Privacy Policy

We collect the minimum personal data necessary to run the site and provide authentication.

What We Collect

• Account data: email, name, username, hashed password, role, profile details
• Session data: session token, created/expiry timestamps
• Security data: rate limit counters, lockout events, CAPTCHA results

How We Use Data

• Authenticate you and keep you signed in
• Protect the service from abuse (rate limiting, CAPTCHA, honeypot)
• Provide profile and account management features

Cookies

We use the following cookies:

• htwc_session — Authentication session cookie (httpOnly, Secure, SameSite=Strict). Expires after 24 hours.
• htwc_consent — Remembers that you acknowledged our cookie notice. Expires after 1 year.

We do not use advertising, analytics, or third-party tracking cookies.

Your Rights

• Access/Export: Request a copy of your account data
• Deletion: Request deletion of your account and associated data
• Correction: Update your profile information at any time

Data Retention

Account data is retained while your account remains active. Security logs (rate limits, lockouts) may be retained briefly for abuse prevention.

Contact

Questions or requests? Contact the site maintainer via the repository issues or provided support channels.