Privacy.

We’re a one-person studio building HourTab in public on a single VPS. There’s no analytics SaaS, no ad pixel, no marketing-email pipeline. This page tells you what we keep and what we don’t.

Last updated: 2026-04-25.

What we collect

Two things, and only when you give them to us:

  1. The email you type into the waitlist form. One row per address — email, the page you submitted from, the timestamp. Nothing else.
  2. Anonymous pageview pings. When you load a HourTab page, a tiny /api/pv beacon records the path you visited, the referring URL, your IP address, the User-Agent string your browser sent, and a timestamp. We use this to count which pages convert and which don’t. We do not set a cookie, fingerprint your device, or join the IP back to any other identity.

Where it lives

Both lists are written to a single SQLite file on a Hetzner VPS that I rent. There is no managed database, no analytics SaaS, no third-party processor with copies of either table. Server access logs are kept by Caddy, capped at 5 MB × 3 rotated archives, then overwritten.

Subprocessors

That’s the whole list. No CDN account, no Cloudflare proxy, no Google Tag Manager, no Facebook Pixel, no Mixpanel, no Segment.

What we never do

Your rights

If you’re in the EU, UK, or California you have the legal right to ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Even if you’re not, you can ask. DM @bitinvestigator on X with the email you used and we’ll handle it within 7 days.

Children

HourTab is a tool for freelance consultants and small studios. It’s not aimed at children under 16, and we don’t knowingly collect data from them. If you believe a child has signed up, DM us and we’ll delete the row.

Changes

If this page changes meaningfully we’ll bump the “last updated” date at the top and note the change in the public CHANGELOG. The page’s git history is in the public repo if you want a paper trail.