HUMFEE Privacy Notice — web, Windows and Android

Controller and contact

Publisher and data controller: WPCAKE LLC. Contact: support@humfee.com. Website: https://humfee.com.

Purposes and legal bases

We process account and session data, browser requests and data for the voluntarily selected HP program to perform the agreement (Article 6(1)(b) GDPR). Protecting the service, proportionate fraud prevention, and establishing or defending claims rely on legitimate interests (point (f)); you may object. Tax duties or responding to authorities rely on a legal obligation where applicable (point (c)). Optional diagnostic reports require separate consent (point (a)), which you can withdraw in Legal information. Withdrawal does not affect the lawfulness of earlier processing. This notice provides information; it is not blanket consent.

Data categories and application behaviour

History, bookmarks, cookies from visited websites, downloads, settings and installation identity are stored on the device. Website passwords are not sent to the publisher. If you choose to save website credentials, the password manager stores them in a separate encrypted local vault; this is separate from your HUMFEE account password and account session. The account uses an email address, an Argon2id password hash, a recovery code stored as a hash and keys for linked installations. A session lasts up to 30 days; the HUMFEE account password is not saved in the local profile. Windows protects the session token using the operating system mechanism, and Android uses Keystore. Email verification and password recovery use account-related email messages and limited-validity tokens. Verifying an email address does not establish the identity of the person.

The server receives the IP address needed for the connection, the installation’s public key/signature, event identifiers, time, activity type and number of active seconds. HP events do not transmit entered search text, keystrokes, mouse movements or window content. After sign-in, new HP are accounted for in the shared account. The server stores balances, HP history, missions and accepted conditions, the referral structure and reward order history. Administrators can access data needed for support, review and complaints. Automated anti-fraud signals may pause accrual; you may obtain an explanation and request human review.

The profile contains a nickname, selected country and an avatar or photo thumbnail without metadata. Public rankings and rewards display the nickname, selected system avatar and disclosed country; your own profile photo is not published in these lists. You can hide the country. The team view displays active-member counts and individual details only to the extent provided in the panel. The forum publishes posts under a nickname. Private reports are visible to their author and support. Do not include secrets or sensitive data in them.

Search and the community ratings network

Windows opens Google by default; DuckDuckGo and Brave with your own key are also available. Android supports Google, Bing and DuckDuckGo. The selected provider receives the search terms, IP address and data associated with its website/cookies under its own policies. Search terms may form part of local URL history. Windows Deep Scan visits additional results from your computer and is disabled by default.

By default, Windows obtains community ratings using SHA-256 address hashes. Sharing your own scans is separately disabled by default. When enabled, it sends URL, domain and content hashes, SimHash, the AI assessment and confidence, detector version, time and limited provenance signals. The absence of page text, DOM, cookies and forms does not mean anonymity: a predictable URL can be compared with its hash. Reports may be associated with the installation’s account. Scan sharing can be disabled independently.

Diagnostics, advertisements and invitations

Crash reports are optional and disabled by default, including when upgrading from an older version. Consent covers the platform, version, time, error type and limited locations in application code, associated with the installation identity. We do not collect memory dumps, page content, passwords or full local paths. Disabling reports deletes the unsent queue and blocks further reports. A report sent before withdrawal may already be on the server; you may request its deletion.

Current advertisements are contextual. Marketing, audience analytics and behavioural personalisation modules are inactive. We do not request consent for unspecified future use. Opening an advertising link connects you to the advertiser’s website. Voluntarily remembering a referral code on the website lasts up to 30 days; without this option, the code can be used from the current link when downloading. Windows carries it in the filename; Android requires opening the invitation after installation. The HUMFEE POINTS rules describe the conditions for associating a new account.

Recipients and data transfers

Hosting provider dhosting.pl operates the server infrastructure. Authorised publisher personnel handle accounts, complaints and security. A reward partner may receive data necessary for fulfilment if the offer provides for this. External websites, search engines and advertisers act as separate controllers for their services. Email service providers process correspondence and account-related messages. You may ask the publisher’s contact address for information about recipients, processing locations, transfer safeguards and a copy of the safeguards used.

Retention and deletion

The account and associated data support the service until account deletion or the end of the relevant purpose. Sessions expire after no more than 30 days; the forum session also expires after inactivity. The legal-choice history contains the document, version, source, all selected and unselected options, date and time of the choice on the device, date and time of receipt on the server, and the IP address of the connection used to submit the choice. For offline acceptance, the IP relates to later synchronisation, not an unknown earlier connection. We also retain consent changes and withdrawals and the confirmation of being at least 16 for diagnostics. Earlier records are not supplemented with invented IP addresses. The history is linked to the installation/account to demonstrate acceptance. HP events and rating reports remain necessary for accounting, complaints and consensus. Retention is determined by the service period, accounting for the particular event, handling a complaint and the applicable limitation period for claims. Once a purpose ends, data are deleted or anonymised. Diagnostic reports are used to identify and resolve the cause of an error; you may request deletion of reports linked to your installation. The system does not declare one automatic deletion deadline for every data category.

Delete your account through Account → Delete account and data, or https://my.humfee.com/delete-account.php. Password confirmation protects against unauthorised deletion. Deletion covers account data, sessions, profile, your HP, missions and access to reward codes. HP previously awarded to other people remain without an association with the deleted account. Save any codes you need beforehand. Account deletion does not erase local history, cookies or downloaded files. Remove those separately on each device. Hosting logs and backups require separate handling of the request by the controller.

Your rights and children

You have rights of access, rectification, deletion, restriction, portability where provided by law, objection to processing based on legitimate interests, and withdrawal of consent. Write to support@humfee.com. We normally respond within one month; a permitted extension requires notice and reasons. You may complain to the President of UODO, the Polish Personal Data Protection Office, or another competent supervisory authority. Providing account data is voluntary but necessary for an account; optional diagnostics are not required.

We do not profile children for advertising. Minors use the service subject to their capacity to enter into an agreement. An independent account requires an age of at least 13, and activities requiring a guardian’s consent require that consent. We do not currently provide verification of guardian consent, so features requiring such verification should not be offered to a child. Consent-based diagnostics in this release are available only to people confirming they are at least 16. Age-restricted rewards require the relevant age to be met and information before ordering.

The decision register demonstrates formation of the agreement, the scope of choices, consent and its withdrawal (Article 6(1)(b), (c) and (f) GDPR, depending on the basis for the particular record; Article 7(1) GDPR). An IP address is not proof of identity on its own. Cookie history receives a random decision identifier and may be linked to the account after sign-in; it is not used for advertising tracking. Cookie entries are retained for up to 180 days. Only authorised personnel can access the data. Application consent history is deleted with the associated account; users without an account may request deletion through the contact address, providing their installation identifier.