Hearof / Legal
Privacy Policy
How we collect, use, and protect information on Hearof.
Last updated September 29, 2026
This Privacy Policy explains how Hearof ("we", "us", or "our") handles information when you use hearof.dev and related services (the "Service").
1. Information we collect
- Account data — name, email address, and authentication details (including hashed passwords or OAuth identifiers if you sign in with Google).
- Workspace content — organizations, changelog entries, settings, and assets you upload (such as cover images).
- Usage data — aggregated, non-identifying widget events (for example view/open/click counts). We do not intentionally collect personal information through the public widget.
- Technical data — IP address, browser type, and basic device information needed to operate authentication, security, and reliability.
2. How we use information
- Provide, maintain, and improve the Service
- Authenticate users and secure accounts
- Publish content you choose to make public (changelogs and widget feeds)
- Communicate about the Service (transactional email, support)
- Detect abuse, fraud, and violations of our policies
3. Public content
Content you mark as published on a public changelog, and data returned by the public widget API for an enabled workspace, is visible to anyone with the link. Drafts and posts dated in the future are not exposed on public endpoints.
4. Sharing
We use infrastructure providers (for example hosting, database, and authentication-related services) to run Hearof. They process data only to provide their services to us. We do not sell your personal information.
5. Cookies and sessions
We use cookies and similar technologies for signed-in sessions and essential app functionality. The embeddable widget does not rely on third-party tracking cookies across host sites.
6. Data retention
We retain account and workspace data while your account is active. You may request deletion by contacting us. Backups may persist for a limited period after deletion.
7. Security
We take reasonable measures to protect information, including encrypted transport and hashed passwords. No method of transmission or storage is completely secure.
8. International transfers
The Service may be hosted or processed in countries other than where you live. By using Hearof you understand that information may be transferred to those locations.
9. Your choices
- Update account details from the dashboard where available
- Unpublish or delete posts and workspaces you control
- Contact us to request access, correction, or deletion of personal data we hold about you
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from children.
11. Contact
Questions about this policy: hearof@vblinden.dev.