Privacy policy

Operator and scope

apipentest.net is an educational resource operated by SEQ SIA (OffSeq), registration number 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia. The site has no user accounts, no newsletter, no contact form and no comments.

The interactive tools

The scope estimator and the OWASP API Security Top 10 self-check are processed entirely in your browser. The site does not send your selections or their results to OffSeq, does not save them to local storage, and does not add them to outbound links. The tools keep your choices in page memory only, and they are gone when you close the tab. They are educational and they do not inspect your accounts, your infrastructure or your API.

Technical requests and traffic measurement

Serving a page through Cloudflare involves technical request data, including an IP address, browser headers, the requested URL and the request time. These data support delivery, security and operation of the site.

The site sends page views and clicks on OffSeq service and contact links to our self-hosted Plausible service at in.ainalytic.net. Events contain the site domain, the public page address, limited campaign parameters and the referring site’s origin when one is available. A link-click event adds only the destination path and a static placement label such as header or guide. Tool selections and results are never included. The application sets no analytics cookies and no persistent visitor identifier; the collector receives technical network information with the request. Cookieless measurement is still data processing.

Measurement is disabled when the browser signals Do Not Track or Global Privacy Control, when this site’s local-storage preference plausible_ignore is true, and for previews, local development and recognized automation. OffSeq links may carry static referral labels identifying this resource and the link placement; those labels never contain tool answers.

Purpose, legal basis and retention

We use technical request data to operate and secure the site, and page-view and link-click statistics to understand how the resource is used and how much interest there is in OffSeq services. The operator’s stated legal basis for both purposes is legitimate interests under Article 6(1)(f) GDPR. Hosting and infrastructure providers process requests on our behalf; the analytics service is self-hosted. Data are kept only as long as needed for those purposes and any applicable legal obligation. The operator’s privacy policy explains its retention criteria, providers and transfer safeguards.

Contact and external links

If you email support@offseq.com, we receive the address, the message and anything else you choose to include, so that we can reply. Correspondence is retained while it is needed to handle the enquiry or the business relationship. OffSeq links and the sources cited on this site take you to third parties with their own privacy notices.

Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction or portability, and you may object to processing. Contact support@offseq.com. You may also complain to Latvia’s Data State Inspectorate or to the supervisory authority where you live or work. The cookie and browser-storage notice describes what is and is not stored in your browser.