Privacy Policy

Last updated: January 2026

1. Information We Collect

HackerBadges collects information to provide our badge creation and verification services:

Basic Usage (Free)

• X (Twitter) Handle & Avatar: When you create a badge, we fetch your public X profile information to display on your badge.
• Badge Data: The milestone information you enter (title, value, style preferences).
• Account Info: If you create an account, we store your email address and authentication data.
• Analytics: Anonymous usage data to improve our service.

Connect Feature (Paid)

When you use the Connect feature, we access additional data from your payment platforms:

• Stripe: We access read-only data including MRR, total revenue, and customer count via your API key. We do NOT access payment methods, customer emails, or financial credentials.
• LemonSqueezy: We access read-only data including orders, revenue totals, and store information via your API key.
• Polar: We access read-only data including subscriptions and revenue metrics via your API key.
• API Keys: Your API keys are encrypted and stored securely. They are only used to fetch revenue data for badge generation.

2. How We Use Your Information

• To generate and display your badges
• To enable sharing and embedding of your badges
• To automatically create verified badges when you hit milestones
• To sync your revenue data every 4 hours (Connect users)
• To improve our service and user experience
• To process payments (via LemonSqueezy)

3. Data Storage & Security

• Your data is stored securely in our database (Convex)
• API keys are encrypted at rest
• Published badges are publicly visible
• We do not sell your data to third parties
• We retain your data until you delete your account or disconnect integrations

4. Third-Party Services

We use the following third-party services:

• Convex: For data storage and real-time updates
• Vercel: For hosting
• LemonSqueezy: For payment processing
• Unavatar: To fetch your X/Twitter profile avatar
• Stripe API: To fetch your Stripe revenue data (Connect users)
• LemonSqueezy API: To fetch your LemonSqueezy revenue data (Connect users)
• Polar API: To fetch your Polar revenue data (Connect users)

5. Your Rights

You have the right to:

• Access your badge data
• Delete your badges (if logged in)
• Disconnect payment platform integrations at any time
• Request full data deletion by contacting us
• Revoke API key access by regenerating keys in your payment platform

6. Data We Do NOT Collect

• We do NOT access your customers' personal information
• We do NOT access payment method details
• We do NOT store credit card information
• We do NOT have write access to your payment platforms

7. Children's Privacy

HackerBadges is not intended for use by children under 13. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or in-app notification.

9. Contact

For any privacy-related questions, reach out on X: @iPritamX