Privacy Policy
Last updated: September 27, 2026
This Privacy Policy explains how Device Specs API ("DeviceSpecs", "we", "us"), operated by GTGroup and available at https://ds.gtgroup.dev, collects, uses, and protects information when you use our website, API, and related services.
1. Information We Collect
API usage data. Access to the DeviceSpecs API is provided through RapidAPI. Authentication, subscription management, and billing are handled by RapidAPI — we do not collect or store your payment information. We log request metadata (timestamp, endpoint, response status, latency) for rate limiting, abuse prevention, and service improvement.
Server logs. Like most websites, our infrastructure records standard technical data (IP address, user agent, requested URL) for security and operational purposes.
Cookies. This website does not use advertising or tracking cookies. Strictly necessary technical cookies may be set by our CDN and hosting infrastructure.
2. Google API User Data
Our internal content-sync application (Google Cloud project model-craft-504217-v4) uses Google OAuth 2.0 with read-only scopes (documents.readonly, drive.readonly) to fetch Google Docs documents authored by the site owner and publish them as articles on this website.
- Access is read-only — the application cannot create, modify, or delete any Google user data.
- Documents are processed automatically and stored as content files in our private repository; approved documents may be published publicly as blog posts.
- Google user data is never sold, shared with third parties, or used for advertising.
- OAuth tokens are stored as encrypted CI secrets and are never exposed in source code.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time at myaccount.google.com/permissions.
3. How We Use Information
- Provide, operate, and maintain the API and website
- Enforce rate limits and prevent abuse
- Monitor performance and improve response quality
- Comply with legal obligations
4. Data Sharing
We do not sell personal information. Data is shared only with the infrastructure providers needed to operate the service (RapidAPI for API distribution and billing, and our hosting provider).
5. Data Retention & Security
Request logs are retained for a limited period for operational purposes. We apply industry-standard measures (TLS encryption in transit, access controls, secret management) to protect data, though no method of transmission over the internet is 100% secure.
6. Your Rights
You may request access to, correction of, or deletion of personal data we hold about you by contacting us. If you have granted our application access to Google data, you may revoke it at any time via your Google account permissions page.
7. Changes to This Policy
We may update this policy from time to time. Changes take effect when posted on this page with an updated revision date.
8. Contact
Questions about this policy or your data: kupatadze2000@outlook.com