**Short version:** We collect what we need to run the service. We don't sell your data. You can delete your account anytime.

## 1. What We Collect

**Account data:** Your email address and password (hashed: we never store it in plaintext). If you link a Telegram account, we store your Telegram user ID.

**Hunt configurations:** The descriptions, keywords, categories, and budgets you configure in your hunts. This is the core data we need to match listings to your preferences.

**Usage data:** Which alerts were sent, when hunts ran, and basic activity logs. Used to improve matching quality and debug issues.

**IP address:** Collected for rate limiting and abuse prevention. Not linked to your profile or sold.

## 2. What We Don't Collect

- Payment information (handled by Stripe: we never see your card number)
- Browser fingerprints or tracking cookies
- Any data from third-party sites beyond the public listing data we scan

## 3. How We Use Your Data

- **To operate the service** — run hunts, score listings, send alerts
- **To communicate with you** — account emails, alert notifications, service updates, and occasional product updates and offers (you can opt out anytime)
- **To prevent abuse** — rate limiting, spam detection
- **To improve matching** — aggregate, anonymized analysis of hunt performance

## 4. Who We Share Data With

We don't sell your data. We share it only with:

- **Google** — only if you use Google Sign-In. Google authenticates you on its side and shares your verified email address and profile name with us per its own policy. We never see your Google password.
- **Resend** — email delivery. They receive your email address to send alert emails.
- **Telegram** — if you link your account, your chat ID is used to deliver alerts.
- **Anthropic / LiteLLM** — your hunt description is sent to an LLM to score listings. Hunt configs may include keywords you've entered.
- **Law enforcement** — only if legally required.

## 5. Data Storage

Your data is stored on servers operated by the Hardware Hunter team, hosted in the United States. We use standard encryption in transit (HTTPS) and at rest for sensitive fields.

## 6. Cookies

We use a single httpOnly session cookie (`hh_session`) to keep you logged in. No third-party tracking cookies. No analytics cookies.

## 7. Your Rights

- **Access:** You can view your account data in your dashboard.
- **Deletion:** Delete your account from dashboard settings. Your email is anonymized and your hunts are removed within 30 days.
- **Correction:** Email us at [hello@hardwarehunter.io](mailto:hello@hardwarehunter.io) to correct any data.
- **Portability:** Email us and we'll export your hunt configurations.

## 8. Data Retention

Active accounts: data retained for as long as the account exists. After deletion: personal identifiers (email, Telegram ID) are anonymized within 30 days. Aggregated, anonymized usage data may be retained indefinitely.

## 9. Children

Hardware Hunter is not directed at children under 13. We don't knowingly collect data from anyone under 13.

## 10. Changes

If we make material changes to this policy, we'll notify registered users by email at least 14 days before the changes take effect.

## 11. Contact

Privacy questions or requests: [hello@hardwarehunter.io](mailto:hello@hardwarehunter.io).