FanHook · privacy policy
Privacy policy
What we store, why, for how long, and who else sees it. Written for people, not lawyers.
Initial version, pending legal review. This page was written in plain language by the people who build FanHook and has not yet been reviewed by a lawyer. It describes what the service actually does today. Effective [EFFECTIVE DATE]. FanHook is operated by [LEGAL ENTITY NAME], [JURISDICTION]. Questions: [CONTACT EMAIL].
The short version
FanHook stores your account details and every webhook you relay through it, including the full message contents. We use that data to run the service: store it, show it to you in your dashboard, and deliver it to the destinations you configure. We do not sell it, and we run no third-party analytics or advertising trackers on these pages. Polar handles payments as our merchant of record. Deleting a sink deletes its data immediately and permanently.
Data about you, the account holder
Your email address, your password stored as a salted scrypt hash (never in readable form), when the account was created, which plan you are on, and, if you upgrade, the Polar customer and subscription identifiers for your subscription.
Signing in creates a session record that expires after 30 days.
Data flowing through the relay
This is the important part. For every webhook a sink accepts, FanHook stores:
The full message body, exactly as it arrived. Alongside it: which provider sent it, when it arrived, and its delivery status.
A delivery log. Every delivery attempt is recorded with the destination address, the HTTP status code, any error message, and a timestamp.
Held copies with headers. While a delivery is in progress, a queued copy of the body and the incoming HTTP request headers is kept and removed when delivery finishes. When delivery ultimately fails, or a message is refused over quota, a dead letter entry keeps the raw body and the full set of incoming request headers so the message can be inspected and resent.
Webhook payloads routinely contain personal data about your customers, such as names, email addresses and payment metadata. That data is yours. FanHook stores it and forwards it on your instructions and uses it for nothing else. You are responsible for having the right to relay it through us.
Secrets
Webhook signing secrets are stored in readable form, because verifying a signature requires recomputing it from the original secret. Sink API keys are stored only as SHA-256 hashes: the key is shown once at creation and can never be shown again. Account passwords are stored as salted scrypt hashes.
How long data is kept, and deletion
Stored messages and their delivery logs are kept for 3 days on the free plan and 30 days on Starter, then deleted automatically. Dead letter entries are kept longer, 7 days on the free plan and 90 days on Starter, because an entry you have not resent yet is unfinished work and holds the only copy of that message body. Deleting a sink, or your account, removes everything tied to it immediately and before those windows elapse.
Deleting a sink removes everything tied to it in one step: the stored messages, the delivery history, the destinations, the dead letter entries, any queued deliveries and the usage counters. It happens immediately and cannot be undone.
Delete your account yourself from the Account page. Deletion is immediate and unrecoverable. Downgrading a plan deletes nothing.
Who else touches your data
Your destinations. The whole point of FanHook: the full message body is sent to every destination address you configure. Choose them carefully.
Polar. Payments happen on Polar's checkout pages, and Polar is the merchant of record for the sale. Your card details go directly to Polar and never pass through or get stored on FanHook's servers. To bill you, Polar receives your email address and an identifier for your FanHook account.
Railway. FanHook runs on Railway, our hosting provider, so stored data lives on Railway's infrastructure.
Google Fonts. These pages load their typefaces from Google Fonts, so when a page loads, your browser fetches font files from Google and Google sees your IP address and browser details for that request. Nothing else is sent to Google.
Nobody else. We do not sell data or share it with advertisers.
Cookies and email
FanHook sets a session cookie to keep you signed in for up to 30 days and a second cookie used to protect forms against forgery. Your light-or-dark theme choice is kept in your own browser. There are no tracking cookies.
FanHook currently sends no email at all. Usage information appears in your dashboard, not your inbox.
Questions about any of this go to [CONTACT EMAIL]. Changes to this policy are posted at this address with the effective date at the top.