Your privacy

HB ID stores your account name, email, verification status, salted password hash, public passkey credentials, and website permissions. It stores session timestamps and browser information so you can review and revoke sessions.

Temporary abuse counters use keyed hashes of IP addresses and supplied email addresses. Security events contain account identifiers, action names, and timestamps, are shown only for your own account, and are retained for up to 30 days. Cleanup occurs during application activity.

Hosting uses Vercel, the database uses Neon, and recovery email uses Spacemail. Recovery and verification links expire after 30 minutes and work once.

Connected websites receive only the identity claims covered by your approval. Your password is never included. When you request a Wallet card, your display name is sent to WalletWallet to create it; your password and browser session are not sent.

HB ID does not include advertising or analytics trackers. Contact the operator below for questions or account data requests.

Operator: Haider Bilal
Contact: haidermalik@devolper.online