How HuginnEye handles data

1. Information you provide

When you use HuginnEye, you may submit an email address, username, or similar identifier to generate an exposure scan. If you subscribe to the newsletter, you provide your email address for that purpose.

2. Information generated by scans

HuginnEye may generate scan results from public sources, third-party services, and automated analysis. Results may include public profiles, public identity signals, usernames, links, metadata, and exposure indicators.

3. How we use information

We use submitted data to perform scans, generate reports, prevent abuse, improve the service, maintain security, and communicate updates when you explicitly subscribe.

4. Public sources and third-party providers

HuginnEye may query third-party APIs or public websites to produce results. Those services may process requests according to their own policies. HuginnEye does not control third-party platforms or the public information they make available.

5. Data retention

Scan data may be stored temporarily to display results, prevent abuse, debug errors, and improve reliability. Newsletter emails may be retained until you unsubscribe or request deletion.

6. Security

We take reasonable technical and organizational measures to protect the service. However, no online system can be guaranteed to be completely secure.

7. Your responsibility

You should only submit identifiers that belong to you, that you are authorized to scan, or that you have a lawful and legitimate reason to analyze. You are responsible for the data you enter into the service.

8. Analytics and website usage

With the user's consent, HuginnEye uses Google Analytics 4 to measure website traffic, understand how visitors interact with the service and identify technical or usability improvements.

Google Analytics may process information such as page views, session statistics, approximate location, browser type, device information and interaction events.

The legal basis for this processing is the user's consent. Google Analytics is not loaded when analytics consent has been rejected or has not yet been provided.

9. Analytics and scan data

Email addresses, usernames and scan results submitted through HuginnEye are not intentionally sent to Google Analytics.

HuginnEye does not configure scan inputs as Google Analytics event parameters, custom dimensions or user identifiers.

10. Analytics provider and international processing

Google acts as an analytics service provider and may process analytics information through infrastructure located outside Spain or the European Economic Area, subject to the safeguards and contractual mechanisms implemented by Google.

11. Withdrawal of analytics consent

Analytics consent can be withdrawn at any time through the “Cookie settings” option available in the website footer. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

12. Payments through Paddle

Payments for premium reports are processed through Paddle. Paddle acts as the authorised reseller and Merchant of Record for transactions completed through Paddle Checkout. Paddle processes the payment, issues transaction confirmations or invoices, calculates and collects applicable taxes, and handles payment-related support, refunds and chargebacks.

When you begin or complete a purchase, Paddle may collect and process information such as your name, billing address, email address, country, payment method details, transaction identifiers, tax information, device and browser information, IP address and fraud-prevention signals. HuginnEye does not receive or store your complete card number or payment credentials.

HuginnEye may receive limited transaction information from Paddle, including payment status, transaction identifier, purchased product, price, currency, country, timestamps and customer email where made available. We use this information to confirm payment, generate and deliver the purchased report, provide support, prevent fraud, comply with legal obligations and maintain accounting records.

Paddle processes payment information under its own privacy notice and buyer terms and may act as an independent data controller for its payment-processing activities.

13. Payment and report retention

Payment and accounting records may be retained for the periods required by tax, accounting, fraud-prevention and other applicable legal obligations. Premium reports are available temporarily for download and are automatically deleted after the period stated on the report page. Deleting a report does not require deletion of transaction records that HuginnEye or Paddle must retain.

14. Contact

For privacy requests, deletion requests, or questions about this policy, contact: [email protected]