Privacy notice

Last updated 8 October 2026

HatchCue is a private dashboard for independent developers. It is operated by Olaf Olgiati, the party responsible for the personal information described here. Questions or requests: olaf.olgiati@gmail.com.

What we collect

• Beta requests: your name, email address and message, plus the IP address and browser details of the request (to prevent abuse).
• Your account: name, email address, a securely hashed password, timezone and reminder preferences, when you were last active, and two-factor sign-in details if you turn it on.
• What you put into HatchCue: projects, components, releases, links, actions, goals, expenses, notes and prompts, playtests, captures (notes, screenshots, marked-up copies, voice recordings and transcripts), issues, coding exports and imported results.
• Imports: public information from store listings and websites you ask us to fetch, such as names, descriptions and icons.
• Service records: signed-in sessions (with IP address and browser), devices signed in to the companion app, AI request records (purpose, status, usage and errors), reminders, project history, and when a calendar app last fetched your calendar link.

Why we use it

• To run the service you signed up for: storing your projects and captures, building exports, reminders and the calendar feed.
• To confirm and reply to beta requests, and to send invitations, password resets and the reminder emails you turn on.
• To keep the service secure and working: rate limits, preventing abuse, and fixing errors.

We don't sell personal information or use it for advertising.

AI features

AI is optional. When you use an AI feature (for example drafting issues from captures, reading pasted project notes, or picking next actions), the relevant text, such as your notes and transcripts, is sent to the operator's AI gateway. That gateway passes it to a third-party AI model provider to produce the result. Screenshots and images are not sent. If voice transcription is switched on, the recording you ask to transcribe is sent in the same way. AI results are labelled as suggestions and are only checked against your own records.

Who else processes it

• The hosting provider that runs our server, and the email provider that delivers our messages.
• Cloudflare Turnstile, which checks the beta request form for automated abuse using technical information about your browser and connection.
• Sentry, for error reports. These contain technical details about what went wrong and are configured to leave out personal identifiers such as IP addresses.
• Google Analytics, only if you accept analytics cookies (see below).
• Your calendar provider (for example Apple, Google or Microsoft), only if you subscribe to your calendar link. It fetches and keeps a copy of the event titles.

Some of these providers process information outside South Africa.

Cookies

HatchCue uses two essential cookies: one keeps you signed in and one protects forms against forgery. With your permission, Google Analytics sets cookies to count visits. Your choice is remembered in your browser, and you can change it at any time with Cookie settings in the footer. Declining doesn't affect how HatchCue works.

How long we keep it

• Your account and everything in it stay until you delete your account. Deleting it removes the data from the live service straight away.
• Server backups are kept for 14 days, so deleted data disappears from backups within that time.
• Beta requests are kept until they are dealt with, and are deleted along with the account they lead to.

How we protect it

Connections use HTTPS, passwords are hashed, and screenshots, recordings and exports are stored privately and served only to their owner. Each account's records are kept separate from every other account's. Two-factor sign-in is available in Settings.

Your rights

You can ask to see, correct or delete the personal information we hold about you, or object to how it is used. You can delete your account yourself at any time in Settings → Delete account. For anything else, contact us at olaf.olgiati@gmail.com.

If you're in South Africa and unhappy with how we handle your information, you can complain to the Information Regulator. Elsewhere, you can contact your local data protection authority.

Changes

We'll update this page when our practices change and adjust the date at the top.