Privacy Policy
Last updated: 2026-10-13
1. Overview
Hotspot Hub (operator: Project Team, contact projectteamforyou@gmail.com) collects only the personal data needed to run your account, the free trial and payments. We do not sell personal data, show no ads and use no advertising or cross-site tracking.
2. Data stored only on your device
The Wi-Fi name, password, theme, generated passwords and speed-test history stay in your browser storage and are never uploaded to our servers. Your sign-in token is also kept in browser storage, not in a cookie. A speed test connects directly to Cloudflare's speed-test service, which sees your IP address.
3. Account data we process
Sign-in is required. We store your email address and either a salted scrypt hash of your password (never the password itself) or your Google account ID with its verified email; the verification state, failed-login counters and a session version used to protect the account; the time your 1-day free trial started; your subscription or pass status and period; and, after you buy a Korean card pass, the time you first use a Premium feature (needed for the 7-day withdrawal rule). Feedback you send is stored with your message.
4. Payments
Payments are processed by Google Play (Android app), PortOne with NHN KCP (Korean cards) and PayPal (international). They are independent controllers of your payment data and we never receive card numbers. We receive and keep the order or subscription ID, amount, currency, date and status.
5. Service providers and international transfer
To run the service we use: Railway (API server and database, United States), Cloudflare (website delivery, security and privacy-friendly Web Analytics, global network), Resend (verification and reset emails, United States), Google (Google sign-in and Google Play), PortOne/NHN KCP (Korea) and PayPal. Data is sent to them over encrypted connections when you use the service, only for these purposes and under their data-processing terms.
6. Cookies and analytics
We use no advertising cookies and no cross-site trackers. Cloudflare Web Analytics measures page views and loading speed without cookies and without identifying you or following you across websites.
7. Retention and deletion
Account data is kept until you delete your account (Premium → Delete account), after which it is erased immediately and active web subscriptions are cancelled. Payment records are kept in anonymised form for the period required by tax and commerce law (Korea: 5 years). Infrastructure logs held by our hosting providers are kept for a short period for security.
8. Your rights and contact
You can access, correct, export or delete your data and withdraw consent at any time in the app or by emailing our privacy officer (Project Team) at projectteamforyou@gmail.com; we reply within 10 days. The service is not intended for children under 14. In Korea you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118).