Privacy Policy
Last updated 1 August 2026
- Data controller
- HoloHawk Ltd
- Company number
- 17362118
- Registered in
- England and Wales
- Registered office
- 105 Garstang Road, Preston, Lancashire, England, PR1 1LD
- Contact
- [email protected]
The short version
You can browse HoloHawk without giving us anything. We set no cookies, and we run no analytics, advertising or session-recording trackers of any kind. We only hold personal data when you deliberately give it to us — by applying for a server subscription, paying for one, or reporting a listing.
What we collect, and why
| Data | When | Why | Lawful basis |
|---|---|---|---|
| Contact email, Discord handle, server name, approximate member count, and any message you write | You submit the server application form | To assess your application, contact you about it, and set up your subscription | Steps taken at your request before entering a contract |
| Discord webhook URLs and role IDs | You provide them during application or setup | To deliver deal alerts to the channels you nominate | Performance of our contract with you |
| Stripe customer and checkout identifiers, subscription status | You pay for a subscription | To take payment and know whether your subscription is active | Performance of our contract with you; legal obligation for accounting records |
| A one-way hash of your IP address | You report a listing as fake, wrong or sold | To count each reporter once and stop report spam. We do not store the IP address itself | Our legitimate interest in preventing abuse |
| IP address, held in memory only | Any page request | Rate limiting, to protect the service from abuse. Never written to our database | Our legitimate interest in keeping the service available |
We never store card or payment details. Payments run entirely on Stripe's hosted checkout; Stripe handles your card data and we only receive an identifier and a status.
Deal click counts are recorded per eBay listing, not per person — there is no visitor identifier attached to them, and nothing in that data can be traced back to an individual.
Cookies and browser storage
HoloHawk sets no cookies. We use a small amount of browser storage on your own device, strictly for things you asked for:
- Theme preference — remembers whether you chose light or dark mode.
- Dismissed notices — remembers that you closed a banner so it stays closed.
- Sign-in tokens — for the deals admin and server dashboard, held only for the length of your browser session.
None of this is transmitted to us or used to track you, and all of it can be cleared at any time from your browser settings. Because it is limited to what is strictly necessary to provide the features you requested, no consent banner is required. If we ever add analytics or advertising technology, we will ask for your consent first.
Third parties your browser contacts
Some parts of our pages are loaded from other companies' servers. When that happens, your browser reveals your IP address to them directly, as it does with any website:
- eBay — deal card images are served from eBay's image servers, and outbound deal links go to eBay.
- Google Fonts — web fonts on some pages.
- jsDelivr — a charting library on the dashboard.
- Cloudflare and Railway — our hosting and network providers, which process requests to serve the site.
- Stripe — only if you go through checkout.
We do not sell or rent personal data to anyone, and we do not share it for advertising.
Automated processing of listings
HoloHawk sends publicly available eBay listing information — titles, prices, images and similar details — to AI services to judge whether a listing is a genuine deal. This is public marketplace data about products, not about you, and no decision is made about any individual.
Where your data is held
Our application and database are hosted by Railway. Some of our providers — including Railway, Stripe, Google, Cloudflare and Discord — may process data outside the UK. Where they do, those transfers are covered by the UK's International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
How long we keep it
- Applications and subscription records — for as long as your subscription is active, then for six years, because company and tax law requires us to keep financial records for that long.
- Unsuccessful or withdrawn applications — deleted on request, and otherwise no longer than twelve months.
- Listing reports — kept with their hashed IP for as long as they remain useful for spotting repeat abuse.
- Deal and click records — automatically deleted after 14 days.
- Application logs — automatically deleted after 48 hours.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we have no continuing reason to keep it;
- object to, or ask us to restrict, our processing;
- receive your data in a portable format;
- withdraw consent at any time, where we relied on consent.
Email [email protected] and we will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
HoloHawk is not aimed at children, and server subscriptions are sold only to people aged 18 or over. We do not knowingly collect personal data from children.
Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. Where a change is significant, we will tell existing subscribers by email.