Privacy

This page explains what data the Apira website at apira.dev handles, including the demo search on the home page. It does not cover the Apira API or the dashboard.

The website

The site is hosted by Vercel and served through Cloudflare's network, which receive the standard details sent with every page request, such as your IP address and browser type. The site sets no cookies and runs no analytics or advertising scripts.

Bot protection by Cloudflare Turnstile

The demo search uses Cloudflare Turnstile to check that searches come from a person rather than an automated script. Turnstile runs invisibly: it loads when you click into the search box or pick an example search, and Cloudflare collects signals from your browser to make the check. Cloudflare's handling of this data is described in the Turnstile Privacy Addendum.

When you search, our API sends the Turnstile token and your IP address to Cloudflare to confirm the check. Our API at api.apira.dev is also served through Cloudflare's network, so Cloudflare handles every demo request, including your search text.

How a search is run

To answer a search, we send its text to:

• OpenRouter, which passes it to the provider of our embedding model to turn it into a vector (a list of numbers that represents its meaning);
• Voyage AI, which ranks the matching repositories against your search.

The vector, not your text, is then matched against our repository index, hosted by Pinecone. Our API and its cache run on Railway.

What Apira keeps

• Logs. Our logs for a demo request record its outcome, response time, number of results and a salted hash of your IP address. Logs never record your IP address itself, your search text or the Turnstile token.
• Rate limits. To limit how often each visitor can search, your IP address (for IPv6, its /64 network) is held in our rate-limit counters. They are deleted automatically 24 hours after your last demo request.
• Cache. Search text, its vector and its results are cached for up to 24 hours so repeated searches are fast. The cache is not linked to your IP address or Turnstile token.

We do not sell this data or use it for advertising.

Contact

If you have questions about this page or your data, email hello@apira.dev.

Last updated 8 October 2026.