PRIVACY

1. Who is responsible

The controller of your personal data is Happost (happost.com). For any privacy question or request, use the contact form.

2. What we collect

Account data

• Email address, username, a salted hash of your password (never the password itself), language, country (derived from your connection when you sign up), whether your email is verified, and whether you agreed to receive the weekly email.
• For affiliates: your application, profile text, profile picture, approval status, and any rule violations recorded on the account.

Content you publish

• Items, photos, stories, comments, reviews with photos, polls, collections, reactions, saved items, subscriptions, match votes, ratings and reports. Most of this is public and shown with your username. Saved items, your reports and your notification settings are not public.

Technical data

• When you use the site, our hosting provider processes your IP address, browser type and the pages requested in order to deliver the site and keep it secure.
• Login sessions, short-lived counters that limit repeated attempts (for example failed logins), and, if you switch on push notifications, the push address issued by your browser.
• Searches made on the site, stored with the language and, if you are logged in, your account.

Click statistics

• When you follow a link to a shop we record the item, the time, your country, whether the device is a phone or a computer, and the language of the page. We do not store your IP address. We store only a one-way hash of it that is combined with the date and therefore changes every day; it lets us avoid counting the same click twice, and we do not use it to identify you.
• If you are logged in, the click is also linked to your account. This is how Happost knows that you may vote on the match score of that item and post a verified review of it.
• Page-view counts are kept only as daily totals, without any link to a person.

3. Why we use it, and the legal basis

• To provide the service you signed up for (performance of a contract): creating and securing your account, showing your content, subscriptions, notifications, verified reviews and match scores.
• To keep Happost safe and honest (our legitimate interest, and legal obligations where they apply): moderation, checking text for prohibited promotion, handling reports, preventing abuse and fake reviews, counting clicks and producing statistics.
• To send you the weekly email and push notifications (your consent): only if you switch them on. You can withdraw consent at any time in your settings; this does not affect what was done before.
• To send service emails such as email verification and password reset (performance of a contract).

We do not sell personal data, we do not show third-party advertising, and we do not use your data for automated decisions that have legal or similarly significant effects on you. Automated checks can hold content for review; a person can always review the outcome on request.

4. Who receives data

• Cloudflare (hosting, content delivery, database, image storage, security, and the text-generation service used to draft blog articles) processes data on our behalf.
• Our email delivery provider (currently Resend) receives your email address and the content of the emails we send you.
• Your browser’s push service (for example Apple, Google or Mozilla) delivers push notifications if you switch them on. The push message itself carries no content; the text is fetched from Happost by your device.
• Google Fonts: the typefaces used on the site are loaded from Google’s servers, which means your browser sends your IP address to Google when a page loads.
• The shop you visit: when you follow a link to Hacoo or YepExpress you leave Happost and that shop’s own privacy notice applies. We do not pass your account details to the shop, and the link does not tell the shop which Happost page you came from.
• Authorities, when the law requires it.

Some of these providers process data outside your country, including outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the European Commission’s standard contractual clauses or an adequacy decision.

5. How long we keep it

• Account data and your content: until you delete the content or your account. After deletion, copies may remain in backups for a short time.
• Click records: 400 days, then they are deleted. Daily totals without personal data are kept longer.
• Login sessions: until you log out or the session expires. Email verification and password-reset tokens: until they are used or expire. Attempt counters: about one day.
• Records of rule violations and moderation decisions: for as long as the account exists and as long afterwards as needed to prevent closed accounts from returning or to meet legal obligations.

6. Your rights

Under data protection law, in particular the GDPR where it applies, you have the right to:

• access your data and receive a copy of it;
• rectify data that is wrong or incomplete;
• erase your data;
• data portability, that is, to receive the data you provided in a commonly used, machine-readable format;
• restrict or object to processing that is based on our legitimate interests;
• withdraw consent at any time for the weekly email and for push notifications.

Most of this can be done directly in your settings: you can change your details, switch emails and notifications on or off, download your data and delete your account there. For anything else, use the contact form; we answer within one month. You also have the right to complain to the data protection authority of the country where you live or work.

7. Cookies

• Happost sets one strictly necessary cookie: the session cookie that keeps you logged in. It is set when you log in and removed when you log out or when it expires. Because it is necessary for the service, it does not require consent.
• We use no advertising cookies, no tracking cookies and no third-party analytics cookies.
• If you install Happost on your phone or switch on notifications, your browser stores a small service worker file and an offline page on your device. They contain no personal data.

8. Children

Happost is not intended for anyone under 18. We do not knowingly collect data from minors; if you believe a minor has created an account, tell us through the contact form and we will remove it.

9. Changes

We may update this notice when the service or the law changes. The date at the top shows the latest version, and we tell registered users about significant changes. See also the Terms of use.