Skip to main content

API Terms

Last updated: May 13, 2026

These API Terms ("Terms") govern your access to the Tabletop League REST API endpoints under /api/v1/me/* and the personal data export feature at /settings/data. By minting an API key or downloading your data, you agree to these Terms and the Acceptable Use Policy, in addition to the platform Terms of Service and Privacy Policy.

Permitted use

  • Personal scripts, dashboards, and spreadsheets that consume your own data.
  • Building tooling that integrates with your own workflow.
  • Backing up your own match history.

Prohibited use

  • Redistribution. You may not redistribute, resell, or publicly post data obtained via the API or export — including the masked opponent records that appear in your export.
  • Building competing platforms. You may not use the API or export as input for a service that competes with Tabletop League.
  • Scraping or de-anonymizing other users. The export masks opponent identities. You may not attempt to re-identify them, correlate them across exports, or aggregate exports from multiple users to reconstruct identity.
  • Automated mass-export. Subject to the rate and quota limits below. Circumvention attempts are grounds for revocation.

Rate limits and quotas

  • API rate limits are set on each issued key and are returned in the X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset response headers.
  • Data exports are limited to three (3) per 24-hour period.
  • The platform reserves the right to lower individual limits in response to abuse, with notification via the in-app notification system or email.

Data accuracy and warranty

Data is provided "as is." We make no warranty regarding its completeness, freshness, or fitness for any particular purpose. There is no service-level agreement for personal API availability.

Logging

API requests and export downloads are logged for security and record-of-processing purposes. Logs include timestamp, request route, response status, request size, and a hashed IP. Logs are retained for 90 days. See the Privacy Policy for details.

Termination

We may revoke any API key at our sole discretion if it is used in violation of these Terms or the AUP. Revocation is effective on the next request. Affected users are notified via in-app notification with the revocation reason logged. You may revoke your own keys at any time from /settings/data.

Personal data of others

Your export includes data about opponents you played. Opponent rows are masked: only display name and avatar URL are included; no email, social handles, or stable user IDs. You may not attempt to re-identify opponents or redistribute their masked data.

Choice of law

These Terms are governed by the laws of the State of Delaware, USA, excluding its conflicts-of-law principles.

Changes

We may revise these Terms. The current version string is shown in your key-mint flow at the time you accept. Continued use after notice of changes constitutes acceptance.