Privacy Policy | CommentHunter - [CommentHunter](/) [Docs](/docs) [Privacy](/privacy) [Terms](/terms) [Sign in](/login) Last updated: September 3, 2026 # Privacy Policy This Privacy Policy explains how **CommentHunter** ("CommentHunter", "we", "us", or "our"), operated at [https://commenthunter.click](https://commenthunter.click), collects, uses, discloses, stores, and protects information when you use our website, web application, APIs, and related services (collectively, the "Service"). By using the Service, creating an account, or signing in with Google, you agree to this Privacy Policy. If you do not agree, please do not use the Service. ## 1. Who we are CommentHunter is a software tool that helps users extract, export, analyze, and manage publicly available comments and related metadata from social platforms and other public web sources that the user provides via URL. The Service is provided by the operator of commenthunter.click. For privacy requests, contact [maksgamal@gmail.com](mailto:maksgamal@gmail.com). Product support: [max@mail.commenthunter.click](mailto:max@mail.commenthunter.click). ## 2. Information we collect ### 2.1 Account and authentication data When you create an account or sign in, we may collect: Email address - Display name / full name (if provided by you or your identity provider) - Profile photo URL (if provided by your identity provider) - Unique user ID created by our authentication system - Authentication metadata such as sign-in timestamps, session tokens, and provider identifiers ### 2.2 Google Sign-In / Google user data If you choose **Continue with Google**, Google shares with us basic profile information according to the OAuth scopes we request. Those scopes are limited to standard sign-in profile information, typically: - Google account email address - Name - Profile picture - A unique Google user identifier (subject) We use Google user data **only** to: - Create and authenticate your CommentHunter account - Display your name and avatar in the product UI - Send account-related emails (security, transactional, or billing notices) to the email associated with your account We do **not** receive or store your Google password. We do **not** sell Google user data. We do **not** use Google user data for advertising profiling unrelated to CommentHunter account authentication. We do **not** transfer Google user data to third parties except to our infrastructure processors needed to operate authentication and the Service (for example our auth/database host), and only as described in this policy. Google's processing of your data is governed by [Google's Privacy Policy](https://policies.google.com/privacy). You can revoke CommentHunter's access at any time in your Google Account permissions: [myaccount.google.com/permissions](https://myaccount.google.com/permissions). If you sign up with email and password instead, we store a securely hashed password managed by our authentication provider. We do not store plaintext passwords. ### 2.3 Billing and payment data If you purchase a plan or credits, payment processing is handled by Stripe. We may receive and store billing-related identifiers such as Stripe customer ID, subscription status, invoice references, plan type, purchase timestamps, and credit balance. We do not store full payment card numbers on our servers; card data is processed by Stripe under their privacy policy. ### 2.4 Service usage and export data To provide the core product, we process: - URLs and platform identifiers you submit for comment extraction - Extracted comment content and metadata (author names/handles, timestamps, likes, replies, and similar publicly available fields) - Export job history, status, limits, and credit usage - Giveaway / winner-picker inputs and results you generate in the product - Technical logs needed for reliability (request timing, provider success/failure, error messages) Comment data generally originates from publicly available pages or APIs you request us to access. You are responsible for ensuring you have the right to process that content under applicable laws and platform terms. ### 2.5 Communications data If you contact us or receive product emails (account confirmation, export-ready notices, billing receipts, optional marketing), we process your email address, message content, and related delivery events (sent, bounced, complained, unsubscribed). Marketing emails include an unsubscribe link. ### 2.6 Device, cookie, and analytics data We may automatically collect: - IP address, browser type, device type, operating system, and approximate location derived from IP - Pages visited, referring URLs, and interaction events within the Service - Cookies and local storage used for session authentication, preferences, and fraud/abuse prevention - Analytics and advertising measurement identifiers (for example Google Analytics / Google Ads tags, or similar tools when enabled) to understand product usage and measure campaigns ## 3. How we use information We use collected information to: - Create and manage accounts, including Google OAuth sign-in - Provide, operate, secure, and improve comment extraction, exports, dashboards, APIs, and giveaway tools - Process payments, allocate credits, prevent