Trust : data and keys at Hovarns
What we store, what we never ask for, and how our keys are kept. Facts only: no badges, no certifications we do not have.
What we do
What we store
For a Hovarns Account: your Google ID, email, name, a copy of your profile photo no larger than 96 px, your age band, and the date and version of the terms you accepted.
What we never ask for
A password. You sign in with Google, so Hovarns has no password of yours to lose.
Children
Under 18s sign in only with a parent or guardian's consent, recorded with the date (DPDP Act 2023).
How keys are kept
The key that signs licences and updates is kept offline on one computer. The server holds only a key for status answers and revocations.
No secrets in the code
Passwords and keys are kept out of the code and out of our repositories.
Question sources credited
Every question in the question bank carries a credit for where it came from.
No IP addresses in logs
Rate limits use a keyed hash of your address. No IP address, browser string or email is written to a log.
Still to be confirmed
These details are published once Hovarns confirms them.
- Grievance officer
- Grievance officer (DPDP) (to be confirmed)
- Hosting region
- Hosting region (to be confirmed)
- Backups
- Backup policy (to be confirmed)
Read the documents
All drafts, awaiting legal review.