Privacy Policy

What Hasanat collects, why it is used, and how your data and rights are protected.

Last updated
August 29, 2026
Sections
12

1. Introduction

Welcome to Hasanat (hasanat.dev), free and open-source community infrastructure for shaping needs and ideas, forming multidisciplinary teams, and operating useful projects that reach people and continue. It is operated by Hasan Abo-Shally from Jerusalem.

This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform. We believe in transparency and are committed to protecting your privacy.

This platform is entirely free, non-commercial, and open source. We do not sell your data or monetize it in any way.

2. Information We Collect

a. Information You Provide Voluntarily

  • When submitting an idea: Name, contact information (optional), category, and description.
  • When commenting: Name and comment content.
  • When creating a contributor profile: Name, email address, contribution role, skills, availability, preferences, and any links you choose to share.
  • When subscribing to our newsletter: Email address.
  • When adding a project: Project name, description, links, desired contribution roles, project-lead identity, and its financial model and public disclosure when it generates revenue.
  • When signing in: Public profile information shared by your selected authentication provider (Google or GitHub), such as name, email, and avatar.

b. Information Collected Automatically

  • Browser fingerprint: We use an anonymous digital fingerprint solely to prevent duplicate voting on ideas. This fingerprint is not used to track you across websites.
  • IP address: May be temporarily logged in server logs for security and abuse prevention purposes.
  • Browser information: Browser type and operating system (User Agent) for technical purposes.

c. AI Processing Data

When you use AI idea enhancement, your idea text is sent to the Anthropic API for processing. No personal information is sent to Anthropic—only the idea content itself.

3. How We Use Your Information

  • Providing the service: Displaying ideas, discussions, projects, and contributor profiles, and operating matching and project workspaces.
  • Account management: Authenticating Google or GitHub login sessions and managing user sessions.
  • Communication: Sending platform-related emails (newsletter, notifications) via Resend.
  • AI enhancement: Processing idea text through AI to provide improvement suggestions.
  • Abuse prevention: Using browser fingerprints to prevent duplicate voting and detect abusive behavior.
  • Platform improvement: Understanding how the platform is used to develop and improve user experience.

4. Cookies & Session Management

We use cookies for the following purposes only:

Essential Hasanat cookies, purposes, and duration
Cookie Purpose Duration
authjs.session-token Signed session token used for authentication 7 days

We do not use tracking cookies, advertising cookies, or third-party cookies. The only cookie used is the session cookie, which is essential for the platform to function when you are signed in.

You can delete cookies from your browser settings at any time. Deleting the session cookie will sign you out of the platform.

5. Data Storage & Security

  • Your data is stored in a Cloudflare D1 (SQLite) database on Cloudflare's global infrastructure.
  • Session tokens are signed and transmitted over secure HTTPS connections.
  • Google and GitHub authentication is handled by a separate authentication worker (auth.hasanat.dev) using the secure OAuth 2.0 protocol.
  • We do not store passwords — authentication is handled by the account provider you choose.
  • Session cookies are scoped to the .hasanat.dev domain and protected with HttpOnly, Secure, and SameSite attributes.

While we take reasonable measures to protect your data, no electronic system can guarantee 100% security. We encourage you to protect the authentication-provider account you use.

6. Third-Party Services

We use the following services to operate the platform:

Cloudflare (Hosting & Database)

Hosts the platform and D1 database. Subject to Cloudflare's Privacy Policy.

GitHub OAuth (Authentication)

Used for user authentication. We only access your public profile information. Subject to GitHub's Privacy Statement.

Anthropic API (AI Enhancement)

Used to enhance idea text only. No personal data is sent. Subject to Anthropic's Privacy Policy.

Resend (Email)

Used to send platform-related transactional emails. Subject to Resend's Privacy Policy.

App directory previews and publisher links

App icons and previews may load directly from Google Play's image network or the publisher's source. Those servers receive your IP address and the request information needed to serve the image. Catalog images use a no-referrer policy, and we do not attach Hasanat account details. Requests are governed by your browser and the external service's policies, including Google's Privacy Policy. Opening an external app is subject to its publisher's policy.

7. Your Rights

Regardless of your location, we grant you the following rights regarding your personal data:

  • Right to access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request correction of any inaccurate or incomplete information.
  • Right to erasure: You may request deletion of your personal data from our database.
  • Right to data portability: You may request a copy of your data in a machine-readable format.
  • Right to object: You may object to the processing of your data in certain circumstances.
  • Right to unsubscribe: You can unsubscribe from the newsletter at any time using the unsubscribe link in every email.

To exercise any of these rights, please contact us through the channels listed in the "Contact" section below. We will respond to your request within 30 days.

For EU/EEA residents (GDPR): Our legal basis for processing your data is your consent (when you submit information) and our legitimate interest in operating the platform. You have the right to lodge a complaint with your local data protection authority.
For California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

8. Data Retention

  • Ideas, comments, and apps: Remain published on the platform unless deletion is requested or they are removed by moderators.
  • Builder account data: Retained as long as the account is active. You may request account deletion at any time.
  • Newsletter data: Your email is retained until you unsubscribe.
  • Server logs: Automatically deleted within 30 days.
  • Voting fingerprints: Stored anonymously and associated only with the vote record.

9. Children's Privacy

This platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you are a parent or guardian and believe your child has submitted personal information on the platform, please contact us to have it removed.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date above. Since the platform is open source, you can review the change history on the project's GitHub repository.

11. Open Source Transparency

Hasanat is a fully open-source platform. You can review the source code and verify for yourself how we handle your data. We welcome your contributions and reviews through the project's GitHub repository.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, you can reach us through:

Operated by: Hasan Abo-Shally — Jerusalem