This page consolidates, in one place, the information the EU General Data Protection Regulation (GDPR) requires we make available: who the data controller is, the legal bases we rely on, how data may be transferred outside the EU/EEA, and how to exercise your rights. It supplements — and does not replace — our full Privacy Policy, which remains the primary document governing how we handle personal data.

Bin Search Lookup is the data controller for personal data processed in connection with the website and API, unless stated otherwise in a specific context.

We have not currently designated a separate EU Article 27 representative or a formal Data Protection Officer. For all EU/EEA data-protection inquiries, contact us directly using the details in the Contact section below.

Where GDPR applies, we rely on the following legal bases: contract performance (providing the service you signed up for), legitimate interests (such as security, fraud prevention, and service improvement), compliance with legal obligations (such as tax record-keeping), and your consent where required — for example, the Analytics and Session Recording cookie categories. See Privacy Policy — Legal Bases for more detail.

We may process data outside your jurisdiction, including in Canada, the United States, and — if you opt into the Analytics cookie category — with Google (which offers standard contractual clauses) and Yandex (Russia). Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms. See Privacy Policy — International Transfers.

• Access and portability: request a copy of your personal data.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion where permitted by law — you can also self-serve full account deletion from Settings.
• Restriction and objection: request limits on processing or object to certain processing.
• Consent withdrawal: where we rely on consent, you may withdraw it at any time via Cookie Preferences.

If you have an account, you can self-serve an export of your data or delete your account at any time from Settings, without contacting support. For all other requests, contact us using the information in the Contact section — we may ask you to verify your identity before responding.

Analytics and Session Recording cookies are off by default and only activate if you separately opt into each one. See our Cookie Policy for the full cookie table, or use "Cookie Preferences" in the site footer (or Settings, if you have an account) to change your choice at any time.

When you delete your account, your profile data and API keys are deleted immediately and cannot be recovered. Specific records with an independent legal retention requirement — invoices/billing records (kept per applicable tax law, currently 7 years) and records tied to an active fraud, abuse, or dispute investigation — are kept separately in an access-restricted store until that requirement lapses. See Privacy Policy — Data Retention.

If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority in the EU/EEA member state where you live, work, or where the alleged issue occurred. We would also appreciate the chance to address your concern directly first — contact us using the details below.

For any GDPR-related question or request: