Privacy Policy
Last updated 11 October 2026
Hitonot is a platform for making and discussing time-bound predictions. This policy explains what we collect, why, and what choices you have.
What we collect
- Account details — your email address, username, and optional bio.
- Content you create — predictions, comments, votes, watches, follows, and reports.
- Google sign-in data — if you sign in with Google, we receive your Google account identifier, email, and name from Google.
- Technical logs — IP address and browser user-agent, used for security, abuse prevention, and rate limiting.
- Usage analytics — which pages you view and how you arrived at them, collected by Google Analytics without cookies; see below.
Cookies we use
- Authentication cookies — a short-lived access token and a refresh token that keep you signed in.
- Preference cookies — your theme and sidebar choices, so the page renders the way you left it.
We use Google Analytics 4 to see how many people read the site and which pages they read, and we deliberately narrow what it is allowed to see. It receives the path of the page only — never the query string, never the page's title, and never what you typed into search — so a one-time link from a verification or password-reset email, and the text of the predictions you read, are never sent; the username is masked out of profile paths. What it does receive is that path, your approximate location (which Google derives from your IP address), your device and browser type, and — through Google's default measurement — outbound link clicks, how far you scroll, and file downloads.
It also sets no cookies and stores nothing on your device. We run Google Analytics with storage consent denied, which is why you are not being asked to accept anything: there is no cookie here to accept. The trade, stated plainly, is that Google cannot tell a returning reader from a new one, so visitor counts are estimates rather than exact tallies.
We do not run advertising and we do not sell your data. We have not enabled Google's advertising or cross-site measurement features. Google's use of the data it does receive is governed by its terms for sites that use its services, and you can switch it off for every site with Google's opt-out browser add-on.
How we use your data
To operate the service: authenticate you, show and rank content, deliver transactional email (email verification and password reset), and protect the platform from abuse. Transactional email is sent through an SMTP email provider on our behalf. We also measure how the site is used — page views and referrers, through Google Analytics — to see which pages and predictions people read.
Connected apps. You can connect an AI assistant (such as Claude) to your account through the Model Context Protocol. When you do, that assistant's provider receives the predictions you ask it to read, file or change — your own claims only — and handles them under its own privacy policy. Nothing is sent until you connect an assistant and sign in for it, and you can disconnect it at any time under Settings → Connected apps.
Search engines
Public predictions, and the discussion under them, can appear in search results such as Google's, with the username of whoever wrote them. Your profile page is listed there once it has a public prediction and you have saved your username in Settings: a profile under a username we generated for you is not listed until you do. Private predictions, and anything a moderator has hidden, are never offered to search engines.
Retention and deletion
You can delete your account from Settings. Deletion soft-deletes and anonymizes your account and removes personal identifiers; some content may remain in an anonymized form where it is part of a public discussion.
Analytics is separate, and we would rather say so than leave you to assume otherwise: we send Google no account identifier and mask the username out of profile paths, so Google Analytics records are not linked to your account — and deleting your account does not remove them. They expire on Google's side under the retention period set for our property, and you can stop future collection with the opt-out add-on linked above. Nothing is stored on your device, so there is no analytics identifier of yours to delete.
Contact
Questions about this policy? Reach us at the address published on our contact channels.