Legal

Privacy Policy

Last updated: September 2026

hplab.dev is a suite of applications (Gravity and Snore Analyzer) operated by hplab, a technology company. This page describes, plainly, what data the suite collects and how it is used. If anything here is unclear, write to [email protected].

Usage analytics

Every page on hplab.dev reports first-party page views: the page visited, time on page, referrer, browser and screen characteristics, coarse location (country, derived from your IP by our CDN), and a random visitor identifier stored in your browser. When you are signed in, views are attributed to your account. Analytics are used only to understand how the suite is used; they are never sold or shared with third parties, and there is no third-party advertising or tracking.

Accounts

Gravity and Snore Analyzer keep separate account stores. Each holds your email (or, for Gravity, your phone number), name, password hash (or your Google/Apple account link if you sign in that way), and — for Gravity — the profile details you choose to add. If you use Quick fill in Gravity, the text of the résumé you upload or paste is sent to Alibaba Cloud Model Studio (mainland China) to be turned into a draft you review before saving; the file itself is not kept — see the Third-Party Sharing list. Signing in to Gravity sets a session cookie that identifies you to Gravity and to this site’s admin console; Snore Analyzer keeps its sign-in in the app only.

Snore Analyzer recordings

Analysis results (detected events, charts, scores) are stored with your account when you choose to save them. The raw audio of a recording is not retained by default — it is kept only if you explicitly opt in when saving, and you can delete saved results at any time.

Feedback and messages

Feedback sent through the feedback widget — and any messages you exchange in Gravity chat — are stored so they can be read and answered. Anonymous feedback is stored without an identity; a contact email is kept only if you provide one.

Face information (Gravity)

Gravity asks each account to complete a one-time camera check confirming a live person is present, so that "everyone here is a real person" is true rather than a slogan. Face information is sensitive personal informationand is handled under a separate consent, given on its own screen and never bundled with the terms. You can decline and ask for human review instead, which involves no biometric processing at all. The liveness verdict comes from Alibaba Cloud ID Verification’s check page (accounts homed in mainland China use the mainland service; all others use the international service’s Hong Kong node), which returns only the verdict and one face frame; the face signature is computed and kept by us in your account’s region, never handed to any third party, never used for advertising or profiling, and never leaves that region. See the Third-Party Sharing List. Full rules — what is collected, what is kept, for how long, and how to delete it —Face-information handling rules.

Location sharing (Gravity)

Gravity can share your precise, real-time location — but only when you start a share yourself, only with the people or conversation you pick, and only for a limited time (up to one hour, then it stops automatically). Your position is streamed to that chosen audience while the share is active and is held in memory only for its duration; it is never stored long-term, never used for advertising, and never sold. You can stop a share at any time. The separate "check-in" feature records only a coarse (~1 km) area, never your exact position.

Nearby and broadcasts (Gravity)

Nearby uses your location only after you turn it on. Before it is kept, your position is rounded to a coarse position grid (about 100 m by default; the platform may set it anywhere from 100 to 5000 m, and the Nearby opt-in screen states the current precision); it is held in memory only and lapses after 24 hours without an update — it is never written to long-term storage. Who can see you is set by the platform, and the Nearby opt-in screen states the current setting — one of three: only your connections; your connections plus other real-person-verified people nearby who have Nearby on (you must be verified too — this is the default); or your connections plus everyone nearby who has Nearby on. Whatever the setting, nobody you have blocked, or who blocked you, ever appears or sees you. They see an approximate distance (rounded in steps of that same precision, whole kilometres above 1 km) and a direction — never your address or coordinates. It is mutual: you see others' distance and direction only while your own Nearby is on, and whoever can see you, you can see as well. Turn it off at any time and you leave everyone's radar at once.

A broadcast you post (its title, time, place, note and photos) goes to your connections within the range you choose, or to the people you pick; its place is rounded to the same grid as well. Once it is over it is no longer shown, and it is deleted after the retention period the law requires.

Your choices

You can use the public parts of the suite without an account. To have your account and its data removed, contact [email protected].