Privacy Policy
This policy explains what Hootmix, run by [legal entity name and address], collects and why.
What we collect
From account holders: name, email address, password hash, and sign-in sessions. If you sign in with Google, we also keep your Google account's identifier and email.
From people who open a short link:
- Raw IP address. We store it to show location reports, to protect against abuse, and to count unique visitors.
- Browser and device details, the referring site, language and campaign parameters.
- The
hm_vidcookie, which recognizes a returning visitor.
We keep visit data for the analytics history of the workspace owner's plan, then delete it. Deleting a workspace removes its visit data after 30 days.
Who we share it with
| Provider | Why |
|---|---|
| Mailgun | Sending email |
| Midtrans, PayPal and crypto payment providers | Taking payments |
| Google reCAPTCHA | Stopping bots, when turned on. Google may set its own cookies. |
| Google sign-in | Signing in, when you choose it |
| Google favicon service | Showing a site's icon while you create a link. It receives the destination's hostname. |
| ipwho.is and ipapi.co | Finding a visitor's country and city from their IP address |
Workspace owners
Workspace owners decide where their links go, and see analytics about their visitors. They're responsible for their own use of that data, including any pixels or contact forms they add.
Your rights
You can see and correct your account details in My account, and delete your account. To ask anything else about your data, write to [contact email].
[Rights, deadlines and breach notice under UU PDP 27/2022 and PP 33/2026, and any GDPR terms, to be written by a lawyer.]