Legal
Privacy statement
Last updated 12 November 2026
This statement covers the Hopeloo website and, in short, the Hopeloo app. The controller is AVS Media, Federico Fellinistraat 102, 6515 LV Nijmegen, the Netherlands, hello@avs-media.com.
What this website collects#
Nothing about you. There are no accounts, no forms, no analytics, no tracking pixels and no advertising. Fonts, pictures, recordings and scripts are served from this website itself.
Your browser#
The site keeps one functional cookie (site_accent, until midnight) and one entry in your browser's local storage, so the site's colour stays the same from page to page. They hold no identifier, are not used for tracking and never leave your device except as that cookie on requests to this site. Light or dark follows your device's setting. Clearing your browser data removes both.
Hosting of this website#
This website is delivered by Cloudflare, Inc. as our processor. To deliver a page Cloudflare necessarily processes your IP address and technical request data (time, page, browser) and may keep them briefly in security logs. Legal basis: our legitimate interest in delivering a secure website (Art. 6(1)(f) GDPR). Cloudflare may process data outside the European Economic Area under the EU-US Data Privacy Framework.
The Hopeloo app#
The app is a separate service on its own address. Signing in on the phone uses an e-mail link: you type your e-mail address, and we send one link that signs you in. There is no password. Legal basis: providing the service you asked for (Art. 6(1)(b) GDPR).
When you sign up, the app keeps your e-mail address, so you can sign in, and what you put into it:
- Your moments, photos, letters and reminder times.
- The name you give, if you give one.
- About me, if you fill it in: an age range, your interests, and what you like.
- A note to the makers, when you send one. The note, the app version and the phone type are sent.
- An error report when a screen fails. The message and the app version are sent.
Your entries belong to your account. Nobody else can see them, and nobody at AVS Media reads them. There is no advertising, and nothing is sold.
Reminders on the phone are local notifications. The phone plans them itself. There is no push service. They stay off until you switch them on.
Your journal, photos and letters are stored in the European Union (Ireland). The database host is Convex, in the EU. Sign-in mails go through Amazon SES, in the EU. Convex and Amazon SES are processors: they handle this data for us, and nothing is sold or shared for anyone else's use.
In the app, under More, Your data, you can export everything as one file, delete everything, and delete your account ("Delete my account"). You can also ask us to delete the account without the app. Write to hello@avs-media.com from the e-mail address of the account. The support page says how.
Your rights#
Under the GDPR you may ask what is held about you and have it corrected or removed, and you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Write to hello@avs-media.com.