Privacy Policy

Effective November 2026 · HypeProof Backbone (https://thehypelists.com)

• Zero Public PII: Customer emails, payment card numbers, and billing addresses from merchant webhooks are never persisted in plaintext or rendered in public proof feeds. Only a one-way cryptographic receipt_fingerprint and non-identifying display label are kept.
• Session & Telemetry Hygiene: Authentication uses HttpOnly cookies storing only SHA-256 token hashes. First-party product analytics exclude emails, tokens, and secrets.
• Full Data Portability & Erasure (GDPR): Any workspace owner can export every workspace record via 1-Click Export My Data or permanently purge their account and child ledgers via Delete Account / Wipe Data in Settings.