Privacy
Last updated: 9 August 2026
HowMuchUsers counts users. It does not collect them. This page says exactly what we store and what we refuse to store — and every line of it matches what the code actually does.
Your users' data
We never want your users' names, emails, phone numbers or addresses. The identifier you send us is hashed with a server-side secret and your project id before it touches our database: it can't be reversed, and the same person in two different startups produces two unrelated identifiers. If you send an email as a user id — it happens — what we store still isn't that email.
What we do store about them
A pseudonymous identifier, the date the account was created in your product, the date we first saw it, and optionally a two-letter country code and a coarse device category. Nothing else, ever.
Your data as a founder
Your name, email and profile picture, from Google. Your projects, their metrics and their API keys — hashed, never in plain text. We use your email to sign you in and, if you ask for it, to notify you.
IP addresses
We never store them in the clear. Where we need them — abuse protection, audit trail — we store a hash. It's enough to see that twenty attempts came from the same place, and not enough to know where.
What is public
Only what you switch on, field by field, in your project settings. A new project publishes nothing. Turning something off takes it off the public profile, the badges and the rankings immediately.
Third parties
Google, for sign-in. Cloudflare, in front of the site, which gives us a country code. Nothing else: no advertising trackers, no analytics from other companies inside our pages.
Deleting your data
Deleting a project deletes its events, its counted users, its keys and its public profile. It's a real deletion, not a hidden flag. The only thing that survives is the public address, which is never reused, so old links can't end up pointing at someone else.
Contact
Write to us and we'll answer: hola@howmuchusers.wtf