Effective date: September 25, 2026.
H-CAT Toolkit is an independently run creative project based in Kansas, United States. This policy explains how the H-CAT website and its H-CAT Community handle information. For privacy questions, email privacy@hcatoolkit.com.
Information we handle
When you create a community account, we collect the information needed to provide it, such as your email address, display name, username, profile information and preferences. Registration may involve invitations and email confirmation. If you contact us, we also receive what you choose to send.
When you participate, the site stores your posts, comments, uploaded media and other community activity. Depending on the features you use, this can include reactions, bookmarks, poll responses, follows, connections, space membership and direct messages.
The site and its service providers also process information needed for operation and security, such as IP addresses, browser information, login activity, cookies, spam-prevention signals, and moderation reports or actions.
Direct messages and privacy
Direct messages are intended for their participants and are not ordinary public community posts. They are stored as part of the website, however, and authorized site administrators or hosting personnel may have technical access when needed for security, moderation, support or legal reasons. Please do not treat community messages as end-to-end encrypted or use them to exchange highly sensitive information.
H-CAT Community is currently intended to be members-only, but members may copy or share information they can see. Posts, profiles and spaces may have additional visibility choices. We cannot guarantee that another member will keep shared content confidential.
How information is used
- Operate accounts, community spaces, discussions, direct messages and other features.
- Send verification, account, service and notification emails.
- Respond to questions, support requests and privacy requests.
- Prevent spam and abuse, maintain site security and handle reports.
- Maintain and improve site reliability and meet applicable legal obligations.
Hosting, plugins and other services
The website is hosted with DreamHost and uses WordPress. The site has Jetpack services, including Jetpack Stats, and Akismet for spam protection. WordPress plugins support community features, website forms and email delivery; WP Mail SMTP is configured to use DreamHost email. We use Google Analytics 4 for public-site usage statistics and Complianz for consent choices and cookie management. Which information each provider receives depends on your actions and the configuration of the relevant service. Additional third-party services, if used in embedded content or site features, may process information under their own policies.
If the site displays embedded material from external websites, those services may collect information about your visit according to their own policies. We do not sell member information to advertisers.
Cookies and analytics
WordPress and the community use functional cookies and similar browser storage for sign-in, preferences, security and requested community features. We use Complianz to present cookie choices. Google Analytics 4 and Jetpack Stats are configured to activate when you allow statistics cookies. You can manage your choices through our consent controls. For the evolving inventory and available cookie controls, see our Cookie Policy.
Media uploads
Files and images may contain metadata, including location information. Remove sensitive metadata before uploading media you do not want other people to access.
Retention and deletion
Community activity logs and closed moderation reports are currently configured for a 180-day retention period. Read notifications and email logs are configured for 60 days, while unread notifications can remain for 90 days. Open reports and moderation history may remain longer. These are configured log-retention periods, not promises that every post, message, backup or account record disappears on the same schedule.
Member data export and account deletion are enabled in the community settings. If you need assistance with an export or account deletion, contact us at privacy@hcatoolkit.com. Some records may need to be retained for security, moderation, legal or backup purposes, and deletion cannot retract copies already saved by other members.
Your choices
You can adjust available account, profile, visibility and notification settings. For access, correction, export or deletion questions, email privacy@hcatoolkit.com.
Age requirement
H-CAT Community is intended only for people aged 18 or older. People under 18 should not register. If we discover an account belongs to someone under 18, we may restrict or remove the account and address associated personal information as appropriate.
Security and changes
We use website and account protections, but no online service can guarantee complete security. Keep your login and email account credentials safe. We may update this policy if the site or its practices change; the publication date will be shown at the top.
Contact
Privacy questions: privacy@hcatoolkit.com. General questions: contact@hcatoolkit.com.