fraud, and handle billing support - Send transactional emails and, where permitted, product updates or marketing - Monitor reliability, diagnose errors, and enforce rate limits / abuse prevention - Comply with legal obligations and respond to lawful requests - Communicate with you about support, security, or policy changes We do **not** sell your personal information. We do not use Google user data for purposes unrelated to providing or improving CommentHunter authentication and account features. ## 4. Google API Services User Data Policy / Limited Use CommentHunter's use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Google user data obtained via Sign-In is used only to provide or improve user-facing authentication and account features within CommentHunter and is not used for unrelated advertising or sold to data brokers. ## 5. Legal bases (EEA/UK users) Where applicable, we process personal data under one or more of these bases: - **Contract** — to provide the Service you requested - **Legitimate interests** — security, product improvement, fraud prevention, analytics (balanced against your rights) - **Consent** — optional marketing emails, certain cookies/ads tags where required - **Legal obligation** — accounting, tax, or regulatory requirements ## 6. How we share information We share data only with processors and partners needed to run the Service, including: - **Supabase** — authentication, database, storage, and edge functions - **Google** — Google Sign-In / OAuth and optional analytics or ads measurement - **Stripe** — payment processing - **Resend** (or similar) — transactional and marketing email delivery - **Extraction providers** (for example Apify, RapidAPI, ExportComments, or similar) — to fetch public comment data you request - **Hosting / CDN** (for example Vercel) — to serve the website - Professional advisors or authorities when required by law or to protect rights, safety, and security These providers process data under their own policies and contractual obligations. We require them to use personal data only to provide services to us, not for independent marketing of your account data. ## 7. Data retention and deletion We retain account data while your account remains active. Export jobs, comment results, and related logs are retained to provide history, billing/credit accounting, abuse prevention, and support—typically for the life of the account or a shorter period if we periodically purge old jobs. Payment records may be retained longer as required by tax and accounting laws. To request deletion of your CommentHunter account and associated personal data (including Google Sign-In profile data we stored), email [maksgamal@gmail.com](mailto:maksgamal@gmail.com) from the address on your account. We will delete or anonymize personal data within a reasonable period, except limited records we must keep for legal, security, or billing reasons. You may also revoke Google access separately at [myaccount.google.com/permissions](https://myaccount.google.com/permissions). ## 8. Security We use industry-standard safeguards such as HTTPS/TLS in transit, access-controlled databases, hashed credentials for password accounts, and least-privilege keys for backend services. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. ## 9. International transfers Our processors may store or process data in the United States, European Union, or other countries. Where required, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) provided by our vendors. ## 10. Your rights and choices Depending on your location, you may have rights to: - Access the personal data we hold about you - Correct inaccurate data - Request deletion of your account and personal data - Object to or restrict certain processing - Export / portability of data you provided - Withdraw consent for marketing emails (unsubscribe link in each email) - Disconnect Google Sign-In via your Google Account permissions settings To exercise these rights, email [maksgamal@gmail.com](mailto:maksgamal@gmail.com) from the address associated with your account. We may need to verify your identity before fulfilling the request. ## 11. Children's privacy The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child provided data to us, contact us and we will take appropriate steps to delete it. ## 12. Third-party links and platforms The Service may link to third-party sites or interact with social platforms. Their privacy practices are outside our control. Review the policies of those platforms before submitting URLs or personal information to them. ## 13. Changes to this policy We may update this Privacy Policy from time to time. We will post the updated version at [https://commenthunter.click/privacy](https://commenthunter.click/privacy) and revise the "Last updated" date. Material changes may also be communicated by email or in-product notice when appropriate. Continued use of the Service after changes become effective constitutes acceptance of the updated policy. ## 14. Contact Privacy requests: [maksgamal@gmail.com](mailto:maksgamal@gmail.com) Product support: [max@mail.commenthunter.click](mailto:max@mail.commenthunter.click) Website: [https://commenthunter.click](https://commenthunter.click)