Privacy

Who is responsible

HgYperDrive, an independent project based in Puerto Rico, is responsible for the data described here. Contact: hgyperdrivepr@icloud.com.

What we collect

• Newsletter: your email, if you subscribe. Protected by Cloudflare Turnstile (a check that you're not a bot) and used only to send you FSD updates. Every email includes a one-click unsubscribe link.
• Contact form: name, email, and message, so we can reply. Sent through Web3Forms, a third-party service that relays the message to our inbox.
• Proof of consent: when you submit a form we store which version of the Terms and of this policy you accepted, when, from which page and how (two separate checkboxes). To identify you we keep only a cryptographic fingerprint (HMAC) of your email and IP, never the plaintext email or IP, plus the first 256 characters of your browser identifier (user-agent).
• Analytics: Cloudflare Web Analytics measures traffic in aggregate, without first-party cookies and without building an individual profile of each visitor.
• Local storage (never leaves your browser): if you use the FSD scoring tool, your answers are kept in your browser's localStorage while you answer, so a reload does not lose them. They are not sent to any server and we never see them: they stay on your device until you clear the site's data. Nothing else on the site uses local storage.
• Performance measurement (first-party): the site measures how long it takes to load and respond in your browser — the Core Web Vitals metrics LCP, INP and CLS. Three things are stored alongside each measurement: the kind of page (for example "a version review", not the exact address you visited), whether you are on mobile or desktop, and which build of the site you were served. Nothing else: no cookies, no identifier, nothing that could recognise you across visits. It is stored in aggregate in Cloudflare Analytics Engine and exists to catch a page becoming slow. We also record, without identifying you, when you click a referral or affiliate link (for example the Tesla referral) and from which part of the page; only the destination and the section, never the full address or who you are. Each measurement also carries where you arrived from, as a single word from a closed list (for example "youtube", "google" or "direct"; never the address of the previous page), and your two-letter country, which Cloudflare provides without us storing your IP.

We only ask for what is needed: your email for the newsletter; name, email, topic and message to reply to you. We never ask for phone, address or sensitive data.

Why, and on what basis

• Newsletter and contact form: your consent, which you can withdraw at any time.
• Proof of consent, security and abuse prevention (Turnstile, rate limits): our legitimate interest and the duty to be able to demonstrate your consent.
• Cookie-less aggregate analytics: legitimate interest in keeping the site fast and useful.

How long we keep it

• Newsletter: while you stay subscribed. Once you unsubscribe we stop emailing you and keep your address flagged as “unsubscribed” only so we never email you again; you can ask us to delete it entirely.
• Contact messages: in our inbox as long as needed to handle your request.
• Proofs of consent: for the contact form, 3 years from submission; for the newsletter, while you stay subscribed and 3 more years from your unsubscribe. Then deleted automatically.

Who it's shared with

We use a small number of providers to run the site: Cloudflare (hosting, security, database and analytics), Web3Forms (relays the contact form to our inbox) and Resend (newsletter email delivery). These providers may process data in the United States. The videos section on the home page loads its thumbnails from YouTube, and only if you open it: doing so gives YouTube your IP address. We do not sell or share personal data with ad networks or with third parties for their own purposes.

Cookies

HgYperDrive uses no tracking, analytics or advertising cookies; only Cloudflare’s strictly necessary ones for security and forms. Details are in the Cookie Policy.

Do Not Track and children

Because we do no cross-site tracking, we treat every visitor as if Do Not Track or Global Privacy Control were on. The site is not directed at children under 13 and we do not knowingly collect their data; if you believe a child has sent us data, contact us and we will delete it.

Your rights

You can unsubscribe from the newsletter at any time via the link in every email. You can also request access, correction, deletion or a copy of your data, withdraw consent or object to processing by emailing hgyperdrivepr@icloud.com; we will respond within 30 days at most. If you live in the EU/EEA or the UK you may also complain to your data protection authority; if you live in California or another state with a privacy law, you have the rights that law grants you, without discriminatory treatment for exercising them.

Security

We use HTTPS site-wide, anti-bot verification, rate limits and cryptographic fingerprints instead of plaintext data wherever possible. No system is infallible; if we detect a breach affecting you, we will notify you as the law requires.

Changes to this policy

When we change this policy we will update the version and date above and, if the change is material, announce it on this page. Each recorded acceptance is tied to the version in force at that moment.