Cortex Gateway · Privacy & Data
Cortex Gateway privacy & data
Read from Cortex Gateway's own page on 2026-11-09. 15 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
The page states nothing on this.
Data categories
category: device
Standard web-server logs (IP address, user agent, requested URL)Read from Cortex Gateway's own page on 2026-11-09
Purposes
purpose: Delivering sign-in link
Delivering the link you asked for.Read from Cortex Gateway's own page on 2026-11-09
purpose: Operating OAuth 2.1 flow
Operating the OAuth 2.1 flowRead from Cortex Gateway's own page on 2026-11-09
purpose: Pseudonymized auditing
Demonstrating pseudonymized auditing (hashed identifiers, no raw email)Read from Cortex Gateway's own page on 2026-11-09
purpose: Security and operations
Standard web-server logs (IP address, user agent, requested URL) are kept for up to 14 days for security and operations, then rotated away.Read from Cortex Gateway's own page on 2026-11-09
purpose: Aggregate traffic statistics
Aggregate traffic statistics are derived server-side from those logsRead from Cortex Gateway's own page on 2026-11-09
Retention
scope: Web-server logsperiod: 14 days
Standard web-server logs (IP address, user agent, requested URL) are kept for up to 14 days for security and operations, then rotated away.Read from Cortex Gateway's own page on 2026-11-09
scope: Pending sign-in linkperiod: 15 minutes
Link expires in 15 minutes; the row is deleted within 1 dayRead from Cortex Gateway's own page on 2026-11-09
scope: Email addressperiod: 90 days
Deleted after 90 days without sign-in (with all tokens, sessions and consents)Read from Cortex Gateway's own page on 2026-11-09
scope: OAuth artifactsperiod: 7 days
Expired items removed within 7 days of expiry; all removed with the accountRead from Cortex Gateway's own page on 2026-11-09
scope: Gateway audit trailperiod: 90 days
Gateway audit trail Demonstrating pseudonymized auditing (hashed identifiers, no raw email) 90 daysRead from Cortex Gateway's own page on 2026-11-09
Residency
International transfers
The page states nothing on this.
Subprocessors
Data processing agreement
Deletion
route: Automatic daily job; or open an issue on GitHub for sooner removal
Deletion happens automatically (daily job). To have your demo account removed sooner, open an issue on GitHubRead from Cortex Gateway's own page on 2026-11-09
Data subject rights
The page states nothing on this.
Sale or sharing
stance: prohibited
No data is sold, shared or used for advertising.Read from Cortex Gateway's own page on 2026-11-09
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page