Privacy Policy

HuntRule (huntrule.com) is the controller of the personal data described here. Reading the public catalog requires no account and collects nothing beyond ordinary server logs.

• Account data — when you sign in with Google we receive your name, email address and profile picture, and we store them with your account settings (timezone, display formats, an avatar if you upload one).
• Session data — a signed session identifier so you stay signed in, and the time you were last seen.
• Usage records — which rules your account has unlocked, notifications addressed to you, and, for paid accounts, subscription state.
• Messages — what you send through the contact form, with your name and email so we can reply.
• Consent records — which version of the Terms of Service and of this policy you accepted, and when.
• Newsletter — if you subscribe to catalog updates, your email address. Subscription is double opt-in: it only becomes active when you follow the confirmation link, and every issue carries an unsubscribe link.

Payment details never reach us: checkout and card handling happen entirely at our payment provider, and we store only the subscription state they report back.

We set a session cookie to keep you signed in and remember interface preferences such as theme. There are no advertising or cross-site tracking cookies.

To provide the service you asked for (account, plans, unlocks), to answer messages you send, to keep the service secure (rate limiting, abuse prevention), and to meet legal obligations such as billing records. We do not sell personal data and we do not use it for advertising.

Data is encrypted in transit, and stored on infrastructure that encrypts it at rest. It is processed by service providers acting on our behalf under their data processing terms:

• Cloudflare hosts the service; data is stored on Cloudflare's network (databases, key-value storage, object storage).
• Google provides sign-in; their handling of your Google account is governed by their own privacy policy.
• Our payment provider processes subscription payments as an independent merchant of record.
• Our email provider delivers transactional mail such as contact-form acknowledgements.

Account data is kept while the account exists — nothing is retained on a perpetual basis. Deleting your account from the dashboard settings removes the account row and everything that hangs off it — linked sign-ins, notifications, unlock records — and where a service provider holds related data on our behalf, the deletion is passed on to them too. Billing records may be retained where the law requires it. Sessions expire on their own within thirty days.

You can ask what we hold about you, have it corrected, or have it deleted — through the settings page for the parts you control directly, or via the contact form for the rest. If you believe we are handling your data unlawfully, you also have the right to complain to your local data protection authority.

When this policy changes materially, the version date above moves and you will be asked to accept the new version at your next sign-in before continuing.