Privacy Policy

Data we collect

• Account: email, username, display name, password hash (or your Google identifier if you sign in with Google), interface language.
• Profile, optional: avatar, bio, taste preferences.
• Your content: reviews, ratings, mixes, sessions, pantry, follows, favorites, reports.
• Age confirmation: a timestamp only ("18+ confirmed on such-and-such date"). We never collect your date of birth.
• Technical data: IP address, browser type, server logs — for security and diagnostics.

What we don't do

• we don't collect dates of birth;
• we don't sell personal data or pass it to advertisers;
• we don't use ad trackers or third-party advertising analytics;
• we don't send marketing emails without your consent.

Why we process data

• Running the service — account, content, feed, in-app notifications (basis: performing our agreement with you).
• Security, abuse prevention, and moderation (basis: our legitimate interest in protecting the community).
• Email notifications and push (basis: your consent; unsubscribe any time in settings).
• Complying with the law (basis: legal obligation).

Cookies

We use only cookies necessary to run the service: the session (sign-in), a signed age-confirmation marker (up to one year), and the language. Your theme preference is stored locally in your browser. There are no advertising or third-party analytics cookies.

Public and private

Your profile, reviews, and published mixes are visible to everyone — that is the point of the community. Pantry and session-history visibility is configurable: public, followers-only, or private. Blocking hides you from each other.

Who we share data with

We don't sell data. To run the service we use a limited set of processors:

• hosting in the European Union (Hetzner, Germany);
• error monitoring (Sentry) — receives technical reports without your email or name;
• Google — only if you sign in with Google;
• push notifications are delivered by your browser's push service (Google, Mozilla, or Apple);
• an email delivery service for transactional mail.

Data may be disclosed where the law requires it.

How long we keep data

Account data is kept while your account is active. After account deletion, personal data is deleted or irreversibly anonymized within 90 days; anonymized ratings may remain in aggregate scores. Moderation and security logs are kept as long as needed to protect the community and comply with the law.

Your rights

You have the right to know what data we process, get a copy of it, correct it, delete it, restrict processing, object to it, and withdraw consent.

Most data can be changed or deleted right in your settings; the pantry can be exported as CSV. For everything else, write to team@hookadex.com — we respond within a month.

If you believe we violate your rights, you can complain to the Ukrainian Parliament Commissioner for Human Rights or to your country's supervisory authority (for the EU — under the GDPR).

Security

Connections are protected with TLS, passwords are stored only as hashes, and data access is restricted. No system offers absolute guarantees, but we keep the risk surface minimal.

Children

HookaDex is an 18+ service and is not intended for minors. If we learn about an account of a person under 18, we delete it. Spot such an account — let us know.

Automated decisions

Recommendations (such as the discovery wizard) are suggestions based on community ratings and your preferences. They have no legal effects and don't restrict what you can do on the platform.

Changes and contact

We will announce material changes to this policy on the site or by email; the last-updated date is at the top of the page. Data questions: team@hookadex.com.