Privacy Policy

This policy explains what personal data Hook.Notifier collects, why, and what rights you have over it. It is written to be read, not to hide things. Hook.Notifier is a free notification service operated by Minimal Roleplay, 6 Boulevard de l'Espérance, 14123 Cormelles-le-Royal, France (the "data controller").

Hook.Notifier lets you send yourself a native push notification from any HTTP request. To do that we need very little about you, and we keep it that way.

What we collect

We only collect what the service needs to work.

• Account details. Your email address, first name and last name, and a password that we store hashed (never in clear text). These identify your account and let you sign in.
• Your hook and notifications. The notifications you send yourself (their title, body, tags, and any content you include) are stored so they appear in your inbox. Your personal hook identifier and key belong to your account.
• Push token. When you install the mobile app, a device push token is stored so a notification can reach your phone. It is provided by Firebase Cloud Messaging (Google). Removing the app or deleting your account removes it.
• Technical logs. Standard server logs (such as IP address and timestamps) generated when your requests hit our servers, kept for security and abuse prevention.

We do not use analytics or tracking cookies, we do not build advertising profiles, and we do not sell or rent your data to anyone.

Why we process it, and the legal basis

• To provide the service (deliver your notifications, run your inbox, sign you in): performance of the contract between you and us.
• To send account emails (email verification, password reset): performance of the contract.
• To keep the service secure (prevent abuse, rate limiting, logs): our legitimate interest in operating a safe service.

Who we share it with

We use a small number of processors, each only for a specific technical task:

• Firebase Cloud Messaging (Google) to deliver push notifications to your device.
• Mailjet to send transactional emails (verification and password reset).
• Amazon Web Services (S3) to store files such as images you attach to a notification.

These providers process data on our behalf and only as needed to deliver their part of the service. We never share your data for marketing purposes.

Cookies

The website uses a single essential cookie: the session token that keeps you signed in to your dashboard. It is strictly necessary for the service to function and is not used for tracking. Because of that, no consent banner is shown. We do not set analytics or advertising cookies.

How long we keep it

We keep your account data for as long as your account exists. Your notifications stay in your inbox until you delete them or delete your account. Security logs are kept for a limited period, then removed. When you delete your account, we delete your account, your notifications, and your push token.

Deleting your account

You can delete your account at any time, and you do not need the mobile app to do it. Sign in to your dashboard on the website, open Account settings, and use "Remove my account". You can also do it from the mobile app in the same settings.

Deletion is immediate and permanent: it removes your account, the notifications tied to it, and your device push token. There is no way for us to recover a deleted account, so make sure that is what you want.

Sign in to delete your account

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct it if it is inaccurate;
• delete it (you can do this yourself by deleting your account);
• restrict or object to certain processing;
• receive your data in a portable format.

Most of these you can exercise directly from your account. You may also lodge a complaint with the CNIL, the French data protection authority, if you believe your rights have not been respected.

Data location and transfers

Our servers are operated within the European Union. Some processors listed above (such as Google and Amazon) may process data outside the EU. When they do, they rely on appropriate safeguards recognised under EU law, such as the European Commission's standard contractual clauses.

Children

Hook.Notifier is not directed at children under 16. We do not knowingly collect data from them. If you believe a child has created an account, delete it from the account settings.

Changes to this policy

We may update this policy as the service evolves. When we make a meaningful change, we update the date at the top of this page. Continuing to use Hook.Notifier after a change means you accept the updated policy.