Privacy
What huggingbay.xyz collects (first-party privacy-preserving analytics, request contact emails with 30-day retention), how long it is kept, and where the machine-readable data policy lives.
What this site collects
huggingbay.xyz uses first-party, privacy-preserving traffic measurement only. Visitor counts are aggregated with daily salted hash buckets; public rollups expose no raw IP addresses, visitor keys, user agents, or referrers. There are no third-party trackers or analytics scripts. The live measurement statement is published in the privacy block of /api/traffic.
Contact data and retention
If you submit a catalog, mirror, or source request with a contact email, the private contact field is retained for 30 days and then redacted; the public request, status, dedupe, refusal, and moderation evidence remains without it. Account sign-in uses email magic links: your email address is used to send the sign-in link and operate your account, and is not exposed on public surfaces.
Machine-readable policies
Task execution data handling is governed by Bay Run's published data policy. Agents and auditors should read the machine-readable documents directly: data-policy.json, assurance.json, and security.txt.
Contact
Privacy questions, data-rights requests, and security reports: security@huggingbay.xyz.
Open interactive page