This page says what we collect, why, how long we keep it, and who else sees it. It describes what the software actually does. Where we collect something, we say so plainly rather than describing ourselves as private and leaving you to find out otherwise.

If you never sign in

You can search for hashtags without an account. We still record the following, tied to a random session identifier rather than to you:

• A session ID. A random string kept in your browser's session storage. It is not a cookie, it is not shared with anyone, and it is discarded when you close the tab. It lets us count a visit once instead of once per page.
• Page visits. The path you landed on, the referring URL if your browser sends one, and your browser's user-agent string.
• Searches. The niche you typed, the platform you chose, your approximate region, how many results came back, and which data source answered.
• What you did with the results. Which hashtags were shown, copied, or had their source article opened.

We use this to see which searches fail, which sources are worth paying for, and whether the tool is useful. It is not sold, shared or used to build a profile of you.

Your approximate region

We work out a broad region — India, US, EU or unknown — from your browser's time-zone setting. We do not look up your IP address, and we do not know your city. The region decides which platforms are offered and how long we keep your data.

Our hosting and analytics providers necessarily see your IP address in order to serve the page, as every website's do. We do not store it.

If you sign in

Signing in is optional and uses Google. If you do, we store the name, email address and profile image URL Google gives us, along with your preferences, your last five searches, and anything you save — collections and generated posts.

We never see your Google password. We do not email you marketing.

Analytics

We use Umami for page analytics. It sets no cookies and collects no personal data, which is why this site shows no cookie banner. It records page views and a short list of events — a search run, a sign-in, a post generated, the pricing page viewed — in aggregate.

There is no advertising on this site and no third-party advertising or social media trackers.

How long we keep it

Session and search records expire automatically, by region, and a scheduled job deletes the expired ones every day:

• EU and unknown regions: 1 hour
• India: 24 hours
• United States: 30 days

Nothing in those tables is kept longer than 30 days under any circumstances. Account data — your profile, saved collections and generated posts — is kept until you ask us to delete it, because deleting it earlier would delete your work.

Who else sees your searches

Producing a result means sending what you typed to services we do not control:

• Groq — your search term, and the topic you describe in the post generator, are sent to generate suggestions.
• NewsData.io — your search term is sent to find related news.
• RapidAPI providers and the YouTube Data API — your search term is sent to look up platform data.
• Convex — our database and backend host, which stores everything described above.
• Google — only if you choose to sign in.

We do not send them your name, email address or session ID. Each has its own privacy policy governing what it does with a search term.

Asking us to delete your data

Email support@hashtagharvest.com and we will delete your account and everything attached to it. Anonymous session records cannot be traced back to you, so they cannot be retrieved individually — they expire on the schedule above.

Changes to this policy

If what we collect changes, this page changes with it, and the date below changes too. It was last rewritten on 20 September 2026 to correct earlier versions, which stated that we performed no tracking of any kind. That was not accurate, and this page is the correction.

Contact

Questions about any of this go to support@hashtagharvest.com, or through our contact page.