Privacy

Data controller

hbar Overtwo. Postal and statutory contact via the Impressum. For data requests, write hello@hbar.systems.

What we process

hbar.university processes the minimum data necessary to serve the site. We do not operate a user account system, we do not run analytics, and we do not share data with advertising or tracking networks.

• Access cookie. hbar_university_access, value granted, lifetime 24 hours, HttpOnly, SameSite=Strict, Secure in production. Set only after a visitor enters a valid access key at /unlock. It records nothing about the visitor beyond the fact of access. No fingerprinting, no user identifier, no analytics.
• Server logs. Our hosting provider (Vercel Inc., San Francisco, USA) logs incoming requests for abuse prevention and operational diagnostics. Logs may include IP address, user agent, request path, and timestamp. Retention is governed by Vercel’s own policy. We do not aggregate or enrich these logs.
• Third-party CDN. Math rendering loads assets from cdn.jsdelivr.net. The CDN operator may observe the IP address of visitors when fetching math libraries. This is strictly for static asset delivery.
• Email. If you write to hello@hbar.systems or abuse@hbar.systems, we retain the message for the purpose of replying and for as long as relevant to the subject.

What we do not do

We do not run Google Analytics, Plausible, PostHog, Mixpanel, Segment, Sentry, Fathom, Hotjar, Amplitude, Vercel Analytics, or any equivalent third-party analytics or behavioral tracker. We do not embed social media pixels. We do not sell, rent, or share personal data. We do not build profiles of visitors.

Legal basis (GDPR)

The access cookie is strictly necessary to deliver the gated content a visitor has requested, under GDPR Art. 6(1)(f) and § 25 (2) Nr. 2 TTDSG. Server logs are processed for legitimate interest in site security and operation under Art. 6(1)(f). Email correspondence is processed under Art. 6(1)(f) or, where a contract is formed, Art. 6(1)(b).

Your rights

Under GDPR you have the right to access, rectify, erase, and port any personal data we hold about you, and to object to processing. Because we operate no user accounts and perform no tracking, the data we hold is limited to (a) access cookies on your own device, which you can clear at any time, (b) incidental server logs, and (c) any email you send us. To exercise these rights, write hello@hbar.systems. You also have the right to lodge a complaint with a supervisory authority.

Canonical policy

This notice describes the behavior of hbar.university. The constellation-wide policy, when published, will live at hbar.legal and will govern. See also the Impressum and Legal notices.