Privacy and personal data
Last updated 2026-11-07
This page describes what Hugsa Vakt reads, stores and sends – as precisely as we can.
We read only the public sources you choose. We store your subject identifier, your settings, a bounded content baseline and a check history. We do not sell data and do not use advertising or analytics tools.
What we store
We store only what is needed to provide the service:
- Your subject identifier (sub) from Hugsa.Auth, name, email and language/time zone.
- Your watches: address, mode, selector, keywords, interval and notification settings.
- A size-limited, normalized baseline of the extracted text and short evidence for changes.
- Check logs: outcome, HTTP status, duration and size – without raw HTML bodies.
What is read
We read only the sources you enter or choose from the directory.
- We respect robots.txt, public accessibility and limits published by the source.
- We do not go behind a login, paywall or CAPTCHA, and we do not follow links on the page.
- We send an identifying User-Agent with a support link, so a source can see who is reading.
How we store data
We store a bounded baseline of the extracted text, not raw HTML.
- The baseline is normalized and size-limited (at most 200,000 characters).
- We do not store images, scripts or whole articles.
- We keep a check history with outcome, size and duration – not the content of every check.
Email alerts
If you verify an email address and enable email alerts, we send a short message with a summary, the detection time and links. We do not send whole articles. You can disable email alerts in settings or with the unsubscribe link in every message.
Who receives data
We use only what the service needs:
- Hugsa.Auth for sign-in, when configured.
- An SMTP provider configured by the operator, for email alerts.
- When the service is deployed, it runs on Hugsa's own server at Hetzner in the EU.
Cookies
We use only necessary cookies:
- A sign-in cookie that keeps you signed in.
- An anti-forgery cookie that protects form submissions.
- Language and theme preferences (hugsa-lang, hugsa-theme).
We do not use analytics, advertising or tracking cookies.
How long we keep data
Changes are retained for 90 days and check logs for 30 days. The current comparison snapshot is retained while the watch is active. You can export or delete your data in settings.
Your rights
You can see, export and delete your data.
- Export all of your data as JSON in settings.
- Delete your account and all of your data in settings.
- Contact Hugsa Support if you have questions or need help.
Security
We protect against unsafe addresses, private networks and DNS rebinding, enforce size and time limits, and store only what is necessary. No service can promise complete security; we say so when something is uncertain.
Contact
Questions about privacy? Contact Support.
This statement is written to be precise and honest. It is not a claim about any specific legal provision, and it is updated when the service changes.