Privacy

This is the privacy notice for heartipedia.com, which is operated by Freedom! Family Limited. It lists what the site does today.

What is stored when you sign in

Signing in with your He.art account gives Heartipedia your Google account id, your email address, your name and your profile picture. They are stored so that your suggestions can be attributed to you and shown to you. A visitor who only reads is not identified by Heartipedia: the only records of a visit are the page counts and the server logs described below.

Page counts

Pages count how often they are read, and for how long, with Stats.he.art, our own visitor counter. While a page is open, a small script sends the page’s address and title, the site you came from, your browser’s language, and how long the page was in view while you were using it. It sets no cookie and stores nothing in your browser. Unique visitors are counted from a code made from your address and browser that changes every day; your address itself is not stored. While you are signed in, each page you read is also counted with your email address, which only the site’s administrators can see.

Heartipedia also uses Google Analytics, a service of Google LLC, to count visits. Through cookies it collects the pages you visit, your approximate location, your device and browser, and the page that sent you here. Google explains how it uses that information in How Google uses information from sites or apps that use our services.

Heartipedia also uses Microsoft Clarity, a service of Microsoft, on its public pages: heatmaps and session recordings that show how pages are used, such as where readers click and how far they scroll. Anything typed is masked, and so is your name in the account menu. Microsoft explains how it handles that information in the Microsoft Privacy Statement.

Signing in at accounts.he.art

You sign in at accounts.he.art, where every site of ours signs in, with your Google account. It passes those four fields to Heartipedia once, through a signed link that expires after sixty seconds. The two sites keep separate cookies.

Cookies

A session cookie keeps you signed in for thirty days. A short-lived cookie protects the sign-in from accounts.he.art. A token cookie protects forms. Google Analytics sets its own cookies (named _ga) to tell one visit from the next, and Microsoft Clarity sets its own (named _clck and _clsk). No advertising cookies are set.

Visitors in the EU, the EEA, the UK and Switzerland are asked first: neither Google Analytics nor Microsoft Clarity loads for them until they choose Accept. Anyone, wherever they are, can change their choice with “Cookie settings” at the foot of every page; Decline turns both off. The choice is kept for twelve months in a cookie named analytics_consent.

YouTube

This site uses YouTube API Services to play video moments. No YouTube code loads until you click a moment or the play button; from then on, the player is subject to YouTube’s Terms of Service and the Google Privacy Policy. The player is loaded in YouTube’s privacy-enhanced mode. Video metadata obtained from YouTube is refreshed or removed within thirty days.

Server logs

Request logs (address, path, time, user agent) are kept for a limited period for security and debugging.

Deleting your account

Account deletion will anonymize your account (email, name and picture removed) while keeping any text you contributed under its license. The self-service control for this is not built yet; write to the address on the copyright page in the meantime.