1. Who this policy covers
This Privacy Policy applies to Endless Search, the website at search.endless.sbs, its search interface, developer dashboard, and search API (together, the “Service”). In this policy, “Endless”, “we”, and “us” mean the operator of the Service. You can contact us at [email protected].
2. Information we process
Browser search
When you search in the browser, we process your query and selected filters (such as language, time range, search type, and safe-search setting) to return results. We do not use normal browser searches to create advertising profiles. To improve responsiveness, identical browser-search responses may be kept in a server-memory cache for up to 45 seconds. That cache is not a user account history or a permanent database.
Accounts and API access
If you create an account or request an API key, we process your email address, account identifier, and any profile information made available by your sign-in provider. We store only a hash and visible prefix of an API key, not the full key after it has been shown to you. For API quota, security, and dashboard purposes, we record the API key identifier, account identifier, date, search type, a query truncated to 200 characters, a shortened hash of the request IP address, and timestamps.
Technical and support information
Our servers and infrastructure providers may process connection information such as IP address, request time, browser or device information, and error data to operate, secure, and troubleshoot the Service. If you email us, we process the message and contact details you provide to respond.
3. Why we use information
- To provide search results, accounts, API keys, and the developer dashboard.
- To enforce daily API quotas, prevent abuse, protect the Service, and investigate errors.
- To respond to support, access, deletion, or security requests.
- To comply with legal obligations and protect the rights, safety, and property of users and the Service.
Where data-protection law requires a legal basis, we process data to provide the Service you request, for our legitimate interests in operating and securing it, with your consent where required, or to meet legal obligations.
4. Who receives information
We use service providers only as needed to operate the Service, including:
- Supabase for authentication, account data, API keys, and API-usage records.
- Search sources reached through SearXNG to retrieve results for a submitted query.
- Hosting, security, and content-delivery providers for infrastructure and connection security.
- Email providers when you choose to contact us by email.
Those providers process information under their own applicable terms and privacy notices. A search source may receive the query necessary to return results; visiting a result takes you to that third party’s site. We do not sell personal information or share it for cross-context behavioral advertising.
5. Cookies and similar technology
We use essential session technology to keep an authenticated account signed in and to protect account actions. We do not intentionally use advertising or cross-site behavioral-tracking cookies in the Service. Third-party sign-in providers and external sites you visit may use their own technologies under their own policies. If we add non-essential analytics or marketing technology, we will update this policy and seek consent where the law requires it.
6. Retention and security
We keep information only for as long as reasonably necessary for the purposes described above, including maintaining your account, enforcing quotas, resolving disputes, and meeting legal obligations. You may ask us to delete your account data; some records may need to be retained where required by law or needed for security and fraud prevention. We use reasonable technical and organizational measures designed to protect information, including hashing API keys at rest. No method of transmission or storage is completely secure.
7. Your choices and rights
Depending on where you live, you may have rights to ask for access, correction, deletion, restriction, objection, or portability of personal data, and to withdraw consent where processing relies on consent. To make a request, email us from the address associated with your account at [email protected]. We may need to verify your request before acting on it. You may also have the right to complain to your local data-protection authority.
8. International processing
The Service and its providers may process information in countries other than the one where you live. Where applicable law requires safeguards for an international transfer, we will use an appropriate transfer mechanism or another lawful basis for the transfer.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.
10. Changes and contact
We may update this policy when the Service or applicable requirements change. We will post the revised version here and update the effective date. For privacy questions, requests, or concerns, contact [email protected].