Privacy Policy

Last updated: September 14, 2026

1. Who we are

UserHint provides feedback widgets that website owners embed on their own sites, together with a dashboard at app.userhint.io for reviewing what visitors submit. UserHint is independently owned and operated. You can reach us about anything in this policy at the address in the contact section.

This policy explains what personal data we collect, why we collect it, and how long we keep it. We collect as little as we can, we do not run advertising or tracking scripts, and we never sell personal data.

2. Two roles: your data and your visitors' data

We handle personal data in two distinct roles:

  • As a controller, for data about you: your account, your session, and anything you send us directly. Sections 3 to 9 cover this.
  • As a processor, for data that visitors submit through widgets embedded on our customers' sites. The site owner is the controller of that data; we process it on their behalf under our Data Processing Agreement. Section 10 covers this.

3. Data we collect about you

  • Account data: your name, email address, and a hashed password if you set one. If you enable two-factor authentication, we store its secret and recovery codes.
  • Sign-in with Google: if you use it, Google tells us your name, your email address, whether Google has verified that address, and a link to your profile picture. We keep the name and email address and discard the rest. We do not send Google anything about you; what Google records about the sign-in is governed by Google's own privacy policy.
  • Session and security data: the IP address and browser user agent of your signed-in sessions, used to keep your account secure and to prevent abuse.
  • Early-access list: if you leave your email on our waitlist form, we store that address and the IP it was submitted from. We use the address only to contact you about access to UserHint.
  • Correspondence: emails you send us, so we can answer them.
  • Usage analytics: which pages of userhint.io and the dashboard are viewed, with the referrer, browser, device type, and country. This is collected by a cookieless analytics service that never receives your name, email, or account identifier, hashes IP addresses with a salt that changes daily, and cannot recognize you across days or sites. Feedback submissions and their contents never reach it.

We do not collect payment card data; if we introduce paid plans, payments will be handled by a payment provider and card numbers will never touch our servers.

We use your data to provide the Service you signed up for, to secure it, and to communicate with you about it. Where the GDPR or similar laws apply, we rely on:

  • Performance of a contract, for operating your account and the Service;
  • Legitimate interests, for securing the Service, preventing abuse, and improving it;
  • Consent, for the early-access list, which you can withdraw at any time by emailing us;
  • Legal obligations, where we must keep or disclose data by law.

We send transactional email only: email verification, password resets, and important notices about the Service or these policies. We do not send marketing email to account holders without asking first.

5. Cookies and browser storage

We use only first-party cookies that are necessary to run the Service, which is why you see no cookie banner here. There are no analytics cookies and no advertising cookies. Our page-view analytics (Section 3) set nothing in your browser.

On userhint.io and its subdomains:

  • a session cookie, which keeps you signed in (expires after inactivity);
  • a CSRF token cookie, which protects forms against forged requests;
  • an appearance cookie, which remembers your light or dark theme choice for up to one year;
  • a remember-me cookie, only if you choose "remember me" when logging in.

On sites that embed a UserHint widget, the widget sets no cookies at all. When a visitor opens the widget, it stores one random identifier in the browser's storage on that site. It exists only to prevent abuse of the submission API, it is not used to track anyone across sites, and it is not stored with the submission. A visitor who never opens the widget gets nothing stored.

6. How long we keep data

  • Account data: until you delete your account. Deletion is immediate and permanent, and removes your widgets and their submissions with it.
  • Submissions: until the customer who received them deletes them, their widget, or their account.
  • Submission IP addresses: removed within 30 days of the submission; we keep them only as an abuse-prevention window.
  • Abuse-prevention logs: 14 days.
  • Early-access list: until we have invited you, or sooner if you ask us to remove your address.

7. Who we share data with

We never sell personal data and we do not share it with advertisers. We share it only with the infrastructure providers that run the Service, listed with their roles and locations in the subprocessor section of our Data Processing Agreement, and with authorities where the law requires it.

8. Where data lives

The Service and its database are hosted in data centers in the United States, with the providers listed in our Data Processing Agreement. Traffic passes through a global edge network for security and delivery. Where the GDPR applies, transfers outside the European Economic Area are protected by the EU Standard Contractual Clauses incorporated in our Data Processing Agreement.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to the processing of, or delete your personal data, and to complain to your local data-protection authority.

You can update your name and email, and delete your account, directly from the dashboard. For anything else, including a copy of your data, contact us and we will respond within 30 days.

10. If you submitted feedback through a widget

When you use a feedback widget on someone else's website, that site's owner decides what happens with your submission; we only store and show it to them. A submission carries the message you wrote, an optional rating, the page you were on, your browser's user agent and coarse device details, your country, and temporarily your IP address (removed within 30 days).

To access or delete a submission, contact the owner of the site where you submitted it. If you contact us instead, we will pass your request to them or, where the law requires us to act directly, handle it ourselves.

11. Children

The Service is for business and professional use and is not directed at children. Do not create an account if you are under 18.

12. Changes to this policy

We may update this policy as the Service evolves. If a change is material, we will notify account holders by email or by a prominent notice on the Service before it takes effect. The "Last updated" date above always reflects the current version.

13. Contact

Questions about privacy? Contact us at [email protected].