title: Protecting API calls from being exposed to third parties
body: <p>Recently I've created a web app which I would like to protect from people who try to get access to the data I use. So think about sensitive information that normally no one would be able to get access but me.</p>
  <p>Right now I'm making a JavaScript <code>fetch</code> request to a <code>get_data.php</code> file in which I make a <code>echo(file_get_contents(https://thirdpartyapi.com))</code>.</p>
  <p>The thing is that someone is stealing all this information through front-end I guess, since on the <code>get_data.php</code> I request some cookies for the requests to be executed.</p>
  <p>How would I be able to protect such attempts of stealing my data?</p>