Privacy Policy

Last updated: October 24, 2026

HatchDay is operated by VajgrtLabs ("we," "us," "our"). This Privacy Policy explains what information we collect when you use HatchDay at hatchdayapp.com, how we use it, and the choices you have. By using HatchDay, you agree to this policy.

The short version: we collect your email and the incubation data you enter so the app works and syncs. We hash passwords and never store them in readable form. Payments are handled entirely by Stripe — we never see your card number. We do not sell your personal data. Ever.

1. Information We Collect

Category	What	Why
Account	Email address; password stored only as a salted PBKDF2 hash (never in plaintext or a reversible form)	To create and secure your account and log you in
Hatch data	Batches, species selections, set dates, egg counts, temperature and humidity logs, candling records, tasks, notes, and photo metadata you upload — plus chick orders, breeder records (pens, birds, show records, and sales), and your email-reminder preference, all stored in the same synced database	To provide tracking, charts, reminders, and sync — the core of the service
Devices	A random per-device identifier	To enforce the 3-device limit per subscription and keep your sessions secure
Support & feedback	Messages you send us, including via the in-app feedback form	To respond and improve the app
Usage analytics	An anonymous usage beacon: which screen or feature was used, when, and how long it was viewed. The beacon carries no email, no device identifier, and we do not store your IP address with it — the data is aggregated into anonymous daily counters only	To understand which parts of the app are used and improve them
Payment	Handled by Stripe (see below)	To process Pro subscriptions

2. Payments — Handled by Stripe

All payments are processed by Stripe, Inc. When you check out, you enter your payment details directly with Stripe. We never see, touch, or store your full card number. Stripe shares with us only what we need to run your subscription: your email, the plan purchased, payment status, and subscription identifiers. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

3. How We Use Your Information

To operate HatchDay: run your batches, countdowns, charts, reminders, and sync.
To manage your account, trial, subscription status, and device limit.
To provide customer support and respond to your messages.
To improve the app — for example, understanding which species or features are most used (in aggregate).
To send service-related messages (trial ending, payment issues, important changes). We do not send marketing email unless you separately opt in.

We do not sell your personal data to anyone, and we do not share it with advertisers or data brokers.

4. Storage and Security

Backed-up copies of your data are stored server-side in Cloudflare Workers KV (United States), which is why backed-up batches can survive a lost phone and sync across devices. The working copy is kept on your device (see §5) so the app works offline; it backs up to the server automatically when a connection returns, and the app shows "Backed up ✓" only after the server confirms.
Passwords are stored only as salted PBKDF2 hashes — we cannot read your password, and neither can anyone who obtained our database.
All traffic between the app and our servers is encrypted with HTTPS/TLS.
Access to production data is restricted to VajgrtLabs operators for support and maintenance.

No system is perfectly secure. While we use industry-standard safeguards, we cannot guarantee absolute security — use a unique password for your HatchDay account.

5. Cookies and Local Storage

HatchDay is a web app, so it stores a small amount of data in your browser:

Session token — keeps you logged in (expires after 30 days).
Device identifier — a random ID used for the 3-device limit.
App cache — the service worker caches app files so HatchDay opens offline.
Your records (on-device copy) — your batches, logs, and notes are stored in your browser's local storage so the full app works with no connection. They back up to your account on our server automatically when a connection returns; until the server confirms, the app labels them "On this device only" rather than pretending they're backed up.

We do not use third-party advertising or cross-site tracking cookies. Clearing your browser data will log you out and remove the on-device copy: anything already backed up is safe on the server, but changes still showing "On this device only" (never yet backed up) would be lost with it.

6. Third-Party Services

Stripe — payment processing (stripe.com/privacy).
Cloudflare — hosting, content delivery, and data storage (cloudflare.com/privacypolicy).
Resend — email delivery for password resets and service mail, such as reminder emails you opt into (resend.com/legal/privacy-policy).

We do not embed third-party analytics, advertising, or social-media trackers in the app.

7. Data Retention and Deletion

We keep your account and hatch data for as long as your account exists, so your history is there when you return.
Delete everything: delete your account yourself, immediately, in the app — see "Deleting your account" below. If you can't sign in, email [email protected] from your account email with the subject "Delete my data" and we will delete it for you.
You can also correct your data any time by editing it in the app.

Deleting your account

You can delete your account yourself in the app: Settings → Account → Delete account. You confirm with your password and by typing your email address, and the deletion happens as soon as you confirm — there is no waiting period.

What is deleted: your login (email and password) and everything attached to it — your batches, birds, pens, logs, notes and photos in HatchDay, your data in every Vajgrt Labs app, and your settings. Memberships you hold in other keepers' shared spaces are removed. Afterwards, the same email address can be registered again as a fresh account.

What is kept, and why: payment and billing records (amounts, dates, and transaction identifiers) are kept because tax and accounting law requires it — but your email is removed from them and replaced with a one-way reference that cannot identify you and cannot be used to sign in. If you have a subscription, deleting your account cancels it that same day, so you are never billed again.

8. Children's Privacy

HatchDay is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data, contact us at [email protected] and we will delete it.

9. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. Email [email protected] and we will respond to verifiable requests within a reasonable time.

10. Changes to This Policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, notify you in the app or by email. Continued use after changes take effect means you accept the updated policy.

11. Contact

Privacy questions or requests: [email protected].