Last updated 3 August 2026 · Axonate Tech, India
The short version. We take your email address so we can pay you, and timing data about ads that were shown to you so we can work out what you earned. We do not read your code, your prompts, your files, or your conversations with any AI assistant — the client is not capable of sending them, and you can read its source to confirm that.
Hafta is operated by Axonate Tech, India. For anything in this policy, including data deletion requests, write to privacy@axonatetech.com.
| Email address | Identifies your account and is how we contact you about payouts. Collected at sign-up, from you or from Google. |
| Google account ID and display name | Only if you choose "Continue with Google". Used to link your sign-in to your account. We do not request access to Gmail, Drive, Contacts, or any other Google service. |
| UPI ID | Only when you ask to be paid. Used solely to send that transfer. |
| PAN | Only if your cumulative earnings cross the threshold at which Indian tax law requires us to hold one. Not collected before that. |
| Device fingerprint | A truncated one-way hash of hostname, operating system, and CPU architecture — computed on your machine, never sent in raw form. It exists to detect one person running many fake clients, and cannot be reversed into a hostname. |
| Ad timing | Which sponsored line was shown, when it was served, how long it stayed on screen, whether it was clicked or dismissed. This is what determines what you are owed. |
| IP address | Kept transiently for rate limiting and abuse detection. Not used for profiling and not stored against your earnings history. |
Stated plainly, because it is the whole basis on which you would install this:
The client sends impression identifiers, durations, and coarse device identity. Nothing else. The source is published at /client/ and you are encouraged to read it — software that runs inside your editor and reports on your attention should not have to be taken on trust.
If you sign in with Google we receive your email address, whether Google has verified it, your name, and a Google account identifier. We request only the openid, email, and profile scopes. We store the identifier to recognise you on your next sign-in. Hafta's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to third parties, use it for advertising, or allow humans to read it except where you explicitly ask us to for support, or where law requires it.
Advertisers receive aggregate counts only: how many impressions were billable, how many were clicked, and what they spent. They do not receive your email, your name, your IP address, your device, or any identifier that could single you out. There is no tracking pixel, no third-party cookie, and no retargeting profile anywhere in this system.
We do not sell your data, and we do not share it for anyone else's marketing.
Ledger entries and payout records are kept for eight years, because Indian tax law requires it of anyone who has paid you money. Raw ad telemetry used for fraud detection is kept for 90 days. Everything else is deleted when you close your account.
Under the Digital Personal Data Protection Act, 2023 you may ask us for a copy of your data, ask us to correct it, ask us to delete it, and withdraw consent at any time. Write to privacy@axonatetech.com and we will respond within 30 days.
Withdrawing consent or deleting your account stops future earnings but does not erase payout records we are legally required to retain, and does not reverse money already sent to you.
Traffic is encrypted in transit. Passwords are stored as salted PBKDF2-SHA256 hashes and are never recoverable. Client tokens are held in your operating system's keychain, not in a plaintext file. No system is perfectly secure, and we will tell you promptly if one of ours is breached in a way that affects you.
Hafta is not for anyone under 18. We do not knowingly hold data about minors.
If we change this policy in a way that materially affects you, we will email you before it takes effect rather than quietly updating this page.