heft.io
Sign in

Privacy Policy

TL;DR: Visitors aren't tracked as individuals. Account holders only give an email address and a name. Nothing is shared, sold, or used for advertising.

Visitors

You're not tracked as an individual by design. The analytics pipeline doesn't store raw IP addresses or full User-Agent strings, and doesn't use cookies for measurement. Visitor data is never shared, sold, or used for advertising or profiling.

The full details of what the analytics script stores are in the Tracking Policy.

Account holders

To hold an account, you need an email address – it's used for sign-in links and security notices. The app sets a first-party cookie to keep you signed in; clear it in your browser anytime.

You can delete your account and all associated data at any time. Deletion is permanent and no copies are retained.

Your rights

You can request a copy of the data held about you, ask for it to be corrected, or have it deleted. Contact requests are handled within a reasonable timeframe.

Retention

Your data is kept for as long as your account is active, or as needed to run the service. Beyond that, it's only retained where required to meet legal obligations, resolve disputes, or enforce these terms.

Subprocessors

Running the service involves a small number of subprocessors. The current list, with countries and use cases, is at Subcontractors.

Changes and contact

This policy is updated when the law or practice changes. If something material changes, you'll hear about it. Questions? Use the contact options on the site.

Last updated: May 2026

heft.io

Privacy-first Analytics hosted in the EU.

A project by sbstjn.com.

Documentation

  • Tracking API
  • Changelog

Help

  • FAQ
  • Contact
  • Status Phare badge

Legal

  • Privacy Policy
  • Tracking Policy
  • Terms of Service
  • Service Agreement
  • Data Processing
  • Subcontractors
  • Security

© 2026 heft.io — All rights reserved.

Made in the EU with ♥