Privacy Policy

Last updated: October 22, 2026

Hey, Man is built around anonymity. This page explains, in plain language, what we collect, why, and what we never do.

What we collect

Your email address. Collected once when you create an account. It is stored privately and is never shown to other members. We use it to identify your account and, later, to offer optional paid features without making you sign up twice.
Your anonymous handle. Automatically generated (for example, “Rugged Summit”). This is the only identity other members see. We do not ask for your real name. Handles have until now changed every day, so posts were not linked to one another over time. From 17 September 2026 each member keeps one consistent handle instead, so a conversation can be followed across days. This applies only to content posted on or after that date. Everything posted before it keeps the daily handle it was posted under and is not re-attributed, so earlier posts still cannot be linked to one another or to your consistent handle. Notice of this change is sent by email in advance.
What you post. Your posts, replies, and reactions, along with the time they were created.
Basic technical data. Standard server and hosting logs (such as IP address and browser type) kept by our hosting provider for security and reliability.
Anonymous usage counts. We use privacy-friendly analytics (Vercel Web Analytics) to count page views so we know whether the site is being used. It does not use cookies, does not track you across other websites, and does not build a profile of you.
Anonymous session measurement. To understand how many people visit and how long they stay, your browser generates a random session identifier that is cleared when you close the tab. We store only that random id, the times we saw it, and a one-word label for where the visit came from (for example "instagram", "search" or "direct") — no IP address, no link to your account, and nothing that identifies you. We do not keep the full referring web address, so a search you ran or a private page you came from is never recorded. If you sign up after arriving through one of our own tagged links (for example a campus flyer), your account records that same one-word label so we can tell which outreach is working.

What we don't do

We do not sell or rent your personal information.
We do not show your email address to other members, ever.
We do not run advertising trackers or sell data to advertisers.
We do not ask for your real name, address, or phone number.

Who we share data with

We use a small number of service providers strictly to operate the site: a hosting provider (Vercel), a managed database, an email delivery provider, and a bot-protection check on the sign-up form (Cloudflare Turnstile), which looks at signals from your browser to tell people from automated sign-ups. They process data only to provide these services. We may also disclose information if required by law or to protect someone's safety.

Storage on your device

We store a single sign-in token in your browser's local storage so you stay signed in. It is not an advertising cookie and is not shared.

Public content

Anything you post in a room is publicly visible to anyone visiting the site, alongside your anonymous handle. Please don't post information that could identify you or someone else. Sharing contact details or social handles is blocked automatically.

Keeping and deleting your data

We keep your account and posts until you ask us to remove them. You can request deletion of your account and its content at any time by emailing support@heyman.app. We may retain limited records where required for legal or safety reasons.

Your privacy rights

If you are a California resident (or a resident of a state with similar privacy laws), you have the right to request access to, deletion of, or a copy of the categories of personal information we've collected about you, and the right not to be discriminated against for exercising these rights. We do not sell personal information, so there is no "opt-out of sale" needed. To exercise these rights, email support@heyman.app.

Data security

We use reasonable technical and organizational measures to protect your data, but no method of storage or transmission is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected users as required by applicable law.

Children's privacy

Hey, Man is intended for adults 18 and over and we do not knowingly collect information from anyone under 18. If we learn that we've collected information from someone under 18, we will delete it promptly. A parent or guardian who believes their child has provided us information can contact support@heyman.app to request its removal.

Where your data is stored

Hey, Man is operated in the United States, and data is stored and processed on servers located in the United States (via our hosting and database providers). If you access the service from outside the United States, your information will be transferred to and processed in the United States.

Changes

We may update this policy as the service grows. Material changes will be reflected by the “last updated” date above.

Contact

Questions about privacy? Email support@heyman.app.