Privacy Policy

This Privacy Policy explains how Favicons (the “Service”) handles information when you use https://favicons.vblinden.dev. The Service is a favicon resolution and caching API. It does not require user accounts.

Who we are

The Service is operated by the maintainer of the vblinden/favicons project. For privacy questions, open an issue on that repository.

Information we process

Depending on how you use the Service, we may process:

• Request data — domains you ask us to resolve, optional size parameters, timestamps, and aggregate request counts used for caching and the public leaderboard
• Technical data — IP address, user agent, and similar HTTP metadata used for security, rate limiting, debugging, and operating the Service
• Cached favicon assets — image files and related metadata (such as source URL, content type, and dimensions) retrieved from third-party websites
• Error and performance data — application logs and, when configured, error reports, traces, or profiles sent to our monitoring provider (Sentry)

We do not intentionally collect names, email addresses, payment details, or account profiles through the Service.

Why we process it

• Provide, cache, and serve favicon images
• Operate public features such as the leaderboard
• Enforce rate limits and prevent abuse
• Maintain security, reliability, and performance
• Diagnose errors and improve the Service
• Comply with legal obligations where applicable

Cookies and local storage

The public pages of the Service are primarily informational and do not depend on advertising cookies. The application stack may set a session cookie when Laravel’s web middleware runs. We do not use that session data to build marketing profiles.

Sharing

We may share information with:

• Infrastructure and hosting providers that run the Service
• Error and performance monitoring providers such as Sentry, when enabled
• Authorities when required by law or to protect the Service and its users

We do not sell personal information. Third-party websites contacted during favicon fetching receive standard HTTP requests from our servers and are outside this Privacy Policy.

Retention

Cached favicons and domain request counters are kept while useful for operating the Service and may be refreshed or removed over time. Rate-limit records are temporary. Logs and monitoring events are retained only as long as needed for operations, security, and troubleshooting, unless a longer period is required by law.

International transfers

The Service and its vendors may process data in countries other than your own. Where we use providers such as Sentry, their processing is subject to their own terms and safeguards.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal data, or to object to certain processing. Because the Service is largely anonymous and request-based, we may need enough information from you to locate relevant records. Contact us via GitHub Issues.

Children

The Service is not directed at children and is intended for general technical use.

Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do.