Privacy Policy

Last updated: April 4, 2026

1. Who We Are

Hundredweight is operated by Untangling Systems LLC. This policy describes how we collect, use, and protect your information when you use our website and services at hundredweight.app.

2. Information We Collect

Account information: When you create an account, we collect your email address. We use passwordless authentication (magic links), so we do not store passwords.

Subscription and billing: Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status. We do not store credit card numbers or bank details — Stripe handles all payment data directly.

Usage data: We collect information about how you use the Service, including which auctions you follow, species preferences, and API usage. This helps us improve the product and provide relevant data.

Analytics: We use Google Analytics to understand how visitors use our website. Google Analytics collects anonymized data about pages visited, time on site, and traffic sources. You can opt out using Google's opt-out browser add-on.

Cookies: We use a session cookie to keep you logged in. We do not use tracking cookies beyond Google Analytics. Stripe may set its own cookies during the checkout process.

3. How We Use Your Information

• To provide the Service: delivering auction data, processing subscriptions, sending email digests for your followed auctions.
• To communicate with you: magic link login emails, weekly auction digests, and important service updates.
• To improve the Service: understanding usage patterns, fixing bugs, and building features users need.
• To process payments: managing your subscription through Stripe.

4. Email Communications

If you follow auctions, you will receive a weekly email digest summarizing recent results. You can unfollow all auctions in your account settings to stop these emails, or contact us to unsubscribe.

We may also send infrequent service announcements (e.g., pricing changes, new features, downtime notices). We will never sell your email or send marketing emails on behalf of third parties.

5. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe: For payment processing.
• Resend: For transactional email delivery (magic links, digests).
• Google Analytics: For anonymized usage analytics.
• Cloudflare: For hosting and content delivery.

We may disclose information if required by law or to protect our rights.

6. Data Storage and Security

Your data is stored in Cloudflare D1 (SQLite database) within Cloudflare's global network. Sessions expire after 30 days. Magic link tokens expire after 15 minutes.

We use HTTPS for all communications. API keys are generated with cryptographic randomness. We follow industry-standard security practices, but no system is 100% secure.

7. Your Rights

You can:

• Access your data: View your account information, followed auctions, and API keys in your account dashboard.
• Delete your account: Contact ring@hundredweight.app to request account deletion. We will remove your personal data within 30 days.
• Export your data: Contact us and we will provide your account data in a machine-readable format.
• Opt out of analytics: Use Google's opt-out browser add-on or a privacy-focused browser.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

10. Contact

Questions about privacy? Contact us at ring@hundredweight.app.