Privacy

Last updated October 16, 2026

The short version: PipeHat never receives your messages. The decoder runs entirely in your browser, and the page blocks itself from making network requests. We don't use cookies, analytics or advertising trackers.

Messages you open in PipeHat

• Messages you paste, open or drop into PipeHat are processed on your computer, in your browser. They are never sent to us or to anyone else.
• The app page has a Content Security Policy that blocks network requests (data requests, beacons, images and form submissions), so it couldn't send your messages even if it tried.
• Messages are held only in the open tab's memory. They aren't written to browser storage, and they're gone when you close the tab.
• Because we never receive your messages, we never receive or store protected health information (PHI) from your use of the app.

What your browser keeps

PipeHat saves three things in your browser's local storage, on your computer only: your license key (if you enter one), your sensitive-information settings, and whether Cycle through every batch automatically is on. You can remove them by clearing this site's data in your browser.

Visiting the website

Our hosting provider, Vercel, processes standard request information such as IP address, browser type and the page requested, to deliver the site and protect it from abuse. We don't add analytics or tracking to the site.

Buying a license

Payments are handled by Stripe. We don't see or store your card number. Stripe shares with us what we need to fulfil and support your order: your name, email address, billing address, organization name (if you give one) and the plan you bought. We use it to send your license key, answer your questions, keep business records and meet tax obligations. Stripe's handling of your payment information is covered by Stripe's privacy policy.

We record each license we issue (the key's ID, plan, licensee name and dates) so we can reissue or renew it.

Emailing us

If you email support@pipehat.io, we keep the correspondence to help you. Please don't send us messages containing patient information. Use PipeHat's de-identifier first, and review the result before sending.

What we don't do

• We don't sell or rent personal information.
• We don't use your information for advertising.
• We share it only with the service providers above (Stripe, Vercel and our email provider), or when the law requires it.

Your choices

You can ask us to access, correct or delete the personal information we hold about you by emailing support@pipehat.io. We may need to keep some purchase records for tax and accounting purposes.

Changes

If we change this policy, we'll update this page and the date above. If a change affects how your messages are handled, we'll say so prominently on the site.