Privacy Policy

hoodtype.sh (“hoodtype.sh”, “we”, “us”, or “our”) is operated by Agentic Bond LLC, located at 9000 W Sunset Blvd Fl 3, West Hollywood, CA 90069. hoodtype.sh is an entertainment tool that turns broker portfolio screenshots into Robinhood-style image mockups.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. By using hoodtype.sh, you agree to the practices described here. If you do not agree, please do not use the service.

• Screenshots you upload. The image bytes of the broker screenshots you submit, which we process to extract the holdings and values shown.
• Account information. If you sign in, your email address, used to send your magic-link login.
• Anonymous identifier. If you use the service without an account, we set an anonymous ID (the hts_anon cookie) so your uploads stay tied to you.
• Payment information. If you make a purchase, our payment processor (Stripe) handles your card details — we never receive or store full card numbers. We may receive limited payment metadata such as a Stripe customer ID, the last four digits of your card, billing country, and the product or plan purchased.
• Technical data. Our infrastructure providers automatically log technical information such as IP address, browser and device type (user-agent), and timestamps, for security, abuse prevention, and reliability. To enforce free-upload limits and deter abuse, we also derive a device fingerprint: a salted, one-way hash of general browser and device characteristics (such as user-agent, language, time zone, and screen properties). We store only the hash — never the underlying characteristics — and it is not used to track you across other sites or for advertising.
• Usage analytics. Only if you consent — see Cookies below.

We use the information we collect to:

1. run our screenshot-to-mockup pipeline, including sending the uploaded image to Google’s Gemini model for optical character recognition and data extraction;
2. render and display your Robinhood-style mockup;
3. store your results so you can retrieve and share your post;
4. look up current and historical ticker prices through market-data providers (Polygon / Massive) to build the charts — no personal information is sent for these lookups;
5. process payments through Stripe and keep records of purchases;
6. send transactional email (such as magic-link sign-in) through our email provider (Resend); and
7. operate, secure, debug, and improve the service.

We do not sell your personal information, and we do not use it for third-party advertising or ad targeting. We do not use your uploaded screenshots to train artificial-intelligence models.

We use a small number of browser cookies and local-storage entries. We group them by what they do. Strictly-necessary storage keeps the site working and is set without asking. Analytics storage only loads after you choose Accept in the cookie banner.

Strictly necessary

Required to run the service — uploading, staying signed in, and remembering your display preferences. These are always active. When you upload we also compute the device fingerprint described under Technical data, to enforce free-upload limits; it is derived in your browser and is not a stored cookie or a cross-site tracking identifier.

• hts_anon1 year

  Anonymous session identifier that ties uploads you make without an account back to you, so you can return to your post. Server-side, HTTP-only.

• sb-* (Supabase auth)Session / until sign-out

  Set by our authentication provider (Supabase) once you sign in with a magic link, to keep you signed in across page loads.

• hts_hide1 year

  Remembers your “Hide $$$” preference so dollar amounts stay masked between visits.

• hts.cookiesPersistent (until cleared)

  Records your cookie-banner choice (accept or decline) in your browser’s local storage so we don’t ask again on every page. If you decline, we re-ask after about 12 months — your decision is not treated as permanent.

Analytics

Privacy-conscious usage analytics that help us understand which features are used and where the product is rough. These load only after you click Accept in the cookie banner. Decline and no analytics cookies are set.

• PostHog analyticsUp to 1 year

  Product-analytics cookies (e.g. ph_*) used to count visits and measure feature usage in aggregate. Set only with your consent; not used for advertising or sold to third parties.

Changing your choice

You can change your mind at any time — use the button below to reopen the cookie banner. Declining blocks all analytics cookies; if you previously declined, we’ll also re-ask after roughly 12 months so the choice stays current.

We share personal information only with service providers (“sub-processors”) that help us run hoodtype.sh, and only as needed for them to perform their function:

• Supabase — database, file storage, and authentication.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Google (Gemini API)— we send the uploaded screenshot image to Google’s Gemini model to extract the holdings and values it shows.
• Polygon / Massive — market-data lookups for ticker prices. No personal information is sent.
• PostHog — product analytics, only if you consent.

Each provider processes data under its own privacy terms. We may also disclose information if required by law or legal process, or to protect the rights, safety, and security of hoodtype.sh, our users, or the public. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We do not sell your personal information.

hoodtype.sh is operated from the United States, and your information is stored and processed in the United States. Some sub-processors (for example, Google’s Gemini API) may process data on infrastructure in other regions. Where information is transferred internationally, we rely on appropriate safeguards — see International transfers below.

• Uploaded image files. The raw screenshot you upload is deleted from our storage as soon as processing is complete; we keep only the extracted data needed to render your mockup.
• Mockups and extracted data. Retained until you delete the post or your account.
• Account data. Retained until you delete your account.
• Payment records. Retained as required for financial, tax, and legal-compliance purposes.
• Anonymous sessions. Expire after about one year of inactivity.

You can delete your screenshots and your account at any time from the Account page.

Depending on where you live — including under the EU/UK GDPR and the California Consumer Privacy Act (as amended by the CPRA) — you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. We do not sell or “share” personal information for cross-context behavioral advertising, so there is nothing to opt out of in that respect.

You can handle the most common requests yourself: delete individual posts or your entire account from the Account page. For other requests — including access or export requests we can’t handle self-service — email us at privacy@hoodtype.sh or use our contact form. We will not discriminate against you for exercising your rights.

hoodtype.sh is not directed to, and is not intended for use by, children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact privacy@hoodtype.sh and we will delete it.

If you access hoodtype.sh from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we and our sub-processors rely on appropriate transfer mechanisms, such as the Standard Contractual Clauses, to protect your information.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify registered users by email. Your continued use of hoodtype.sh after the changes take effect constitutes acceptance of the revised policy.

hoodtype.sh is operated by Agentic Bond LLC, which is the data controller for the purposes of this policy. For privacy questions or to exercise your rights, email privacy@hoodtype.sh, or write to: Agentic Bond LLC, 9000 W Sunset Blvd Fl 3, West Hollywood, CA 90069. You can also reach us through our contact form.