Privacy
No ads, no tracking. We keep only what your account needs, and you can download or delete it yourself at any time.
Without an account
Every page can be read without an account and without cookies. We don’t use Google Analytics, tracking pixels, ads or third-party fonts.
ADIF files you open on the Awards page without signing in are read only inside your browser and are never uploaded. The same goes for the audio in the FT8 receiver.
The site is served through Cloudflare’s network, which sees your IP address in order to deliver the page and stop attacks. HAMnet.gr’s servers don’t write IP addresses to disk. To stop anyone mass-sending sign-in emails, we count requests per IP and per email address in memory only, for 15 minutes.
With an account: what we keep
| What | Why | How long | Who can see it |
|---|---|---|---|
| To send you the sign-in link. Nothing else: no newsletter, no marketing. | As long as the account exists | Only you and the administrator. Never public. | |
| Callsign, name, QTH, locator, short bio | Your profile and station page | As long as the account exists | Public only if you choose, and only once the callsign is verified |
| Logbook QSOs | Your logbook, statistics and awards | As long as the account exists, or until you delete them | Only you. Totals are public only if you choose. |
| Mentor listing | The Mentors list | Until you delete it | Public, with whatever contact details you entered |
| QRZ Logbook API key (if you add one) | To upload your QSOs to QRZ.com | Until you remove it | No one: it is encrypted (AES-256-GCM) and never shown again |
| Alerts link (if you choose) | So the same alert rules follow you on every device | Until you remove it. Deleting the account deletes the alerts too. | Only you |
| Sign-in session | To keep you signed in | 30 days from last use | We store only its hash, not the session itself |
| Link and code from the email | Signing in | 15 minutes, single use | We store only a hash |
Cookies
One cookie, hn_sess, and only when you sign in. It is strictly necessary for signing in (HttpOnly, Secure, SameSite=Lax), which is why there is no consent banner. If you don’t sign in, there are no cookies at all.
Your browser (localStorage) keeps only preferences such as the theme (light or dark), the site language, and your last mode and band in the logbook. They never leave your device.
Who we share data with
- Email provider: to deliver the sign-in email, the sending provider sees your address and the message.
- QRZ.com: only if you ask, we send your QSOs there with your own key. From then on, QRZ.com’s terms apply.
- Cloudflare: as for every visitor, traffic passes through its network.
We don’t sell, rent or trade data with anyone. The servers are in Greece.
Your rights (GDPR)
You can do most of this yourself from your account, without asking anyone:
- Access and portability: “Everything as JSON” and “Log as ADIF”.
- Rectification: edit your profile, QSOs and mentor listing whenever you like.
- Erasure: “Delete account” removes the account and all its data immediately and permanently. Server backups rotate, so within a few weeks it is gone from those too.
- Objection and restriction: turn off your public page, public totals or mentor listing with one click.
Legal basis: performance of the service you request (GDPR Art. 6(1)(b)) and, for anything made public, your consent (Art. 6(1)(a)), which you can withdraw at any time.
Controller: the administrator of HAMnet.gr, SV2RIM. For anything else, or for a callsign someone else registered in your name, see About. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).