What we keep.

Visitors

• A visitor cookie (hatch_actor): a random identifier, signed so it can't be forged, kept for up to about 13 months. It lets HATCH remember your cooldowns, votes and the phrases you backed. It isn't linked to your name or any other site.
• Your network, hashed. HATCH never stores your IP address. It keeps a one-way keyed hash of your network (for IPv6, of the /64 block) to stop one person posing as many. These hashes are cleared on a schedule: from actions after 2 days, from rate-limit records after 7 days, from votes a day after the vote closes, from phrase support when the phrase is settled (at most 30 days), and from reports a day after review (at most 30 days).
• What you do (feeding, petting, teaching, voting) is recorded against the visitor identifier, because it is part of a pet's shared history. Phrases you teach are public.
• Your browser also keeps a few local notes (for example when you last saw a pet) so it can say what changed while you were away. They never leave your browser.

Creators

• Your wallet address is stored and shown publicly on the pets you hatch. Signing in only signs a text message; HATCH never asks for transactions, approvals or your recovery phrase.
• A sign-in cookie (hatch_creator), signed, lasts 12 hours. Your edits and archive/delete choices are logged so changes to a pet are accountable.

Reports and moderation

A report records what was reported, the reason, your visitor identifier and your hashed network (cleared after review). Moderators see visitor identifiers and hash prefixes, never IP addresses. Every moderator action is kept in a permanent audit log.

Services HATCH relies on

• Vercel hosts the site and Supabase hosts the database.
• Cloudflare Turnstile runs the occasional “quick check” that you're a person (only when activity looks automated, when reporting from a new browser, and before hatching). Cloudflare processes data from your browser when it runs.
• Helius is asked for public token details (name, ticker, logo) by token address; token logos are fetched through HATCH, so the logo hosts don't see you.

HATCH doesn't sell data and has no advertising or third-party analytics.

What stays

Pets, their memories, the phrases they learned and their activity are kept as each pet's permanent history. Hidden content stays in the database for moderation but isn't shown.

Questions and requests

To ask what HATCH holds about your visitor identifier or wallet, or to ask for something to be hidden or removed: hammouhanini2017@gmail.com.