Privacy

Four services run the product. Clerk handles signing in and the subscription, Convex holds the database and the file storage, Resend delivers email, both the one the people who run hola.page sends a page owner and a gift a page emails to somebody who joined, and Vercel runs the site itself. All four act for the people who run hola.page rather than for themselves, which means they only use the data to run the product.

The name and email address on your account come from the sign-in service. Alongside them, the database holds your page: its address, the address you signed up with, your display name, your bio, your links, the two images, whether it's published and whether it's marked as adult content.

If you point a domain of your own at your page, its name is kept with the page and given to Vercel, so the page can answer there. Removing the domain or deleting the page takes it off both.

Billing leaves a record of the plan behind: which plan it is, what it costs, when the period ends, and whether it's still in its free days. Card details never reach this product. They go to the payment provider through Clerk, and that's also where receipts live.

Two weeks before your plan renews, you get one email saying when it renews and what your page did that year, sent to the address on your account. You can turn it off in your dashboard. A note of when it was sent is kept with your page and deleted with it.

If you withdraw from your contract, the moment your withdrawal arrived and the address the email confirming it went to are kept as the record of it.

If you offer a gift for joining, what it is, the message you wrote or the file you uploaded, and whether it's emailed are kept with your page, with a count of how many times the file was downloaded. Nobody sees the message or the file without joining, and it's all deleted with your page. An emailed gift has the address on your account on it, so that answers reach you.

Two things are stored: the email address you typed, and the moment you agreed to it. The page owner can read that list, export it as a CSV file, and remove an address from it. Nobody else can see it, and it isn't used to email you anything from the people who run hola.page.

One more value sits on that row, a hash of the connection the signup came from. It exists so a single source can't fill a list on its own, and it can't be turned back into an address.

So nobody can sign a stranger up to page after page, each signup is also counted against a hash of the email address for a day. That hash can't be turned back into the address either, and it's deleted once the day is over.

If the page offers a gift for joining, you get it on the page, or by email if the owner has chosen that. To email it, your address is handed to Resend, and it waits in the queue that sends it until it has gone. Downloading a gift file is counted as a number the owner sees, and nothing about who downloaded it is kept. To stop one connection downloading over and over, the same kind of hash is held and cleared within the hour.

When somebody opens a page, hola.page counts it. It also counts which of the page's links they follow, and the name of the site that sent them, such as instagram.com, without the rest of that address. If the owner tagged the address they shared, such as hola.page/sam?ref=tiktok, the tag is counted instead. Those counts are added up into totals for each day, shown to the page's owner and nobody else, and kept for 13 months.

No cookie is set to do it, and nothing is kept about the visitor: not their address, not their browser, and not which other pages they've seen. So that one source can't flood a page's numbers, the connection a visit came from is turned into a hash that can't be turned back into an address, and that hash is deleted within the hour.

hola.page's own pages, this one included, are counted the same way, and only hola.page's staff see those counts.

Signing in sets the cookies the sign-in service needs to keep you signed in, and those are its cookies rather than ours.

There's one more, and only on a page marked as adult content: it remembers for 30 days that a visitor confirmed they're 18 or over, so the warning doesn't come back on every visit. It records that confirmation and nothing about which page it was for.

There's no advertising on any page, and nothing from any other company loads on one.

A signup stays until the owner removes it or the page it belongs to is deleted. Deleting a page from the dashboard removes the page, its links, its pictures, its list and its counts, so nothing is left behind pointing at somebody who has gone.

A page whose plan has stopped is deleted the same way 30 days later, unless the plan starts again before then.

A page someone took over from hola.page, which kept the address for them, is deleted the same way, except for its address and the name and line hola.page kept it under: those go back to hola.page to hold again, so the name can't be claimed by someone else.

The subscription record belongs to the billing account rather than to the page, so deleting a page leaves it in place until the plan itself ends.

Write to hello@hola.page and ask for a copy of what's held about you, a correction, or its removal. If you're on somebody's list, the owner can see and export your address, so the quickest route is usually to ask them; coming to us works too.

hola.page isn't for children, and an account needs somebody old enough to enter a contract where they live. A page marked as adult content is for adults only.

The services above run data centres in more than one country, so your data may be handled outside the country you live in.

This page covers hola.page's own handling of data. A page owner's own use of the email list they collected is theirs to answer for, which is why the terms say what a list may and may not be used for.