This Privacy Policy describes how ReconHunter ("ReconHunter", "we", "us", or "our") collects, uses, and shares information when you use our website and services at reconhunter.org and related subdomains (the "Service").
ReconHunter is operated by an individual developer. You do not need to enter into an agreement with a registered company to use the Service. For privacy questions or requests, contact us at the email below.
1. Information we collect
Account information: When you register or sign in, we process your email address and authentication credentials through our identity provider (Supabase). If you use Google or GitHub sign-in, we receive profile information those providers share with us (such as email and public profile identifiers) according to your provider settings.
Billing information: If you subscribe to a paid plan, payment processing is handled by Stripe. We receive subscription status, customer identifiers, and limited billing metadata from Stripe. We do not store full payment card numbers on our servers.
Usage and technical data: We collect information needed to operate and secure the Service, such as IP address, browser type, device and session identifiers, pages and API routes accessed, timestamps, and error or performance logs.
Cookies and similar technologies: We use cookies and local storage for authentication sessions, language preference, and security (for example Cloudflare Turnstile on registration). See Section 5.
Communications: If you email us, we keep the content of your message and contact details to respond and maintain a record of support.
2. How we use information
Provide and maintain the Service, including asset intelligence views, account management, and subscriptions.
Authenticate users, prevent fraud and abuse, and enforce access controls.
Process payments and manage billing through Stripe.
Improve reliability, performance, and security (including debugging and aggregated analytics).
Comply with legal obligations and protect our rights and users.
Send service-related messages (for example account verification or billing notices). We do not sell your personal information.
3. Legal bases (EEA/UK users)
Where applicable, we rely on: performance of a contract (providing the Service you signed up for); legitimate interests (security, fraud prevention, improving the Service); consent (where required, for example optional marketing if we offer it in the future); and legal obligation.
4. How we share information
Service providers: We use subprocessors that process data on our behalf, including Supabase (authentication and database), Stripe (payments), Cloudflare (bot protection), and hosting/infrastructure providers. They are permitted to process data only to provide services to us and subject to their own privacy terms.
Legal and safety: We may disclose information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or the integrity of the Service.
Business transfers: If the Service or its assets are transferred (for example a sale or merger), your information may be transferred as part of that transaction, subject to this Policy.
We do not sell or rent your personal information to third parties for their marketing.
5. Cookies and storage
Essential cookies and storage are used to keep you signed in, remember preferences (such as language), and protect forms from abuse. You can control non-essential cookies through your browser settings; disabling essential cookies may prevent you from using signed-in features.
6. Data retention
We retain account and subscription data while your account is active and for a reasonable period afterward for backup, legal, and dispute resolution purposes.
Logs and security records are kept for a limited period appropriate to security and operations, then deleted or aggregated.
You may request deletion of your account by contacting us; some data may be retained where required by law or for legitimate business needs (for example billing records).
7. Security
We use technical and organizational measures designed to protect information, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability or to withdraw consent where processing is consent-based.
To exercise these rights, email us at the contact address below. You may also lodge a complaint with your local data protection authority.
9. International transfers
We and our providers may process information in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) offered by our providers.
10. Children
The Service is not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be notified through the Service or by email where appropriate.
12. Contact
Privacy inquiries and data requests: whynotkeke@gmail.com
Service name: ReconHunter