can call it.
Do not submit secrets, credentials, private customer data, production data, regulated data, or anything sensitive.
Stubpoint uses limited technical data to operate the service, prevent abuse, debug issues, and understand basic usage.
Accounts
Stubpoint does not require accounts, login, or payment details for the current service.
Public endpoints
Endpoints are public to anyone with the URL. They are not private, secret, or access-controlled.
Do not store secrets, API keys, passwords, tokens, private customer data, production data, regulated data, or anything sensitive in endpoint responses.
Endpoint data
When you create an endpoint, Stubpoint handles the status code, content type, allowed methods, custom response headers, response body, generated slug, and retention metadata needed to run the endpoint.
Endpoint data is stored so Stubpoint can return the response when the generated URL is called.
Endpoint data expires after 7 days without traffic. Successful calls keep the endpoint active under the current inactivity policy. Do not treat Stubpoint as long-term storage.
Technical logs and service metrics
Stubpoint may process limited technical information needed to operate, secure, debug, and protect the service. This may include request timestamps, requested paths or areas of the site, response status class, rate-limit activity, and similar operational data.
Stubpoint keeps short-lived aggregate counters such as request totals by area, response class, endpoint creation counts, and rate-limit activity.
Rate-limit counters use a hashed client IP and expire automatically.
Endpoint response bodies are stored as endpoint data until the endpoint expires, but Stubpoint does not intentionally store endpoint bodies, request bodies, full user-agent strings, or per-request browsing history in aggregate service metrics.
Third-party services
Stubpoint may use third-party services to operate, protect, and understand the service.
- Umami may be used for website traffic analysis on stable public pages.
- Cloudflare Turnstile may be used for bot protection on the create form.
Each service has its own privacy policy for the information it collects. Generated endpoint pages, mock endpoint URLs, and the metrics page do not include analytics scripts.
Because Stubpoint uses Turnstile, this policy references Cloudflare's Turnstile Privacy Addendum.
Support messages
Please do not send secrets, credentials, private customer data, or production data in support messages.
Support messages are used to reply, investigate issues, and understand what needs attention.
Sharing
We do not sell personal information. We do not use ad networks or send endpoint content to third-party advertising providers.
Limited information may be handled by service providers that help host, secure, monitor, analyze, or support Stubpoint, or when required by law.
Retention
Endpoint data expires automatically based on the endpoint inactivity window.
Rate-limit counters and aggregate service metrics are kept only as long as reasonably needed for operations, security, debugging, abuse prevention, analytics, or legal reasons.
Support messages are kept only as long as reasonably needed for support, operations, security, or legal reasons.
Your requests
You can contact us to ask about access, correction, or deletion of personal information where applicable.
Because Stubpoint does not use accounts, we may need enough information to find the relevant data and verify that the request can be handled safely.
Hosting and international processing
Stubpoint's application servers are hosted in Germany.
Some service providers may process limited technical information in other countries according to their own policies and terms.
Changes
We may update this page as Stubpoint changes. The current version will stay available here.