warmhop.com
Privacy
This notice covers warmhop.com and explains what we do with data about you — the person creating tracked links.
If you followed a link and ended up here, the page you want is About this domain.
Data controller: [LEGAL ENTITY NAME AND ADDRESS]
Contact: [PRIVACY CONTACT EMAIL]
EU representative (Article 27): [NAME AND ADDRESS]
What we collect about you
When you create an account
- your email address
- your authentication identity, if you sign in with a provider such as Google
When you create links
- the destination address
- a display name you choose
- any tags you add
- which plan you are on
When you use the dashboard
- ordinary server logs, kept briefly for security and debugging
We do not ask for your name, your phone number, your address, or payment details unless and until you subscribe to a paid plan.
Why we can process it
- Running your account and your links
- Performance of our contract with you (Art. 6(1)(b))
- Emailing you about activity on your links
- Performance of our contract with you
- Keeping the service secure and preventing abuse
- Our legitimate interests (Art. 6(1)(f))
A note about tags
You can tag a link with anything, including a person’s name. If you do, you are responsible for that data. We store it, show it back to you, and delete it with your account — but we never use tag values for anything beyond your own dashboard, and never in anything computed across accounts.
Please do not put information in a tag that you would not be comfortable being responsible for. If you tag a link with a recruiter’s name, that is personal data about them and it is your decision.
Emails we send
- When a link of yours is clicked by a person for the first time. You can turn this off.
- A weekly summary, if there was activity. You can turn this off.
- Account and security emails. These we have to send, and they cannot be turned off while you have an account.
We do not send marketing email without asking first.
Who else sees your data
We use these providers to run the service:
- Supabase
- Database
- Vercel
- Application hosting
- Upstash
- Short-lived cache
- Resend
- Sending email
Each processes data only on our instructions. We do not sell your data, share it for advertising, give it to data brokers, or use it to train models.
How long we keep it
Your account data stays while your account exists.
When you delete your account, you choose what happens to your links:
- Delete everything — the default. Your links, their history, and their tags are removed, and the links stop working immediately.
- Keep the links working. Because your links may be inside documents you have already sent and cannot edit, you can choose to leave them redirecting so nobody following one hits a dead end. If you do, all click history and all tags are deleted immediately — only the redirect survives, and we remove it entirely after 12 months.
Click data has its own schedule, described in About this domain.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, object to processing based on legitimate interests, or receive it in a portable format.
Email [PRIVACY CONTACT EMAIL] and we will respond within one month.
You can also complain to your data protection authority. If you are in the EU, that is the authority where you live or work.
Where your data is held
Our providers operate in [VERIFY AND STATE REGIONS]. Where data is transferred outside the EEA, it is covered by [VERIFY: Standard Contractual Clauses or an adequacy decision].
Changes
If we change this notice materially, we will tell you by email before it takes effect.
Last updated: [DATE]