Privacy Policy

1. What the Website Collects

The Website is an informational and marketing site. It has no user accounts, no login, and no checkout. We collect very little.

1.1 Cookieless analytics

We use Cloudflare Web Analytics to understand aggregate traffic (for example, page views, referrers, and country-level location). Cloudflare Web Analytics is cookieless: it does not use cookies, does not fingerprint visitors, does not track you across sites, and does not collect personally identifying information. Because it sets no cookies and does no cross-site tracking, no cookie-consent banner is required, and we display none. We do not build advertising profiles and we do not use third-party advertising or cross-site tracking technologies.

1.2 Server logs

Our hosting and content-delivery providers (for example, Vercel and Cloudflare) automatically log standard technical information when you request a page — including your IP address, the requested URL, timestamp, user agent, and referrer. These logs are used for security, abuse prevention, and operating the Website. They are retained for a limited period under the providers' own retention practices and are not used to build a profile of you.

1.3 Email you choose to send us

If you email us (for example, support@ or privacy@hudsonenterprisesllc.com), we receive whatever you put in that message — typically your email address, your name if you include it, and the content of your inquiry — so we can respond.

We do not, on the Website:

• set advertising or cross-site tracking cookies;
• sell, rent, or trade personal data;
• collect special-category (sensitive) data;
• knowingly collect personal data from children (see Section 6).

Purchases of our products happen on third-party merchant-of-record and marketplace surfaces (for example, RapidAPI or Lemon Squeezy), each under its own privacy policy. We do not receive your payment-card details; the merchant of record processes payment under its own terms.

2. Legal Bases for Processing (GDPR / UK GDPR)

Under Articles 6 and 9 of the GDPR / UK GDPR, where they apply, we process the limited data described in Section 1 on the following bases:

• Legitimate interests (Art. 6(1)(f)) — for cookieless aggregate analytics and security/abuse-prevention server logs. We have conducted the Article 6(1)(f) balancing test and concluded that our legitimate interest in understanding aggregate usage and securing the Website does not override your fundamental rights and freedoms, because (i) the analytics are cookieless and do not identify you or track you across sites; (ii) the data contains no special-category data under Article 9; and (iii) the processing is limited to operating and securing the Website.
• Consent (Art. 6(1)(a)) — none required for the Website today, because we set no non-essential cookies and run no consent-based processing. If we introduce any processing that requires consent, we will request it and document the opt-in and withdrawal flow here before the change takes effect.
• Performance of a contract (Art. 6(1)(b)) — to respond to an inquiry you send us and, where you become a customer through a merchant of record, to support the product you purchased.
• Legal obligation (Art. 6(1)(c)) — to the extent we are required to retain or disclose data by applicable law, regulation, court order, or governmental request.

3. Sharing and Disclosure

We do not sell, rent, trade, or otherwise commercialize personal data.

We share the limited data described in Section 1 only with service providers that operate the Website on our behalf — our content-delivery and analytics provider (Cloudflare), our hosting provider (Vercel), and our email infrastructure — each under a written contract containing data-protection commitments substantially equivalent to this Policy, and only as needed to provide those services.

We may otherwise disclose personal data only:

• to comply with applicable law, regulation, court order, subpoena, or binding governmental request, with notice to you where lawfully permitted;
• to establish, exercise, or defend legal claims;
• in connection with a merger, acquisition, financing, or sale of all or substantially all of our assets, with notice to you.

4. International Transfers

Hudson Enterprises LLC is established in the United States of America. Where data about EU / UK data subjects is transferred to the United States and a transfer mechanism is required, we (and our providers) rely on the most current Standard Contractual Clauses (SCCs) issued by the European Commission, plus any applicable UK addendum.

5. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, except where a longer retention period is required or permitted by applicable law (for example, for tax, accounting, or litigation-hold purposes).

• Cloudflare Web Analytics data is aggregate and cookieless; it is retained under Cloudflare's own retention practices and is not tied to an identified individual.
• Server logs are retained for a limited period under our providers' practices.
• Email correspondence is retained for as long as needed to handle your inquiry and to keep a reasonable business record.

6. Children

The Website is directed to developers, IT professionals, and businesses. It is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact privacy@hudsonenterprisesllc.com and we will delete it.

7. Your Rights

Subject to the law of your jurisdiction, you may have the right to:

• access the personal data we hold about you;
• correct inaccuracies;
• request deletion ("right to be forgotten" under GDPR / UK GDPR);
• restrict or object to processing;
• data portability;
• withdraw consent (where consent is the legal basis for processing);
• lodge a complaint with your supervisory authority (for EU data subjects: your national Data Protection Authority; for UK data subjects: the Information Commissioner's Office (ICO); for California residents: the California Privacy Protection Agency or the California Attorney General; for Canadian residents: the Office of the Privacy Commissioner of Canada);
• non-discrimination for exercising your privacy rights;
• (for residents of US states with comprehensive privacy laws, including California, Virginia, Colorado, Connecticut, Utah, Texas, Indiana (effective 2026), and others as enacted) the rights conferred by those laws to the extent they apply.

To exercise these rights, contact privacy@hudsonenterprisesllc.com. We respond within 30 days, with the possibility of a 30-day extension where the request is complex or where we receive a high volume of requests; we will notify you of any extension within the initial 30-day period.

We may need to verify your identity before responding to a request, to protect your data from unauthorized disclosure. We will not charge a fee for responding to a request unless it is manifestly unfounded or excessive, in which case we will explain the charge before applying it.

8. California Residents (CCPA / CPRA)

This Section applies to California residents and supplements Section 7.

Personal information collected. The Website collects no "personal information" (as defined by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, Cal. Civ. Code §§1798.100 et seq.) beyond the cookieless analytics and standard server logs described in Section 1, and any email you choose to send us. We do not use the Website to build advertising profiles.

No "sale" or "share". We do not "sell" (Cal. Civ. Code §1798.140(ad)) or "share" (§1798.140(ah)) personal information, and we use no cross-context behavioral advertising. Because there is no sale or share, we offer no Do-Not-Sell-or-Share mechanism; if that ever changes, we will publish the required link and update this Policy before the change takes effect.

Sensitive personal information (§1798.140(ae)). None collected.

Shine the Light (Cal. Civ. Code §1798.83). We do not disclose personal information to third parties for those parties' direct marketing purposes.

Right to non-discrimination. California residents have the right not to be discriminated against for exercising their privacy rights. We do not offer financial incentives in exchange for personal information.

9. Security

We use industry-standard measures appropriate to the risk, including HTTPS/TLS for all Website traffic and reputable infrastructure providers. No system is perfectly secure. If you become aware of a security issue, report it to security@hudsonenterprisesllc.com. We aim to acknowledge reports within one business day and follow coordinated-disclosure practice, and we will not pursue legal action against good-faith security research conducted under responsible disclosure.

10. Changes

We may update this Policy from time to time. The "Effective date" above reflects the latest revision. Material changes — including any new category of personal data collected, any new third-party processor, any change in legal bases for processing, any change in retention periods, or any change in your rights — will be announced on https://hudsonenterprisesllc.com/legal/privacy at least 30 days before the change takes effect. Non-material changes (such as clarifications or formatting edits) take effect on posting.

11. Contact