Effective date: 22 September 2026

This policy explains cookies and similar technologies for hugeone.io, the founder portal at founders.hugeone.io and free HugeOne app features made available to you. App-specific information applies when you use the app. Read this policy together with our Privacy Policy.

1 Who operates the services

A.M.K. Ecoleaf Ltd, trading as HugeOne, operates these services. Our Cyprus registration number is HE272640 and our address is 11 Mnasiadou Street, 1065, Nicosia, Cyprus. Contact info@hugeone.io or +357 99918184 with questions about this policy or your privacy choices.

2 Cookies and similar technologies

Cookies are small records stored by your browser. Local storage holds information in your browser and can remain after you close it. Session storage lasts for a browser-tab session. Apps can also store sign-in information, cached content and diagnostic records on your device.

Strictly necessary storage supports a service you request, such as signing in or accepting an administrator invitation. Optional analytics, advertising and similar tracking require prior consent where applicable. A technology is not automatically necessary because it is useful or because it is called something other than a cookie.

3 Founder portal storage

Authentication session storage. The founder portal uses first-party local storage on founders.hugeone.io to retain the Supabase authentication session. It contains authentication tokens and session-related account information so you can remain signed in and renew your session. The storage name is generated for the authentication project. This storage is for sign-in, not advertising.

Browser local storage has no built-in expiry and can remain between visits until removed by the service or cleared by you. Signing out removes the local authentication session through the sign-out process. Clearing the portal’s site data also removes the local copy. Authentication-token expiry is separate from how long a storage entry remains in your browser.

Administrator invitation cookie. The first-party cookie named hugeone_admin_setup temporarily connects an administrator invitation to the sign-in and acceptance process. Its maximum lifetime is 15 minutes. It is used for invited administrators, not ordinary visitor analytics, and can be removed earlier by the invitation process.

4 App storage and diagnostics

Firebase Authentication maintains the app sign-in session. Cloud Firestore and media libraries can store local data and cached content to deliver app features. Some local information can remain between sessions. Device settings may allow you to clear app data or remove the app; doing so does not by itself delete your account or data held on our servers. For account deletion, contact info@hugeone.io.

The app uses Firebase Crashlytics to receive error reports and investigate crashes. These reports can include device and app information, diagnostic identifiers and error details. Reports may be held on the device pending transmission. Our Privacy Policy explains the purposes and retention criteria for diagnostic information. Where this technology requires consent to store or access information on your device, we ask before the relevant collection.

5 Optional technologies and your choices

Optional analytics or advertising technologies may be introduced only with information about their provider, purpose, storage and duration, and prior consent where required. This policy does not give blanket permission to activate them.

Where optional technologies are offered, the consent notice provides a choice to accept or reject them. Optional choices are not preselected. Continuing to browse, closing a notice or remaining silent does not constitute consent. Any consent-based technology must provide a way to withdraw consent as easily as it was given. You can also contact info@hugeone.io for help with your choices.

Your browser lets you review, block and remove cookies and site storage. Blocking necessary authentication storage may prevent sign-in or other requested functions. Clearing storage on one device does not necessarily change your choices on another device or with an external provider. Consent given on the website does not automatically cover separate processing in the founder portal or app.

6 External services

Choosing Google sign-in opens Google’s authentication service, which has its own storage and privacy practices. Apple sign-in is subject to Apple’s own privacy information where offered in the app.

The founder portal requests fonts from fonts.googleapis.com and fonts.gstatic.com. Delivering these files involves sending network and browser information, including your IP address, to Google, even if no cookie is set. These requests are separate from advertising analytics.

External websites you choose to visit operate under their own policies. Loading third-party content or tracking within HugeOne is different from following an external link and remains subject to applicable notice and consent requirements.

7 Changes and contact

We update this policy when the technologies or their purposes change and show the effective date above. Where a new optional purpose requires consent, we ask before activating it. For help or a privacy request, contact info@hugeone.io. Our Privacy Policy explains recipients, international processing and your data-protection rights.