Privacy Policy

Last updated 11 October 2026. This describes how HodLLM (hodllm.com) handles your personal data. HodLLM is the data controller.

What we collect

Account: your email address; if you set one, a password stored only as an Argon2id hash; if you enable two-factor authentication, an encrypted TOTP secret and hashed recovery codes.
Age: the fact and time you confirmed you are 18+. Your date of birth is checked but not stored.
Chat: the messages you send and the AI replies, grouped into sessions, kept so you can return to your conversations.
Wallet & activity: token balance, the transaction ledger, and game history.
Preferences: chat and display settings.
Developer API: your API keys (stored only as a hash, plus name and creation/last-use time) and a log of each API request (model, token counts, cost). The prompts and replies of API requests are passed through to the model provider and are not stored by us.
Security: audit and rate-limit logs, including IP address and browser user-agent, to prevent fraud and abuse.

To provide the service (performance of a contract): authentication, chat, wallet, games.
Legal obligations: age assurance and keeping financial/transaction records.
Legitimate interests: security, fraud prevention, and keeping the service reliable.

We do not sell your data. We use a small number of processors to run the service:

OpenRouter (and, through it, the AI model providers you choose): the contents of your chat messages are sent to generate replies. These providers may process the text outside the EU. Do not paste anything into chat you wouldn't want a third-party model provider to process.
Resend: sends sign-in links and account emails (email confirmation).
Web search: Deep Search queries run on our own search server, which forwards them to public search engines; pages are fetched from our server, not your browser.
Payment providers (only if/when deposits are enabled): to process top-ups.
Our hosting/database infrastructure.

Chats & preferences: until you delete them or your account. Chats you delete are purged for good within ~30 days.
Security/audit logs: up to ~12 months, then deleted automatically.
Financial records: retained as long as the law requires (e.g. accounting / anti-fraud), in anonymised form after account deletion.

Access & portability: download everything we hold about you from Account → Export my data.
Erasure: delete your account from Account → Delete my account. This erases your chats, preferences and profile and anonymises retained financial records.
Rectification / objection / restriction: contact us (below).
Self-exclusion: available at any time from your account.
Complaint: you may lodge one with your local data-protection supervisory authority.

We use only the cookies needed to keep you signed in — no advertising or third-party tracking cookies.
Tokens have no cash value and never convert back to money.

Questions or requests: privacy@hodllm.com.