Privacy
What we hold, why, and how to get rid of it.
Last updated 8 September 2026
Who is responsible
Fotis Gkogkos, Mathildenstraße 5, 80336 München, Germany, is the controller of your personal data. Contact: support@halfsent.com.
What we collect, and why
Your email address. So you can sign in and reset your password. It is never shown to anyone and never attached to anything you write. Legal basis: performing our contract with you.
Your username and password. Your username is the name shown on entries you choose to publish. Your password is stored only as a cryptographic hash, so we cannot read it. Legal basis: performing our contract with you.
What you write. Private entries are readable by your account. Entries you choose to share are readable by anyone once drawn, and may also be shown on Halfsent’s own accounts on other platforms, such as Instagram — see below. Legal basis: performing our contract with you.
Technical logs. Our hosting provider records IP addresses and timestamps for a limited period. We do not use them to build any profile of you. Legal basis: our legitimate interest in keeping the service secure and working.
How many people visit. Our host counts page views so we can see whether the site is being used. It is cookieless and aggregate: it does not follow you to other sites, does not build a profile, and is never connected to your account or to anything you write. Legal basis: our legitimate interest in knowing whether the site works.
What you send us through the feedback form. Whether it is about the site or about something published on it, we keep what you sent so we can act on it. The form has an optional field for an email address. Leave it empty and the message stays anonymous, or fill it in and we use it to reply to that message and nothing else. Legal basis: our legitimate interest in keeping the site safe and working.
What we do not collect
No real name. No phone number. No date of birth. No contacts. No profile photo.
No advertising trackers, no analytics that follow you between sites, no cookies beyond the one that keeps you signed in.
We do not sell data. There is no arrangement under which anyone pays us for access to it.
Where it is stored
On servers in the European Union, provided by Supabase, who process data on our instructions under a data processing agreement.
Password reset emails are sent through the same provider.
The site itself is hosted by Vercel, who also provide the visitor counts described above and record the technical logs.
Entries shown on other platforms
An entry you send to the pool may also be shown on Halfsent’s own accounts on other platforms, such as Instagram, to bring people back to the site. Only entries sent on or after 8 September 2026 are used this way. Nothing you keep private ever leaves this site.
Posting an entry there means sending it to Meta Platforms Ireland, who host it and may transfer it to the United States under the European Commission’s adequacy decision for the EU–US Data Privacy Framework. Once it is posted, anyone can see it, save it and share it further, and Meta applies its own terms to it. Legal basis: your consent, given when you choose the pool, which you can withdraw at any time by deleting the entry.
Deleting an entry removes it from this site immediately. A post of it on one of our accounts is not removed automatically, because deleting here tells us nothing about which post it belonged to. Ask us through the feedback form, say which entry it was, and we will take that post down. Copies other people already made — screenshots, shares, reposts — are outside our reach, and no takedown can recall them.
How long we keep it
Your entries and account stay until you delete them.
Entries you shared but which were never drawn stop being eligible after fourteen days. They remain in your history until you remove them.
Technical logs are kept for a short period as set by our hosting provider, then deleted.
Deleting your account deletes your entries, including published ones.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on legitimate interest.
You can delete your account and everything in it yourself, without asking us.
Write to us at the address above and we will respond within one month.
You can also complain to a data protection authority. In Germany that is the authority for the state we operate in. You can also complain to the authority where you live.
Children
Halfsent is not for anyone under 18. If we learn that an account belongs to someone younger, we will delete it.
Changes
If this policy changes in a way that matters, we will say so on the site before it takes effect.