Privacy Policy

This policy explains what hogum, operated by Hogum, collects when you use it, why, and what choices you have. hogum has no accounts and asks for no personal details.

1. What we collect

• Targets you submit. The domain, IP address, network, or ASN you scan, and the report generated for it. Reports are stored under a public URL for up to one year and are visible to anyone with the link, including search engines.
• Request data. Your IP address, user agent, the pages you request, and timestamps, in ordinary server logs. Your IP address is also used, in memory, for rate limiting. Logs are kept for a short operational period and then deleted.
• Preferences. Your light or dark theme choice, kept in your browser’s local storage. It never leaves your device.
• Payments. If you use the paid API, the on-chain payment is public by the nature of the Algorand network. We record the payer address and the transaction identifier alongside the request. We never see or store card details.

2. Third parties we query on your behalf

To build a report, hogum sends the target you submit to public data sources. Each receives the target and our server’s address, not yours:

• crt.sh (certificate transparency)
• Cloudflare DNS over HTTPS
• Shodan InternetDB
• The Internet Archive’s Wayback Machine
• RDAP registries, via the rdap.org bootstrap
• The target site itself, which receives a small number of ordinary page requests from our server

Each source has its own privacy policy that governs its handling of that data.

3. Analytics

We use Google Tag Manager to load measurement tags, which tell us how many people use the Service and which pages they reach. Where consent is required, no measurement tag runs until you give it, and you can withdraw it at any time. These tags may set cookies or read device identifiers, and the data they collect is processed by Google. Google Tag Manager itself is described at policies.google.com/privacy. We do not send the targets you scan to any analytics provider.

4. Advertising

The free web interface shows advertising supplied by Adsterra. Where consent is required, no advertising script loads until you give it. Advertising networks may use cookies, device identifiers, and similar technologies to serve advertisements, measure their performance, and, where you have consented or the law allows, personalise them based on your visits to this and other sites. We do not share your scan targets with advertisers.

• Google’s use of advertising cookies is described at policies.google.com/technologies/ads. You can opt out of personalised advertising at adssettings.google.com.
• Opt out of other participating networks at optout.aboutads.info or, in the EU, youronlinechoices.eu.
• Where required by law, we will ask for your consent before setting advertising cookies, and you can withdraw it at any time through the same control.

5. Cookies and local storage

hogum itself sets no cookies. It stores two values in local storage: your theme choice and your cookie choice. Neither leaves your device.

If you are in the European Economic Area, the United Kingdom, or Switzerland, analytics and advertising cookies are off until you allow them: a banner asks on your first visit, and nothing in those categories loads unless you accept. Elsewhere they are on by default, as local law permits. Either way you can turn them off at any time through the Cookie settings link in the footer, and you can block or delete cookies in your browser settings. Reports work fully with them off.

6. How we use data

• To generate, store, and serve reports.
• To rate-limit abuse and keep the Service and its upstream sources available.
• To diagnose faults and understand aggregate usage.
• To display and measure advertising on the free interface.
• To settle and audit payments for the paid API.

We do not sell personal data, and we do not use it for any purpose not listed here.

7. Retention

A report is reused for up to ten days and its page remains available for up to one year, after which it is deleted. Server logs are deleted on a rolling short-term schedule. Payment records are kept as long as needed for accounting and dispute handling.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, to data portability, and to complain to a supervisory authority. To exercise any of these rights, or to ask that a report for a target you own be removed, contact support@hogum.com. We will respond within the time the applicable law requires.

9. Children

The Service is not directed at children under 16 and we do not knowingly collect personal data from them.

10. Security

Data is transmitted over HTTPS and stored with access limited to the operator. No system is perfectly secure, and reports are public by design, so do not submit anything you would not want visible at a URL.

11. Changes

We may update this policy; the date at the top shows the current version. Material changes will be noted on this page.

12. Contact

Privacy questions or requests: support@hogum.com. See also our Terms of Use.