Privacy
What HydroCast stores, which cookies it sets, and the services your browser talks to.
Browsing without an account
The map, runs, reports, configs and data checks open without signing in. HydroCast keeps no account or profile for you then. Your browser keeps a few view settings in its own storage (for example that you have seen the welcome tour); they are not sent to HydroCast.
If you sign in
An account holds your username, email address, a hashed password (only if you registered with one; accounts made by email code have none), whether you are an admin, and your team, if one is set. Runs, configs and reports you submit are stored with your username and the visibility you choose.
Signing in sets one cookie, hc_session: HTTP-only, sent only to hydrocast.dev, for 30 days. With each session HydroCast stores a hash of its token, when it started and was last used, and the IP address and browser (user agent) it was started from, so a session can be seen and ended.
When you ask for a sign-in code by email, HydroCast stores the address, a hash of the code, the IP address the request came from, and a record of the email (sent, delivered or bounced). The email is sent by Microsoft Azure Communication Services.
When an agent uses HydroCast over MCP as you, each tool call is logged with your username: the tool, its parameters, when it ran and how long it took. API tokens you create are stored as a hash, with their name.
Google Analytics
Pages load Google Analytics 4 (tag G-M7Z8CEW89X), which counts page views and the visits behind them. It sets the cookies _ga and _ga_M7Z8CEW89X to tell visits apart. Google Analytics 4 does not log or store IP addresses. Google also records the technical details its tag collects, such as your browser, device and approximate location.
How Google uses this data: How Google uses information from sites that use its services. To opt out in your browser, use the Google Analytics opt-out add-on.
Other services
Map tiles load from Mapbox directly in your browser, so Mapbox sees your IP address and the areas you view. All traffic to hydrocast.dev passes through Cloudflare.
Contact
Questions, or to have your account and its data removed: [email protected].