Privacy
Last updated 4 August 2026. Short, and true of the code that is actually running.
What we keep
- Who you are. If you sign in with Google we store the identifier Google gives us and your display name, so we know which pages are yours. Your email address is not written to our database — it is carried in the signed session cookie in your own browser, and reaches us only if you email support or if you are an administrator, in which case it appears in our internal record of administrative actions.
- Your page. Its name, description, standing details, listed items, posts and photos. Once published this is public — that is the point of a page.
- Drafts. Held privately until you publish or discard them. Nothing you have not published is shown to anyone, and our own operator tools cannot read them.
- Photos. Re-hosted on our servers. We strip EXIF metadata on the way in, including GPS coordinates, and keep only the orientation flag so the picture is the right way up.
- Connections. Which assistant you connected and when. Access tokens are stored only as one-way hashes, never in a form that could be used to connect.
Readers
We count how many people read a page. We deliberately cannot tell you who.
- No cookies are set on a page. No tracking pixels, no advertising networks, no third-party analytics of any kind.
- To avoid counting the same person twice in a day we compute a salted hash of their address, browser and that date. The hash cannot be reversed, and the whole set is discarded when the day rolls over. Yesterday's readers cannot be identified afterwards, by an attacker or by us.
- We record which site a link was followed from, as a domain only.
What we never do
- We do not sell your information, and we do not share it for advertising.
- We do not read your unpublished drafts.
- We do not use your page content to train any model.
Deleting things
Delete a page from your account and its content, photos, facts, items and read counts go with it. That is immediate and cannot be undone. Deleting every page you own also removes your account record. Want it done for you, or want a copy first? Email hey@hipage.ai.
Deleted content can survive briefly in routine infrastructure backups before ageing out. Nothing is restored to a page once deleted.
Where it lives
hipage runs on Cloudflare, which stores and serves this data on our behalf and is the only processor involved. Sign-in is Google's. There is no other third party.
Asking us things
hey@hipage.ai — for a copy of your data, corrections, deletion, or anything you want explained.