Privacy policy

Last updated: July 8, 2026. This policy describes the current public HypeDar site, account features, AdSense advertising, and optional Pro workflows.

HypeDar is a product by CodePawl.

Data we collect

When you create an account or sign in, we may store your email address, display name, authentication provider, password hash for email/password accounts, OAuth profile data provided by Google or GitHub, session state, and failed-login attempt metadata used for abuse protection.

When you use Pro features, we may store saved items, predictions, XP events, user stats, analysis requests, prompts you submit, generated reports, source metadata, quota usage, estimated and actual feature costs, and queue status.

Billing and providers

If paid checkout is enabled, we may store plan, subscription, entitlement, provider customer, and payment records needed to activate access, handle billing status, and reconcile provider events. Payment providers may process payment details under their own policies.

How we use data

We use data to authenticate users, provide public and Pro research features, enforce quotas, prevent abuse, operate billing, generate requested AI analysis, improve reliability, and respond to support or privacy requests.

AI model and provider disclosure

HypeDar uses AI-assisted processing for summaries, ranking explanations, opportunity labels, and Pro analysis reports. These AI features are powered by OpenAI models through HypeDar server-side workflows, combined with our own scoring rules, source metadata, and editorial constraints. HypeDar may change or add model providers as the product evolves, and we will update this disclosure when the production provider materially changes.

Do not submit sensitive personal data, confidential business secrets, regulated health data, financial account details, or other information you are not allowed to share when using AI analysis features.

Cookies and similar storage

HypeDar uses essential authentication cookies for session management and OAuth safety. HypeDar may also load Google AdSense advertising scripts and cookies so Google and its partners can serve, measure, and limit ads, including personalized ads where allowed by your settings and applicable law. You can review Google's advertising controls at Google Ad Settings and learn how Google uses data from partner sites at Google's partner sites policy. See the Cookie policy for details.

Sharing

We do not sell account data. We share data only with service providers needed to operate the product, such as hosting, authentication, queueing, storage, billing, AI model providers, and email providers when those integrations are enabled.

Your choices

You can choose not to create an account, avoid submitting sensitive prompts, sign out to clear active session access, and contact us to request access, correction, deletion, or export of account data where applicable.

Security and retention

We use signed HTTP-only session cookies, password hashing, provider secrets in private environment configuration, quota/abuse checks, same-origin mutation guards, provider webhook signatures, and generated-content sanitization. See the Security summary for the public control overview. We retain records while needed to provide the service, meet billing or security obligations, resolve disputes, or maintain operational logs.

Contact

For support, billing, account, or privacy questions, contact support@hypedar.dev.