Privacy Policy

Your email — only if you enter it in a signup form. We use it to send the weekly digest and game alerts you asked for. That’s it.

Anonymous usage — basic, non-identifying analytics so we can see what’s useful: the page visited, the referring link, a random session id, which link brought you, and the browser’s user-agent string. None of it is tied to your name or email.

A pseudonymous network identifier — we do not store your IP address. We store a one-way HMAC digest of it, computed with a secret key that is never stored alongside the data, so the original address cannot be recovered from what we keep. We use it for one purpose: telling automated traffic (crawlers and bots, which are the large majority of what reaches this site) apart from real readers, so our own numbers mean something. The key rotates every calendar month, which means the identifier for a given network changes monthly and cannot be linked across those periods.

Push notifications — if you tap “Enable notifications,” your browser gives us an anonymous subscription token (not personal information) so we can send alerts. You can turn it off any time in your browser.

We do not collect payment details on the free product, and we don’t run third-party advertising or cross-site tracking.

To send the emails and alerts you signed up for, to understand aggregate traffic, and to keep the service running and secure. We do not sell, rent, or trade your personal data, and we don’t share it except with the infrastructure providers below who process it on our behalf.

We use a small set of trusted providers strictly to run the product: Supabase (database hosting), Railway and Vercel (application hosting), and Resend (sending the weekly email). They process data only to provide those services.

Unsubscribe — every email has a one-click unsubscribe link. You can also reply and ask us to stop.

Delete your data — every email has a “Delete my data” link that permanently removes your email from our systems, or email thehypewindow@gmail.com and we’ll erase it.

Access — want to know what we hold about you? Email us and we’ll tell you.

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA) you may have additional rights; email us and we’ll honor them.

We keep your email until you unsubscribe or ask us to delete it. Push subscription tokens are removed as soon as they expire or you disable notifications.

Anonymous usage analytics — including the pseudonymous network identifier — are deleted automatically after 365 days. That deletion is a scheduled job that runs daily and reports what it removed; it is not a manual promise. This page has said “about 12 months” since launch, but until August 2026 nothing in the software actually did it. We implemented the purge rather than quietly drop the commitment.

The public site sets no advertising or tracking cookies. The only cookie we set is a secure, http-only session cookie used to log operators into the internal admin dashboard — it never touches the public experience.

Hype Window is not directed at children under 13, and we don’t knowingly collect their personal information.

If we update this policy, we’ll change the date at the top. Material changes will be made clear.

Questions, requests, or anything privacy-related: thehypewindow@gmail.com.