Privacy

The short version

• No accounts, no ads, no cookies, no tracking. Just anonymous daily totals.
• The person who starts a match has their answers encrypted in their own browser before they reach us.
• Results are encrypted so only your private link can open them. We don't have the keys.
• Inputs are deleted as soon as the match runs. Results are deleted after 30 days.
• During the match itself, our server and our AI provider do see both profiles in plain text. See below.

What you share and what happens to it

Starting a match. Your optional first name and the profile you paste are encrypted in your browser. The key is only in the invite link, after the #, which browsers never send to servers. We store only the encrypted version. The other person's browser can only open your first name (and, when swapping gifts, the occasion) — never what you wrote. Unused invites are deleted after 7 days.

Joining a match. Your optional first name and profile are sent to us over an encrypted connection, used once to run the match, and never stored.

The match. To run it, our server briefly decrypts the starter's profile using the key the joiner's browser sends, and passes both profiles to our AI provider. A second AI step removes anything only one of you said. The starter's encrypted input is then deleted.

Results. Results are encrypted separately for each person, so only each person's private link can open them. We keep the encrypted results for 30 days, then delete them. We can't recover a lost link.

Gift mode. The person receiving the gift is told before they share anything that only the giver will see the gift ideas. They get nothing back. A giver can also describe the recipient themselves (for example, a young child), in which case the recipient doesn't use HintOh at all. Gift ideas never mention private topics such as health, medications, money, religion, politics or sexuality, even if a profile includes them: a second AI check removes them before the giver sees anything.

Swapping gifts. Each person gets gift ideas for the other, based on the other's profile. Neither person sees the other's profile, budget, or the ideas meant for them.

Other information

IP addresses. To prevent abuse, we count requests per IP address. We store a one-way scrambled version (a keyed hash), never the address itself, and delete these counts after 2 days. Our hosting provider may keep standard request logs.

On your device. So you can pick up where you left off, your browser keeps your progress (the step you're on, who it's with, names, occasion and budget) for 7 days, plus links to your recent results. It never keeps what you paste from your AI. This stays on your device; you can remove saved links from the home page, and clearing your browser data removes everything. HintOh doesn't use cookies, ads, or tracking analytics.

Counts and feedback. We count how many times things happen each day — for example, a link created, a match finished, or a 👍 or 👎 on results — per mode. These are totals only: no cookies, no IP addresses, nothing that links a count to you or a match.

Notifications (optional). If you tap “Notify me”, your browser gives us a push address so we can send one “Your HintOh is ready” notification. We delete it as soon as that's sent, or when the invite expires. The notification itself never contains your results.

Your agreement. When you agree to these policies, we store which version you agreed to and when — nothing that identifies you. It's deleted along with the match.

We don't sell or share personal information, and we don't use it for advertising.

Who else handles it

• Anthropic (AI provider) processes both profiles during the match under its commercial API terms, which don't allow using them to train its models.
• Supabase (database) stores only encrypted data and public keys.
• Vercel (hosting) runs the website and handles requests.

Age

HintOh is for people 13 and older, and everyone confirms their age before taking part. Intimacy mode is for adults 18 and older, between partners only, and both people confirm they are 18 or older. Children under 13 shouldn't use HintOh. Instead, a parent can describe a younger child in gift mode.

For parents

HintOh works well for parents and teens, or grandparents and grandkids. Any time the two people aren't partners, suggestions are kept family-friendly and suited to the younger person's age, with nothing romantic. Intimacy mode is never offered unless someone chooses "Partner".

A teen's profile is handled like anyone else's: encrypted, used once for the match, then deleted. There are no accounts, and we never ask for an email address, phone number or exact age. If you think a child under 13 has used HintOh, email us the results link and we'll delete that match.

Your choices

Because there are no accounts and we can't read stored data, we can't look up your information by name or email. To delete results before 30 days, email us the results link and we'll delete that match. Questions: privacy@hintoh.app.

If this policy changes, we'll update the date at the top of this page.