Hobbias Terms of Service and Privacy Policy

Draft status — complete before publication

This document has not yet been published. The retention schedule in Section 16 contains proposed operational commitments that must be implemented or revised to match actual practice before publication.

• Verify that legal@hobbias.com receives messages and identify the provider hosting that mailbox.
• Confirm the provider agreements, international-transfer arrangements and actual Railway log-deletion periods applicable to Hobbias.
• Implement or revise the proposed retention, deletion and backup schedule.
• Confirm how the adult-only account policy applies to existing users and how it will be communicated and enforced.
• Confirm the correct operator and any permissions needed to operate the service and enter its agreements.
• Set the actual effective date. Remove this draft-status panel only after these matters have been resolved.

Hobbias — Terms of Service and Privacy Policy

Effective date: 25 October 2026 — proposed; this draft is not yet in force
Operator and data controller: Mathias Lin, Sweden
Contact: legal@hobbias.com
Contact address: Arbogagatan 14, 418 71, Sweden

1. What Hobbias provides

Hobbias is a free platform where people share apps, games, websites, developer tools and other software they have built with help from AI tools, commonly called “vibe coding.”

Creators publish project information and links so other people can try their projects and leave feedback. Projects may be prototypes, works in progress or completed releases. Hobbias helps people discover free software alternatives to paid services.

Hobbias hosts listings, screenshots and related community content. The software itself runs wherever its creator hosts or distributes it.

2. Adults and accounts

Hobbias is intended for adults aged 18 or older. You must be at least 18 to create an account or participate.

Provide a valid email address, protect your password and avoid impersonating another person or organisation. You may use a public username without publishing your legal name.

You are responsible for activity you authorise through your account. Contact us if you believe someone has accessed it without permission.

3. Free software and external API costs

Hobbias does not charge for accounts, posting, browsing, saving projects or leaving feedback.

The listed software itself must be free to download or access and use, with no charges imposed by its creator. Projects with paid tiers, subscriptions, in-app purchases, paid feature unlocks or expiring free trials are not eligible, even if they also offer a free version.

You must not require a purchase or mandatory donation to install, access or use the listed software.

Bring-your-own API keys are allowed

A free add-on, client or wrapper may require users to connect their own account and API key for an independent external provider, such as an AI API. That provider may bill users separately for usage under its own terms.

Before users try the project, its listing must clearly identify:

• The external provider.
• Any required account, API access or installation.
• Whether the provider charges separately for usage and where users can check its pricing.
• Any other important setup requirements or limitations.

Do not describe the complete setup as having no cost if external charges are required.

For example, a free Blender add-on may require a user’s own OpenAI API key, provided its listing explains that OpenAI API usage is billed separately.

This exception does not allow payments to the creator or a service they control, paid feature unlocks, access fees or disguised paywalls. Other required paid dependencies are not automatically permitted by this exception.

Creators must keep their access and cost disclosures accurate. If you introduce creator charges or other ineligible payment requirements, unpublish the listing before introducing them. Update the listing promptly when external requirements change.

Please report listings that hide costs or otherwise break this rule.

4. Posting a project

Post projects you created or are authorised to share. You must have the necessary permissions for the code, screenshots, artwork, music, names and other material you publish.

Describe the project honestly. Include a working destination link, relevant installation instructions, account requirements and important limitations. Explain what currently works and what you would like people to test.

If users need their own external API account, disclose the provider, account requirements and separately billed usage in the listing’s setup and cost information.

Source-code sharing is optional. A free project may still have a proprietary licence. Being listed on Hobbias does not give visitors permission to copy, redistribute or modify its code.

Do not publish passwords, secret API keys, confidential information or another person’s personal information without a lawful reason.

5. Trying projects and leaving feedback

A project listing is not a security audit or certification of its creator’s claims. AI involvement, functionality, free software access and external API requirements are described by the creator.

Check the destination, permissions, installation requirements and disclosed external API costs before using external software. External projects may have their own accounts, terms and privacy notices.

A free listing does not mean an independent API provider will process your requests without charge. You are responsible for reviewing and managing charges on an external account you choose to use.

