Privacy policy

Last updated July 5, 2026. This policy explains how Hardenly ("we") processes personal data under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

What we collect

Account data: username, email address, and a hashed password. Activity data: items you track or complete, comments, ratings, and followed categories. Technical data: truncated IP addresses and anonymous, cookieless-first analytics. We never sell personal data and we use no third-party advertising trackers.

What is public and what is private

Your username, comments, ratings, overall completion percentage, and followed categories are public on your profile. Your email address is always private. Your detailed assessment dashboard is visible only to you and site administrators.

Legal bases

We process account and activity data to perform our contract with you (GDPR art. 6(1)(b)), security logs under legitimate interest (art. 6(1)(f)), and optional analytics only with your consent (art. 6(1)(a)) collected via the cookie banner.

Your rights (GDPR)

You can access, rectify, or erase your data (art. 15-17), receive an export in a portable format (art. 20), and object to or restrict processing (art. 18, 21). Email infoverse.team@gmail.com — we respond within 30 days. You may also lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA)

You have the right to know, delete, and correct personal information we hold, and the right to opt out of sale or sharing. Hardenly does not sell or share personal information as defined by the CCPA. Submit requests to infoverse.team@gmail.com. We do not discriminate against users who exercise their rights.

Retention and deletion

Account data is kept while your account is active. Deleting your account permanently removes all personal data within 30 days; comments may remain in anonymized form. Contact-form data is deleted after the request is resolved.

Cookies

Strictly necessary cookies (sign-in session, CSRF protection, theme preference) are always on. Analytics runs only after consent and is off by default for EU visitors. See the cookie policy.

Contact

Data controller: Hardenly.net. For any privacy matter, contact infoverse.team@gmail.com.