Privacy Policy
We collect the minimum personal data necessary to run the site and provide authentication.
What We Collect
- Account data: email, name, username, hashed password, role, profile details
- Session data: session token, created/expiry timestamps
- Security data: rate limit counters, lockout events, CAPTCHA results
How We Use Data
- Authenticate you and keep you signed in
- Protect the service from abuse (rate limiting, CAPTCHA, honeypot)
- Provide profile and account management features
Cookies
We use the following cookies:
- htwc_session — Authentication session cookie (httpOnly, Secure, SameSite=Strict). Expires after 24 hours.
- htwc_consent — Remembers that you acknowledged our cookie notice. Expires after 1 year.
We do not use advertising, analytics, or third-party tracking cookies.
Your Rights
- Access/Export: Request a copy of your account data
- Deletion: Request deletion of your account and associated data
- Correction: Update your profile information at any time
Data Retention
Account data is retained while your account remains active. Security logs (rate limits, lockouts) may be retained briefly for abuse prevention.
Contact
Questions or requests? Contact the site maintainer via the repository issues or provided support channels.