Keep feedback truthful, relevant and respectful. Explain what you tried and what happened. Do not fabricate experiences, impersonate users or manipulate feedback.

Publishing a project does not guarantee visitors, feedback, promotion or continued availability of an external service.

6. Content and permissions

You retain any rights you hold in your projects and content. Posting on Hobbias does not transfer ownership of your software to Hobbias.

You give Hobbias a non-exclusive, worldwide, royalty-free permission to store, reproduce, format and display material you submit as needed to operate the service. This includes technical processing, delivery through service providers and handling reports.

This permission does not grant Hobbias ownership of your source code or permission to sell your project.

When you remove content or close your account, this permission ends for future public display once the removal takes effect. Limited permission continues only as needed for technical removal, restricted backups, handling reports or disputes, and compliance with legal obligations, subject to the purposes and retention limits below.

Unpublishing changes visibility; it does not by itself delete a saved project or private draft.

Public material may be indexed or copied by other people and search engines. Removing it from Hobbias cannot guarantee removal of independent copies.

7. Prohibited activity and reports

Do not use Hobbias for malware, phishing, scams, unlawful content, harassment, impersonation, infringement, spam or attempts to compromise the service or its users.

You can report a project or feedback through the available reporting controls. You can also email legal@hobbias.com without creating an account.

For an illegal-content or intellectual-property report, provide:

• The specific page URL and location of the content concerned.
• A sufficiently detailed explanation of why you consider it unlawful or infringing, with relevant supporting information.
• Your name and email address so we can communicate with you, except where applicable law permits a notice without this information.
• A statement that you believe in good faith that the information and allegations in your report are accurate and complete.

For an intellectual-property report, also identify the relevant work or right and explain your authority to act for its holder.

Do not knowingly submit false or abusive reports. We handle reports diligently and without arbitrary discrimination, acknowledge receipt and communicate our decision where required and where we have the necessary contact information.

8. Moderation and review

We may request corrections, restrict visibility, remove content or suspend an account when reasonably necessary to enforce these terms, address unlawful activity or protect users.

Action should reflect the seriousness and circumstances of the issue. Urgent restrictions may be necessary before contacting the affected user. We consider relevant context and the rights and interests of the people affected.

Where required by law, we provide a clear explanation of the restriction, the relevant facts, the legal or terms-of-service basis, any relevant use of automated means and available remedies.

You may request a human review without charge by emailing legal@hobbias.com with the affected page, decision and your explanation. We consider review requests fairly and without undue delay.

This does not limit any right to use a competent authority, an applicable out-of-court process or a court.

Automated validation and abuse-prevention checks may reject submissions or temporarily limit activity. These checks do not replace consideration of a properly submitted review request.

9. Visibility, earlier records and account closure

You can unpublish your project or remove your feedback using the available controls. Pausing tryouts leaves the project’s details public.

These actions change visibility; they do not necessarily erase every stored record. Contact us to request account closure or deletion of personal data.

Existing Hobbias accounts continue to use their existing account records. Records from the earlier collaboration service are kept separately in a private, read-only archive for authorised members and administrators.

Earlier work is not automatically presented as a new software listing or product review. These terms do not retrospectively change agreements between members about earlier work, ownership or confidentiality.

10. Availability, responsibility and changes

We aim to operate Hobbias with reasonable care. Software can contain errors, external links can change and service interruptions can occur.

Creators remain responsible for their projects and statements. Hobbias remains responsible for its own conduct under applicable law. Nothing in these terms excludes liability or rights that cannot lawfully be excluded.

Swedish law applies, subject to mandatory protections and court rights available to you under applicable law.

We will communicate material changes to these terms and request renewed agreement where appropriate. Agreement to these terms does not itself provide consent to optional marketing or tracking.

11. Personal information we process

Mathias Lin is responsible for Hobbias’s processing of personal information.

Depending on how you use the service, we process:

• Account information: email address, username, display name, password hash, account status and policy-acceptance records.
• Profile information: information and pictures you choose to provide.
• Project information: drafts, descriptions, screenshots, links, build details, setup and cost disclosures, and publication settings.
• Community activity: feedback, creator replies, saved projects and notification preferences.
• Support and safety information: reports, correspondence, moderation decisions and relevant security records.
• Technical information: IP addresses and request, browser or device information recorded when operating and protecting the service.
• Optional notification information: newsletter preferences and browser-push subscription details.
• Earlier service records: retained profile, participation, submission, work and communication records from the previous service.

