# API Policy

GGSight uses public sources only.

Allowed lookup paths:

- Official game/stat APIs where available.
- Tracker Network API where officially available and configured.
- Twitch API with a user-provided client ID and OAuth token.
- YouTube Data API with a user-provided API key.
- Public profile URL checks where allowed.
- Google/Bing search APIs if configured in future versions.

Not allowed:

- Aggressive scraping.
- Private or undocumented APIs.
- Stolen, shared, or leaked keys.
- Rate-limit bypass.
- Bot detection evasion.
- Hidden/private profile access.
- Collection of private personal information.

## Cache

Lookup results are cached locally for 7 days by default through stored `lookup_results`.

## Tracker Network

The MVP stores the Tracker API key but requires a game/platform-specific official endpoint template before making Tracker requests. This avoids guessing private or unstable endpoints.


