$hackrbio

Privacy Policy

Last updated 31 August 2026

The short version

We collect the minimum needed to run the product. We do not sell your data, we do not run advertising trackers, and the analytics we provide for your page are cookie-free and cannot identify individual visitors.

What we collect about you (the account holder)

From X, once at signup: your name, username, profile image, bio and profile URL. We never post on your behalf and never read your direct messages.

From you: your email address, the content you put on your page, and your custom domain if you add one.

From Dodo Payments: your subscription status and billing history. We never see or store your full card number.

Automatically: login timestamps and basic security logs.

What we collect about visitors to your page

We record page views and link clicks so we can show you analytics. For each view we store the time, the page, the referring site, the country, region and city derived from the network request, and a coarse device, browser and operating system category.

We do not use cookies for analytics. A random session identifier is held in the browser’s sessionStorage and disappears when the tab closes.

We never store visitor IP addresses. To count unique visitors we compute a one-way hash of the IP address, the browser user-agent, the page and a secret salt that we rotate every 24 hours. The raw IP address is discarded immediately and is never written to our database. Once the salt rotates, yesterday’s visitors cannot be linked to today’s.

Data that visitors give you directly

If you add a form or an email capture block, the submissions belong to you. We store them so you can read and export them. We do not email your subscribers, market to them, or use their addresses for anything other than delivering them to you.

Who we share data with

Only the vendors needed to run the service: Vercel (hosting and file storage), Neon (database), Dodo Payments (payments), Resend (transactional email) and X (sign-in). We do not sell personal data to anyone, ever.

How long we keep it

Account and page data: for as long as your account is active. Raw analytics events: 90 days, after which only aggregated daily totals remain. Cancelled accounts: page taken offline immediately, all data permanently deleted 30 days later.

Your rights

You can access, correct, export or delete your data at any time from your dashboard, or by emailing ubergeekady@gmail.com. If you are in the UK, EU or California, you have the rights granted by UK GDPR, GDPR and CCPA respectively — including the right to complain to your local data protection authority.

Contact

ubergeekady@gmail.com — a real person reads and replies.