Privacy
Version 1.6 · Effective October 15, 2026
Who we are
Hunchwire is run by Kairic Studio Inc., a Canadian company at 197 Yonge St, Ste 201 #1010, Toronto, ON M5B 0C4. We’re responsible for the personal information described here.
- Questions: hello@hunchwire.com
- Privacy requests and complaints: our Privacy Officer, at privacy@hunchwire.com, or by mail to the address above.
What this policy covers
- hunchwire.com, our own website.
- app.hunchwire.com, where founders and their AI agents run their tests.
- Test pages on hunchwire.site (for example idea.hunchwire.site) and on founders’ own domains. Founders use Hunchwire to put up pages for ideas they’re testing and to collect sign-ups. Some of these tests are ours.
On a founder’s test page, the founder decides what to collect and what to do with it. They’re responsible for your information, and we store and process it for them, under our data processing agreement with them. The sign-up form names who is asking for your email. If a test is ours, this policy applies to it in full.
What we collect
When you visit a page on hunchwire.com or a test page:
- the pages you view, how long each was visible and how far you scrolled;
- the page you came from, and any campaign tags or referral code in the link (such as
utm_sourceor?ref=); - your device type and browser (worked out from your browser’s User-Agent, which we don’t keep);
- your country, and the city you signed up from, as reported by our network provider, Cloudflare;
- which tracked buttons you click, such as a pricing plan.
Your browser keeps a random ID in local storage, so we can count you once across pages and visits, and, if a site’s owner opted their own browser out of the count, a flag saying so. We don’t store your IP address or your full User-Agent.
When you sign up on a form: your email address, which form you used, the page you were on, the link that brought you there, the consent wording you were shown and who it named, and, if you joined through a friend’s link, that link’s code.
Log-in forms on test pages only count the attempt. Neither your email nor your password leaves your browser.
Sign-ups we refuse (throwaway addresses, domains that can’t receive mail, too many attempts): the email, the form, the page and the reason, to spot abuse.
If you have a Hunchwire account: your email address, your password (stored only as a one-way hash), and, for each signed-in device, its IP address and browser so you can see where you’re signed in. If you add IP addresses to your ignore list, so your own visits don’t count, we keep them until you remove them or close your account. If you connect an AI agent, we keep its name, a hash of its key and a log of what it changed.
How we use it
- To show founders, and ourselves, whether people want an idea: visits, sign-ups and clicks become their analytics.
- To email you about the idea you signed up for, if the form asked. Every email tells you how to unsubscribe.
- To run the service: sign you in, keep it secure and block abuse.
We don’t sell personal information, and we don’t share it for advertising. We don’t use it to build profiles across founders’ tests.
How long we keep it
| What | How long |
|---|---|
| Sign-ups | Until the test ends plus 12 months, or until you or the founder delete them |
| Visits and clicks from people who didn’t sign up | 12 months |
| Refused sign-ups | 30 days |
| Account details and signed-in devices | While your account is open. Signing out removes that device. |
| Logs (no email addresses, IP addresses or query strings) | 30 days |
| Backups (taken daily) | 14 days, then they’re overwritten |
| Record of a deletion request (date, counts, a scrambled fingerprint of the email) | As long as we send email |
| Private log of requests | 2 years |
When a founder deletes a test, its sign-ups, visits and clicks are deleted with it. Anything deleted is gone from backups within 14 days.
Cookies and tracking
Hunchwire sets no cookies on test pages. Hunchwire counts visits with the random ID in local storage described above. Founders write their own pages, and a founder who adds other tools to a page is responsible for them.
Our own cookies are only for signing in:
| Cookie | Where | Why | How long |
|---|---|---|---|
session_id | app.hunchwire.com | Keeps you signed in | Until you sign out |
_hunchwire_session | app.hunchwire.com | Security for forms, and where to return after signing in | Until you close your browser |
signed_in | hunchwire.com | Remembers that you have an account, so hunchwire.com can send you to the app. It holds no account details. | Until you sign out |
Cloudflare, which protects our sites, may set its own cookies (such as __cf_bm) to tell people from bots. They aren’t used for advertising.
