Privacy Policy

Privacy Policy

Last updated: July 30, 2026

The short version — HoneyDB respects your privacy. We collect as little as possible, we never sell your data, and we only share it with the service providers we use to run HoneyDB, listed below.

What we collect

As little as possible, but:

• Web access logs. Like nearly every website, our servers log the IP address, user agent, and pages requested for every visit. We use these logs for security and to keep the site running.
• Form submissions. Any data you submit through a form on the site.
• Account information, if you log in — described next.

We do not run third-party analytics or advertising trackers on the site.

If you create an account

You can log in with GitHub, Google, X (formerly Twitter), or an email login link. When you do, we store the user identifier, email address, and name from the login method you chose. This data is only used for associating your identity with your HoneyDB account and email communications from HoneyDB.

• Google users — for users that log in via their Google accounts, the only scopes used are “profile”, “email”, and “openid”. The only data HoneyDB stores from your Google profile is the user identifier, email, and name.
• We also store the API keys we generate for you, and counters of your API usage, because that is how the service operates.

Cookies

If you log in, HoneyDB sets a session cookie so you stay logged in. It is not used to track you and it expires automatically. We set no other cookies.

Payments

Paid plans are billed through Stripe on Stripe-hosted checkout and billing pages. Your card details go directly to Stripe — HoneyDB never sees or stores your card number.

Third-party services

We never sell your data. To operate HoneyDB we use the following providers, which may process some of your data:

• Cloudflare — content delivery and site protection; all site traffic passes through Cloudflare, and its Turnstile widget protects the login and contact forms from abuse.
• GitHub, Google, and X (formerly Twitter) — sign-in (when you use the login page).
• Mailgun — sending email, such as email login links.
• Stripe — payment processing for paid plans.
• HubSpot — receives what you submit through the contact form.
• SumoLogic — log management.
• Slack — operational alerts to the HoneyDB team; error logs can include your IP address.

Honeypot data is different

HoneyDB’s purpose is publishing threat data collected from honeypot sensors — the IP addresses and traffic of hosts attacking those sensors. That data describes attacking machines, not site visitors or account holders, and it is published as threat intelligence through this site and the HoneyDB API.

How long we keep data

Logs are kept for a limited time for security and operations. Account data is kept for as long as your account is active. If you want your account data deleted, ask us via the contact form and we will delete it.

Questions and requests

For privacy questions, or to request deletion of your account data, please use the contact form.

Changes to this policy

If this policy changes, we will post the update on this page and update the date at the top.