Privacy Policy
Effective date: 1 July 2026
Hooklet is operated by 21 Sierra, based in Australia. This policy explains what personal information we collect, how we use it, and your rights in relation to it. We've written it to be read, not to fill a legal checkbox.
What we collect
When you create an account we collect your email address and a hashed version of your password. We never store your password in plaintext.
When you subscribe to a paid plan, payment is processed by Stripe. We receive a Stripe Customer ID and Subscription ID from Stripe but never see or store your full card number or CVV. Stripe's privacy policy governs how they handle your payment data.
When you use Hooklet, we store the webhook requests your endpoints receive — including their headers, body, source IP address, and timestamp. This is the core function of the product: capturing what arrives at your URL so you can inspect and replay it.
We do not use analytics trackers, advertising pixels, or third-party tracking scripts on any page.
How we use it
- Your email address is used to authenticate you and, if needed, to contact you about your account (billing issues, service notices, security alerts). We do not send marketing email.
- Captured webhook data is stored solely to provide the service to you. It is not read by us, shared with third parties, used for training, or sold.
- We use server logs for debugging and security monitoring. Logs are retained for a short period and are not linked to individual accounts beyond what's necessary for diagnosing specific errors.
Data retention
Captured webhook requests are automatically deleted based on your plan's retention window: 3 days on Free, 30 days on Basic, and 90 days on Pro. Your account data (email, billing status) is retained for as long as your account exists.
If you delete your account, your account data and all associated webhook captures are permanently deleted within 30 days.
Where data is stored
Hooklet runs on a VPS located in Australia. Your data does not leave this server except where Stripe processes payment information on our behalf (Stripe's infrastructure spans multiple regions).
Your rights
You have the right to access the personal information we hold about you, correct inaccurate information, request deletion of your account and data, and withdraw consent at any time by closing your account.
To exercise any of these rights, email us at support@hooklet.dev. We'll respond within a reasonable time and no later than 30 days.
Cookies
Hooklet uses a single session cookie (hooklet_session) to keep you logged in. This cookie is strictly necessary for the service to function and is not used for tracking. We do not use any third-party cookies.
Children
Hooklet is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we'll delete it promptly.
Changes to this policy
If we make material changes to this policy, we'll update the effective date above. For significant changes, we'll notify you by email.
Contact
Questions about this policy or your data: support@hooklet.dev