Privacy Policy · Hassa Tech

Hassa Tech (هسّه تك) is an Iraqi technology brand. This policy explains what personal information we collect on hassatech.com, why we collect it, and the choices you have. If anything here is unclear, reach us through the contact page.

What we collect

Account details. Your name, email address and username, and your password, which we only store as a one-way hash. If you sign in with Google or GitHub, we receive your name, email address and profile picture from that service.
Security data. For each signed-in session we keep the IP address and a description of the browser and device, so you can review and sign out devices from your account page. If you turn on two-step verification, we keep an encrypted key and one-way hashes of your backup codes.
What you post. Comments, replies, likes, bookmarks and reports you submit.
Messages you send us. The details you enter in the contact, quote and partnership forms, such as your name, email, phone number, company and message.
Newsletter. Your email address, if you subscribe.
Technical data. To fight spam and abuse we store a one-way hash of your IP address with form submissions and comments, not the address itself. Our servers also keep short-lived technical logs.

How we use it

To create and secure your account and let you sign in.
To show your comments, with your name and profile picture, next to the article.
To answer your messages, quote requests and partnership inquiries.
To send the newsletter you subscribed to. Every issue has an unsubscribe link.
To send account emails: email confirmation, password reset and security notices.
To protect the site: rate limits, spam detection and comment moderation.
To count article views. Counts are anonymous totals.

We do not sell personal information. We do not use advertising trackers or third-party analytics.

Cookies and browser storage

We only use what the site needs to work:

A sign-in session cookie.
Two-step verification cookies: a short-lived one while you sign in, and a "trust this device" cookie for up to 30 days if you choose it.
Your language preference.
A cookie that stops the same article view being counted twice in one day.

Your light or dark theme choice is saved in your browser's local storage. We do not use advertising or tracking cookies.

Who we share it with

Only with service providers that run parts of the site for us:

Our hosting provider (Contabo) for servers, the database and file storage.
Google Workspace to send emails.
Google or GitHub, only if you choose to sign in with them or connect them to your account.
Have I Been Pwned, to check new passwords against known data breaches. Only the first five characters of a hash of the password are sent, never the password itself.

We may also disclose information when the law requires it, or to protect our users and the site from abuse.

What is public

Your name and profile picture appear next to the comments you post. Please don't put personal information in a comment unless you want it to be public.

How long we keep it

Account data: for as long as your account exists.
Messages and inquiries: as long as we need them to handle your request and keep reasonable business records.
Newsletter: until you unsubscribe.
Deleted data can remain in our backups for up to 14 days before it is overwritten.

Security

The site runs on HTTPS only. Passwords are hashed, two-step verification is available to everyone and required for our staff, sign-in attempts are rate-limited, and staff access is limited by role. No system is perfectly secure; if you notice a problem, please tell us.

Your choices and rights

Update your name, username and password, manage two-step verification and sign out other devices from your account page.
Unsubscribe from the newsletter at any time.
Ask us for a copy of your data, to correct it, or to delete your account and data, through the contact page. We reply within 30 days.

Children

The site is not directed at children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of this page. For significant changes we will also tell you on the site or by email.

Contact

Questions or requests about your data: contact page.