No ad pixels or third-party analytics. We don’t use Google Analytics, Meta, LinkedIn, Reddit or any other conversion pixel. When we advertise, we measure results with Hunchwire’s own visit counts and campaign tags. If that ever changes, we’ll name the pixel here first.
Where your information is kept, and who helps us
Our servers and backups are in Google Cloud’s Toronto region, in Canada. These providers process information for us:
| Provider | What they do | Where |
|---|---|---|
| Google Cloud | Hosts our servers, database, backups and logs | Toronto, Canada |
| Cloudflare | Carries all traffic to our sites, so it sees visitors’ IP addresses; protects them from attacks, and reports each visitor’s country and city | Worldwide, including the United States |
| Google Fonts | Serves the fonts on hunchwire.com and the app. Your browser contacts Google, which receives your IP address. | Worldwide |
| Amazon Web Services (Amazon SES) | Delivers the email Hunchwire sends: account emails such as password resets, and the emails founders send the people who signed up for their tests | United States (Ohio) |
| Google Workspace | Our email, when you write to us or we write to you | Worldwide, including the United States |
So your information may be processed outside Canada, where the law may let authorities there access it. Each provider is bound by contract to protect it and to use it only to serve us.
Founders can see the information collected on their own tests, and AI agents they connect can see it too, within the permissions they give. An agent sees email addresses only if the founder allows it.
We disclose information to authorities only when the law requires it.
Your choices
- Stop emails: reply “unsubscribe” to any email, or write to us. We stop within 10 business days and delete your data (below).
- See, correct or delete what we hold about you: write to privacy@hunchwire.com from the address the data is about. We answer within 30 days.
- Withdraw consent to emails at any time. It doesn’t affect emails already sent.
Kairic Studio Inc. answers every request within 30 days. We act only on a request from the email address the data is about, after confirming it by replying to that address. An unsubscribe is handled as a deletion: we stop emailing you within 10 business days. Deleting removes your sign-ups, refused sign-ups, and the visits and clicks from your browser, in every test that holds them. It doesn’t remove visits from a browser you share with someone else who signed up.
After a deletion we keep a record of the request: its date, how much was deleted, and a scrambled fingerprint of your email (a keyed hash), never the email itself. We keep it for as long as we send email, and use it only so we never email that address again. We also keep a private log of requests for 2 years. If the address signs up again, we don’t email it until you confirm it’s you: by writing to us from that address, or through the confirmation link we email when you sign up again. Backups age out within 14 days.
Signed up on a founder’s test? Write to the founder first: the form names them, and they decide about your information. You can also write to us, and we’ll delete it from Hunchwire or pass your request on.
Security
All traffic is encrypted, and web traffic reaches our servers only through Cloudflare. Founders and their agents see only their own tests, and every change an agent makes is logged. If a breach puts you at real risk of significant harm, we’ll tell you and the Privacy Commissioner of Canada.
Complaints
Write to our Privacy Officer at privacy@hunchwire.com. If we don’t resolve it, you can complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d’accès à l’information.
Changes
When this policy changes, we’ll update the version and date at the top, and tell account holders of any significant change by email before it applies. Past versions are listed here.
- Version 1.6, effective October 15, 2026: when an address signs up again after a deletion, we email it a confirmation link first, and nothing else until it’s clicked.
- Version 1.5, effective October 12, 2026: Amazon SES, which delivers the email Hunchwire sends, processes it in the United States (Ohio), not Montreal.
- Version 1.4, effective October 11, 2026: we name Amazon SES, which delivers the email Hunchwire sends.
- Version 1.3, effective October 10, 2026: we keep the city you signed up from, as Cloudflare reports it, beside your country.
- Version 1.2, effective October 7, 2026: account holders can keep their own visits out of the counts, so we may keep the IP addresses they add to their ignore list, and a browser flag when they opt their own browser out.
- Version 1.1, effective October 7, 2026: added our mailing address.
- Version 1, effective October 6, 2026: first version.