We receive information directly from you, through your browser, through other members’ feedback or reports, and from existing Hobbias records.

Fields required to provide a feature are identified in the relevant form. Optional profile information is voluntary. Without required information, we may be unable to create an account or provide the requested feature.

When live form-readiness checking is active, entered project fields may be sent to Hobbias for validation before you choose Save or Publish. Optional browser-tab recovery is described in Section 15.

12. Why we process information

We use the following legal bases according to the purpose involved:

Purpose Legal basis Providing your account, requested form validation, posting, feedback, bookmarking and other requested features Performance of our agreement with you Protecting accounts, preventing abuse, investigating reports and maintaining necessary safety records Legitimate interests, subject to your rights Providing authorised access to earlier work records and resolving specific disputes Legitimate interests, subject to your rights Establishing, exercising or defending legal claims Legitimate interests or a specific applicable legal obligation, depending on the processing Responding to data-protection requests and binding legal requirements Legal obligation Optional newsletters and other processing requiring consent Your consent

Our legitimate interests include operating a reliable service, protecting members, allowing entitled members to access earlier work records and resolving specific disputes.

Retention is limited to information necessary for those purposes and is subject to the review and deletion criteria in Section 16. A general desire to keep historical information is not, by itself, a reason for indefinite retention.

You may object to processing based on legitimate interests. We do not treat acceptance of this privacy policy as blanket consent for processing.

13. Public and private information

Public profiles, published project information, feedback and creator replies can be viewed by other visitors and may appear in search results.

Private drafts, saved-project lists, account email addresses, password hashes, reports, internal moderation notes and restricted archive records are not intended for public display.

Administrators may access information where needed to operate the service, provide support, investigate problems or meet legal requirements.

Information you include in public text becomes public even if it would otherwise be private account information. Avoid posting sensitive personal information.

14. Service providers and international processing

Hobbias uses service providers and recipient categories to operate the service.

Railway

Railway Corporation provides application hosting, PostgreSQL database infrastructure, persistent file storage and infrastructure logs. Information processed can include account and profile records, listings, screenshots, feedback, reports and technical request data.

The reviewed application and database deployment is in US West. This deployment region does not necessarily describe every location involved in provider support, subprocessors or other processing.

Railway’s published Data Processing Addendum describes processor terms and EU Standard Contractual Clauses for relevant transfers. Its privacy notice also describes its participation in the EU–US Data Privacy Framework.

Resend

Resend, operated by Plus Five Five, Inc., provides operational and optional email delivery when used. It receives recipient addresses, relevant names, message content and delivery information.

Resend states that stored customer data is in the United States, regardless of the region selected for sending email. Its standard Data Processing Addendum incorporates EU Standard Contractual Clauses and becomes binding with the applicable service agreement.

Browser notifications and email correspondence

If you enable browser notifications, the push service selected by your browser routes encrypted notification messages. Hobbias stores the subscription endpoint and associated delivery keys. The operator and processing locations depend on the browser’s push infrastructure.

Your email provider and the provider hosting Hobbias’s support mailbox handle correspondence sent to legal@hobbias.com.

Outstanding verification: the inbound support-mailbox provider has not yet been identified in this review. Its identity, relevant locations and applicable safeguards must be confirmed before this notice is published. Resend’s sending integration does not establish who receives support mail.

International transfers

Where Hobbias transfers personal information outside the EEA, an applicable transfer mechanism is required. The published provider terms identify EU Standard Contractual Clauses for relevant transfers. Participation in an adequacy framework is relevant only within the scope of a current certification and the processing it covers.

Information about applicable safeguards and how to obtain a copy where appropriate is available by contacting legal@hobbias.com.

Outstanding verification: Hobbias must retain evidence of the agreements applicable to its accounts, any necessary annex information and transfer assessments, and the mechanism actually relied on. Provider documents alone do not certify completion of these obligations.

