About this policy
Hicarl is a personal project built by Hafiz. This policy describes information handled by hicarl.dev and Hicarl features that link to this policy, including Tools, Games, and the account dashboard. Other websites may have their own policies. For privacy questions, contact mhafizh.work@gmail.com.
Information we handle
- Account information. When you sign in, our authentication provider, Supabase, processes your credentials, account identifier, email address, session information, and any multi-factor authentication you configure.
- Private Space. If you use the vault, its contents are encrypted in your browser before storage. Stored records include the encrypted contents and key wrappers, account identifier, revision, and update time. Unlocked contents are held in browser memory while you use the vault.
- Messages. If you email us, we receive your email address, message, and any information you choose to include.
- Technical information. Hosting and authentication services process connection information, such as IP addresses and request logs, to deliver and protect the service.
How information is used
We use information to authenticate users, provide and secure account features, store encrypted vault records, diagnose failures, prevent abuse, and respond to requests. Hicarl does not sell personal information or use vault contents for advertising.
Browser storage and providers
Sign-in uses browser storage to keep your session. Clearing site data removes locally stored session information and preferences, but does not delete your account or server records. Signing out ends the current Hicarl home session.
Hicarl uses Vercel for hosting and Supabase for authentication and database storage. These providers process information needed to deliver their services, which may involve processing outside your country. Information may also be disclosed when required by law or needed to address abuse or protect the service.
Read the Vercel Privacy Policy and Supabase Privacy Policy for their respective practices.
Retention and your choices
Account information and encrypted vault records are kept while needed to provide your account, unless you request deletion or the service is discontinued. Support correspondence and operational records are retained as needed to resolve requests, maintain security, and meet applicable obligations. Deletion from backups may follow the provider’s backup lifecycle.
You can request access, correction, or deletion of your account information by emailing mhafizh.work@gmail.com. We may need to verify that the account belongs to you before acting. Additional privacy rights may apply depending on where you live.
Protecting your information
We use authentication, access restrictions, and browser-side encryption for vault contents. No service can guarantee absolute security. Keep your account credentials, authenticator, vault passphrase, and recovery key safe. Vault encryption cannot protect an unlocked session on a compromised device, and lost vault credentials may make contents unrecoverable.
Changes and contact
We may update this policy as Hicarl changes. The date above identifies the latest revision. Questions or privacy requests can be sent to mhafizh.work@gmail.com.