Last updated: October 14, 2026
Burnline (“we”) provides LLM API spend analytics. This policy explains what data we collect and how it is used.
When you sign in we store your authentication identifiers (email, OAuth subject IDs) via Supabase Auth so we can maintain your session and subscription entitlement.
Session and management API keys you paste for day-to-day Cockpit use are stored only on your device (Secure Store / keychain). They are sent directly to the provider (e.g. OpenRouter) to fetch your usage data and are not uploaded to Burnline servers for general sync.
If you enable Pro remote burn spike alerts, you may upload a dedicated OpenRouter monitor key. That key is encrypted on our servers and used only to sample burn rate and send push notifications when velocity spikes abnormally. You can disable remote monitoring or revoke the key in OpenRouter at any time. Disabling remote alerts deletes the stored monitor key and related samples from our systems.
When you grant notification permission, we may store an Expo push token so we can deliver burn spike alerts to your device.
The free web forecaster runs entirely in your browser. If you paste an OpenRouter session key, it is stored only in browser sessionStorage (or optionally localStorage if you choose “Keep until I clear”). The page calls OpenRouter APIs directly from your browser. Burnline does not operate a key proxy and does not receive your key on our servers. Clear the key anytime with Disconnect / clear. Prefer limited session keys; do not paste management keys into the forecaster or public channels.
Burnline caches public OpenRouter ecosystem rankings on our servers so signed-in users can browse platform-wide stats without connecting a personal key.
Subscriptions are processed by Apple or Google. We use RevenueCat to verify entitlements. We do not receive or store your full payment card details.
We do not sell personal information. We do not use third-party advertising or cross-app tracking SDKs. The static marketing site does not load analytics SDKs that receive your OpenRouter key.
You can delete your Burnline account in Settings → Delete account. This removes your auth user, push tokens, and any Pro monitor-key alert data from our systems. Manage or cancel App Store subscriptions separately in your Apple ID settings. On the web forecaster, use Disconnect / clear to remove any key from browser storage.
Questions: hello@burnline.dev