HASE
Privacy

Privacy Policy

Effective: September 17, 2026

HASE is built around a simple idea: your stuff, gone soon. We collect the absolute minimum to make the service work, and we never use your content for advertising, analytics, or profiling.

01

Information We Collect

  • Files and text you upload, along with metadata such as filename, size, and upload time.
  • IP address and browser user-agent used for rate limiting and abuse prevention.
  • A session cookie (hase_admin) if you authenticate as an admin — no cookies are used for regular sharing.
02

How We Use Information

  • To provide temporary file and text storage with automatic expiration.
  • To enforce rate limits and prevent abuse of the service.
  • To comply with legal obligations when required by law.
03

Data Retention

  • Uploaded content is automatically deleted after the chosen expiry time (default 24 hours, max 7 days).
  • Server access logs containing IP addresses are retained for up to 30 days.
  • Rate-limit records are kept for 15 minutes and then discarded.
04

Data Sharing

  • We do not sell, rent, or share your personal data with third parties.
  • Exceptions may apply when required by law, to enforce our Terms of Service, or to protect our rights.
05

Security

  • All uploads and downloads are served over HTTPS (TLS 1.3).
  • File storage uses encrypted S3-compatible object storage.
  • Admin authentication uses HMAC-signed session cookies with configurable expiration.
  • Short data lifetime naturally limits exposure in case of a breach.
06

Third-Party Services

  • HASE uses Cloudflare for CDN and DDoS protection. Cloudflare may process IP addresses for this purpose.
  • File storage uses S3-compatible object storage.
07

Children's Privacy

  • HASE is not intended for users under 13 years of age. We do not knowingly collect data from children.
08

Contact

  • For privacy-related questions, contact support@hase.web.id.