Privacy Policy

This Privacy Policy explains what hdply ("we") collects, why, and how it is used when you use hdply.com and its subdomains.

1. What we collect

• Account data — your email address, a hashed password, your interface language, and your plan. Collected when you sign up.
• Content — the HTML files you deploy, stored so we can serve your sites, plus a limited deployment history per project.
• Site analytics for creators — when someone visits a hosted site we process the visitor's IP address and browser user-agent transiently to count views and unique visitors. We store only daily aggregate counts and a one-way hash; raw IP addresses are not stored in analytics and hashes are deleted after 90 days.
• Trial deployments — a hash of your IP address, used only for rate limiting; trial sites and their records are deleted after one hour.
• Server logs — standard web-server logs kept for security and debugging, rotated on a short schedule.

2. Cookies and third-party services

• Session cookie — an essential, httpOnly cookie that keeps you signed in to the console. It is scoped so it is never sent to hosted user sites.
• Google Analytics / Tag Manager — usage analytics on hdply.com and the console (not on hosted user sites).
• Google AdSense — ads on our guide articles and trial result pages only. Google may use cookies to personalize ads; see Google's privacy policy.
• Paddle — our payment provider (merchant of record). When you buy Pro, Paddle collects your payment details under its own privacy policy; we never see your card number.
• Amazon Web Services — our infrastructure provider; data is stored in the AWS Seoul region.
• Amazon SES — used to send verification emails. We send transactional email only, no marketing email.

3. How we use data

To operate the Service (authentication, hosting, analytics dashboards), to prevent abuse (rate limiting, content moderation), to process payments, and to improve the product. We do not sell personal data.

4. Retention

Account data is kept while your account exists. Deployment history is capped per project. Visitor-analytics hashes are deleted after 90 days. Trial sites are deleted after one hour. When you delete a project, its files and history are deleted from storage.

5. Your rights

You can access and delete your projects at any time from the console. To delete your account and associated data, or to exercise any data-protection right available under your local law, contact us and we will act within a reasonable period.

6. Changes and contact

We may update this policy; the date above reflects the latest revision. Contact: product@keumbang.com.