Privacy

Last updated 14 October 2026

Hear Me Out is a small hobby project. It stores as little as possible: only what it needs to let you log in and to show the tier lists you make. No ads, no tracking, no selling of data.

What we store

  • Your account: your email address, your username and your password. The password is stored only as a secure hash, so nobody can read it, us included.
  • If you log in with Google or Discord: instead of a password, we get your email address, your name and profile picture link, and an ID for your account there. We only use the email to log you in and the name to suggest a username. We never get your Google or Discord password, and we can’t see or post anything in those accounts.
  • What you make: your templates (titles, descriptions, item names and pictures you upload) and your tier lists, including who can see them.
  • Login cookies: a few cookies that keep you logged in. They’re needed for the site to work, so there’s no cookie banner. There are no analytics or advertising cookies.
  • Technical logs: like any website, our hosting providers briefly keep request logs (such as IP addresses) to run and protect the service.

Who can see what

  • Your username is shown on the templates and tier lists you make.
  • Public templates and tier lists can be seen by anyone. Link-only ones by anyone who has the link. Private tier lists only by you.
  • Your email address is never shown to other users.
  • The combined “verdict” only uses public and link-only rankings, never private ones.

Where it’s stored

  • Supabase stores the database, logins and pictures in Frankfurt, Germany (EU).
  • Vercel hosts the website and runs it in Frankfurt. Vercel is a US company and may handle request data (like your IP address) outside the EU, covered by its data protection terms.
  • Google Fonts serves the site’s fonts, which means Google receives your IP address when a page loads.
  • Google and Discord handle the login if you choose “Continue with Google” or “Continue with Discord”, under their own privacy policies. They learn that you logged in to Hear Me Out.
  • Resend sends our emails, such as the link to reset your password. For this, it receives your email address and the content of the email. Its servers for our emails are in Ireland (EU).
  • Cloudflare Turnstile checks that sign-ups, logins and password resets come from a real person, not a bot. For this, Cloudflare receives your IP address and some information about your browser on the sign-up, login and password reset pages.

Why

We use this information only to provide the service you signed up for: logging you in, saving what you make and showing it to the people you choose. Nothing is used for marketing.

How long

Everything is kept until you delete it. When you delete your account, your account, templates, tier lists and pictures are deleted straight away. Copies can remain in our providers’ backups and logs for a short time before they’re cleared automatically.

Your rights

  • See and correct your data: everything you’ve made is on your page, and you can change your username and password in settings.
  • Delete your account and all your data at any time in settings.
  • Ask questions or get a copy of your data: contact us through the project’s GitHub page.
  • If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet.