Privacy

Last changed 28 October 2026.

This page says what Hash Shuffle keeps about you, why, for how long, and what you can ask for.

What's kept

When you register your interest

The form on the home page keeps what you type into it: your name, work email, what kind of business you are (the type you pick), and, if you add them, your company and message. It also keeps the source: where you came to the page from, taken from the link (such as ?ref=linkedin) or the site that sent you, so we know which posts reach people, and the time you signed up. If you sign up again with the same email, we keep your first sign-up as it was.

We use it only to contact you about Hash Shuffle: to tell you when the sandbox opens and to talk about what you're building. No newsletters, and it isn't sold or shared with anyone for their own use. The lawful basis is our legitimate interest in replying to people who asked to hear from us. It's kept until Hash Shuffle opens and we've been in touch, or until you ask us to delete it, whichever comes first. We delete sign-ups by hand.

To stop one connection sending lots of sign-ups, we also keep a scrambled code made from your connection's address (never the address itself). It's cleared automatically about a day later.

The database isn't copied anywhere else yet. When backups are turned on, this page will say where they're kept and for how long.

When you send feedback

If you've been let in to try Hash Shuffle, the Send feedback page keeps what you send: whether it's a bug or an idea, your message, the email you signed in with, the time, the version of the site and your browser (its name and version, as it tells every site). Your message, the browser, the version, the page you came from and any screenshots or screen recordings you add also go into an issue in our private project on GitLab, where we track work; the issue shows only the first letter of your email and its domain, never the whole address.

We use it only to fix what's wrong and decide what to build. The lawful basis is our legitimate interest in improving Hash Shuffle. It's kept until you ask us to delete it. A screenshot or recording is sent as it is, including anything stored inside the file (a phone photo can hold the place it was taken), so crop out anything you'd rather not share. Each file goes up to GitLab when you press Send, just before your message; if the message then doesn't go, the file stays in our GitLab project, not linked to anything, until we delete it.

Signing in

For pages that are private, Cloudflare asks for your email to send you a sign-in code, and keeps a record of each sign-in (your email, IP address and the time), which only the people who run Hash Shuffle can see. It's used only to let you in and keep the site secure.

Who else handles it

• Hetzner (in the EU): the server and database, where sign-ups and feedback are stored.
• GitLab (in the United States): where feedback becomes an issue in our private project.
• Cloudflare: delivers the site securely, and checks who you are while the site is private.

Cookies

Only the ones Cloudflare needs to run the site and to sign you in while it's private, such as CF_Authorization (keeps you signed in) and CF_AppSession (protects the sign-in), plus a few on Cloudflare's own sign-in page. No tracking or advertising cookies, so there's nothing to accept.

Your rights

You can ask to see, correct or delete anything kept about you, or ask us to stop using it. To have your sign-up deleted, email us from the address you signed up with and we'll remove it. For that, or anything about how your data is handled, contact contact@tapps.vip.

Questions or complaints

Email support@tapps.vip. You can also complain to the Information Commissioner's Office (ico.org.uk). See also the terms.