Effective date: 29 September 2026
This page explains what data Onekey accesses and how people and platforms can ask us to stop.
What we access
Onekey returns data that is publicly available without logging in, from public web pages and public APIs of the source platforms.
What we do not do
- We do not access private accounts, private messages, protected or locked posts, or anything behind a login wall.
- We do not use logged-in sessions, stolen or shared credentials, or accounts belonging to other people to get data.
- We do not bypass authentication or paywalls, and we do not break into systems.
- We do not sell or offer "private" data lookups.
Some platforms let us reach public content through third-party fetching services. They only fetch pages that any visitor could see; they are not used to defeat login requirements.
Accuracy and freshness
Data is passed through as the source shows it. It may be stale, cached, incomplete or wrong. Items deleted at the source may remain in our cache for up to [DURATION] unless you ask for earlier removal.
Takedown and opt-out
Individuals. If data about you appears in Onekey and you want it removed, or you want us to stop returning it, use the abuse and takedown form or email hello@onekey.dev. Give us the platform and the profile or post URL so we can find it. We will check the request, purge cached copies, and add the item to a block list so it is not returned again. We aim to act within [7] days, and faster for safety issues.
Platforms and rights holders. If a platform or rights holder wants us to stop accessing certain data, or has a concern about our access, contact us through the same form or email. We will review promptly, and we will honour valid requests, including blocking a source or endpoint.
Legal requests. Send legal notices to [GRIEVANCE OFFICER] at [REGISTERED ADDRESS].
Customers
Customers must honour takedowns as set out in the Acceptable Use Policy. The Privacy Policy explains how we treat personal data in public sources.