Add to ChromeSee the Extension Terms of Service and Extension Privacy Policy for its permissions, data handling and connected services.
We use account and usage data to run Hashtag Sonar, protect access and understand how people use our hashtag tools.
About this policy
This policy describes information processed through hashtagsonar.com, the Hashtag Sonar website and its account workspace. For privacy questions and requests, contact [email protected].
Hashtag Sonar is currently a pre-launch product. Email registration, Google sign-in and Free accounts are available. Paddle checkout is currently available in Sandbox for testing. This policy describes current features; we will update it when data handling changes.
Information we collect
- Account information: for accounts provisioned in the system, your name, email or login, password hash, role, status, plan and account creation details. Passwords are stored as hashes.
- Workspace data: saved hashtags, collections, selected niche and account preferences.
- Usage information: search queries and settings, results counts, success or failure, timestamps and the page associated with a search. Logged-in workspace searches can be associated with your account.
- First guest use: a browser identifier, the URL and type of the page where first use occurred, the event and timestamp. First use is measured when real results or statistics remain visible for about 1.5 seconds. This is a viewing signal, not proof that someone read the information.
- Technical and security information: network IP information, sign-in attempts and server error records. Our hosting and network providers may also process request metadata.
- Messages: information you send when contacting us. Please do not send passwords or payment card details.
Hashtag view and video counts are research data about hashtags. Viewing these metrics does not require access to your TikTok account.
How we use information
We use information to provide the tools, maintain accounts and collections, apply access limits, investigate errors, protect the service, answer requests and understand which pages introduce guests to the product.
Where applicable data protection law requires a legal basis, service-related processing supports providing the service you request; security and operational analysis support our legitimate interests, subject to your rights. Where consent is required for optional storage or processing, consent requirements apply. This policy itself is not a request for consent.
Cookies and browser storage
| Storage | Purpose | Duration |
|---|---|---|
sonar_account | Account and form-security session. May also be created by the guest measurement endpoint. | Session cookie |
sonar_admin | Administration session and exclusion of signed-in administrators from first-guest-use measurement. | Session cookie |
sonar_guest | Recognises the same browser for first-use attribution. A hash of the identifier is stored in our database. | 180 days from creation |
sonar-selected-tags | Keeps the set of tags selected in public search. | Browser session storage |
sonar-first-use-source | Preserves the source page when a search opens a results page. | Browser session storage; attribution accepts it for up to 2 minutes |
You can clear or block storage through your browser. This may affect sign-in, selected tags and measurement. Clearing the guest cookie or using another browser may cause a new first-use record. Cookie expiry does not automatically delete a previously stored database record.
Cloudflare may also use security-related cookies depending on the protection applied to a request. See Cloudflare’s privacy policy. Google Tag Manager is integrated to manage measurement tags. The container may load tags configured by Hashtag Sonar; those tags determine what analytics data and cookies are used. We do not include your name, email or password in the site’s dataLayer initialization.
Service providers and disclosure
The service uses hosting, database and network infrastructure, including Cloudflare for traffic delivery and protection. Providers may process information needed to operate these services. We may disclose information when required by law or necessary to investigate abuse and protect the service.
When you choose Google sign-in, Google authenticates you and shares your verified email, name and unique Google account identifier with us. We use this information to create or connect your account and sign you in. We do not receive your Google password, request access to Gmail or Drive, or retain Google access tokens. Google processes the sign-in under its own privacy policy. Paddle provides our checkout and processes payment details directly. We pass your account email to prefill checkout; card details are not stored on our server.
When a signed-in user starts checkout, IPWhois.io receives their current public IP address to estimate country and postal code for checkout prefilling. We cache only these location fields, associated with a hash of the IP, in the account session for up to 24 hours. The location is editable in checkout and is not saved to the account database by this lookup.
Service providers may process information outside your country. The safeguards required by applicable law must be considered for any such processing.
Retention and security
Account and workspace information is kept while needed to provide the service. Usage, first-use and security records are currently stored without an automated expiry schedule. We review retention when handling deletion requests and when the purpose for keeping information ends. Backup copies and records needed for legal or security reasons may remain for longer.
We use HTTPS, password hashing, access controls and protected sessions. No online service or storage system can guarantee absolute security.
Your choices and requests
You can edit your name and password in the workspace and manage your saved collections. To request access, correction or deletion of personal information, or to raise an objection to processing, email [email protected]. We may need to verify your identity before acting.
Depending on your location, you may also have rights to restrict processing, receive a portable copy of information, withdraw consent where consent is the legal basis, or complain to a relevant data protection authority. Applicable legal exceptions may limit a request.
Children and updates
Hashtag Sonar is intended for adults and is not directed to children. If you believe a child has provided personal information, contact us so we can review it.
The date at the top identifies this version. We will update this page when our practices change and provide additional notice where required.