Privacy
What we hold, why, and how to get rid of it.
Last updated 30 August 2026
Who is responsible
Fotis Gkogkos, Mathildenstraße 5, 80336 München, Germany, is the controller of your personal data. Contact: support@halfsent.com.
What we collect, and why
Your email address. So you can sign in and reset your password. It is never shown to anyone and never attached to anything you write. Legal basis: performing our contract with you.
Your username and password. Your username is the name shown on entries you choose to publish. Your password is stored only as a cryptographic hash, so we cannot read it. Legal basis: performing our contract with you.
What you write. Private entries are readable by your account. Entries you choose to share are readable by anyone once drawn. Legal basis: performing our contract with you.
Technical logs. Our hosting provider records IP addresses and timestamps for a limited period. We do not use them to build any profile of you. Legal basis: our legitimate interest in keeping the service secure and working.
What you send us through the feedback form. Whether it is about the site or about something published on it, we keep what you sent so we can act on it. The form has an optional field for an email address. Leave it empty and the message stays anonymous, or fill it in and we use it to reply to that message and nothing else. Legal basis: our legitimate interest in keeping the site safe and working.
What we do not collect
No real name. No phone number. No date of birth. No contacts. No profile photo.
No advertising trackers, no third-party analytics that follow you, no cookies beyond the one that keeps you signed in.
We do not sell data. There is no arrangement under which anyone pays us for access to it.
Where it is stored
On servers in the European Union, provided by Supabase, who process data on our instructions under a data processing agreement.
Password reset emails are sent through the same provider.
How long we keep it
Your entries and account stay until you delete them.
Entries you shared but which were never drawn stop being eligible after fourteen days. They remain in your history until you remove them.
Technical logs are kept for a short period as set by our hosting provider, then deleted.
Deleting your account deletes your entries, including published ones.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict how we use it, or object to processing based on legitimate interest.
You can delete your account and everything in it yourself, without asking us.
Write to us at the address above and we will respond within one month.
You can also complain to a data protection authority. In Germany that is the authority for the state we operate in. You can also complain to the authority where you live.
Children
Halfsent is not for anyone under 18. If we learn that an account belongs to someone younger, we will delete it.
Changes
If this policy changes in a way that matters, we will say so on the site before it takes effect.