Privacy Policy
Effective date: 2026-10-12
This policy explains how heremyapp ("we") handles personal information when you use heremyapp (https://heremyapp.com) and its dashboard. Sites that our users publish on heremyapp have their own privacy policies.
What we collect
| Data | Why | Kept |
|---|---|---|
| GitHub account ID, username and verified primary email (from GitHub sign-in) | Create and identify your account, contact you about your account and billing | While your account exists |
| Your heremyapp username, API token names and hashes (never the tokens themselves), session cookies | Sign-in and API access | Sessions 30 days; tokens until revoked |
| Content you upload and its metadata | Provide the service | Until you delete it or your account |
| Usage counts per space and day (requests, storage reads and writes, storage size), download counts | Show usage, enforce plan limits, bill usage | For as long as needed for billing and tax records |
| Request logs of our servers (IP address, user agent, time, URL) | Security, abuse prevention and debugging | Up to 30 days |
| Subscription status from Paddle (plan, renewal date; no card details) | Apply your plan | While your account exists and as required for records |
We do not sell personal information and do not use advertising or tracking cookies on heremyapp itself.
Who processes it for us
- Cloudflare hosts the service, storage and logs.
- GitHub handles sign-in.
- Paddle is our merchant of record and processes payments, taxes and invoices under its own privacy policy.
These providers may process data outside your country. We rely on their contractual safeguards for such transfers.
Visitors of sites published on heremyapp
When someone visits a site or downloads a file hosted on heremyapp, we process their IP address and request details to deliver the content and count usage. Download and request counts we show to the publisher are aggregated and do not identify visitors. Publishers control what their own pages collect.
Your rights
You can access, correct, export or delete your personal information, and object to or restrict its processing, as the law where you live allows (for example under the GDPR or South Korea's Personal Information Protection Act). Contact support@heremyapp.com. We answer within 30 days.
Security
Tokens and session identifiers are stored only as hashes, all traffic uses HTTPS, and access to production data is limited to the operator.
Changes
We will post changes here and notify you of material changes by email or in the dashboard.
Contact
heremyapp · support@heremyapp.com