External projects and media

External project creators and API providers used through their software operate under their own terms and privacy arrangements. They are not automatically processors acting for Hobbias.

When a listed add-on sends requests to an AI provider using your own API key, review both notices. Hobbias does not require you to submit that key to Hobbias.

Externally hosted images or other media may receive your IP address and technical request information when loaded. Any such services used by Hobbias must be included in its maintained recipient inventory.

15. Cookies, browser storage and optional communications

Session cookie

Hobbias uses a first-party cookie named session to maintain session and sign-in state, security tokens and temporary notices. The inspected service sets the Secure, HttpOnly and SameSite=Lax attributes.

The inspected cookie has no Expires or Max-Age attribute and is a browser-session cookie. Browser session restoration may preserve it. Blocking or clearing it can prevent account features from working.

Optional text recovery

Where offered, you can enable “Keep a recovery copy of my text in this browser tab.” This stores selected form text and recovery metadata in the tab’s session storage on your device, using keys beginning with hobbias-recovery:.

Recovery metadata can include the associated account and form, enabled setting, save time and comparison information. The feature excludes file attachments, password fields, hidden security fields and confirmation choices.

The recovery feature does not create a separate server-side recovery upload. Live form-readiness validation may nevertheless send entered fields to Hobbias before saving, and choosing Save stores a draft on the server.

Turning recovery off clears that account’s recovery copies from the tab. You can also discard a copy through the recovery controls or clear the relevant browser storage.

Copies more than 24 hours old are not offered for recovery. This is not a guarantee that the browser physically erases all session data at that exact time. Tab closure, browser session restoration and browser settings can affect how long session storage remains.

Tracking and communications

The reviewed redesigned public pages and new-product code do not activate advertising pixels or advertising signup-conversion tracking. If optional tracking is introduced, we will explain it and obtain consent where required before activating it.

Newsletters are optional. You can withdraw consent through account settings or an unsubscribe link where provided. Withdrawal does not affect processing lawfully carried out before withdrawal.

Browser notifications require permission. You can change Hobbias preferences and browser permissions. Necessary and lawful account, security or legal messages may still be sent when optional communications are disabled.

16. Retention and deletion

Proposed schedule — implementation or verification required before publication. These periods are operational recommendations, not statutory minimums or confirmation of existing deletion automation.

Record Proposed period or provider information Active account and private drafts Retain while providing an active account, subject to valid deletion requests. For accounts with no sign-in for 24 months, give 30 days’ advance notice before closure, then apply the closed-account schedule. Closed accounts and private content Delete or irreversibly anonymise personal account data and private drafts within 30 days after closure or approval of erasure, unless a documented legal or dispute-related exception requires specific records. This target does not extend statutory response deadlines. Public listings and feedback Keep public while the creator or author chooses publication and the content remains eligible. Unpublishing restricts visibility but keeps a private draft. Assess removal or anonymisation following a valid erasure request. Hobbias-controlled diagnostic and security exports Delete routine copies after 30 days. Keep an identified incident extract only while needed for a specific investigation or claim. Review it at least every 90 days and delete it within 30 days after that purpose ends. Railway-hosted logs Railway documents a 7-day accessible log-history window on Hobby, with older logs becoming accessible after upgrades. This is not a verified hard-deletion deadline. Obtain written confirmation of actual storage and deletion periods before claiming a maximum. Hobbias’s proposed export rule does not change provider-side retention. Email delivery data at Resend Resend’s published standard information states 30 days for email and log data on Free, Pro and Scale plans, a 7-day backup period, and deletion of remaining customer data within 90 days after account termination. Confirm that no custom terms apply. This does not determine retention in recipients’ mailboxes or Hobbias’s support mailbox. Resolved support and moderation cases Delete or anonymise ordinary closed cases 12 months after closure. Keep only a minimal decision record while an active restriction must be administered. Review active restriction records annually and delete within 30 days after the justified purpose ends, unless a documented legal hold applies. Earlier collaboration archive Review every 12 months. Default to retaining necessary earlier work records for up to 24 months after archive cutover. Then delete or anonymise records unless a documented continuing access, ownership, dispute or legal purpose requires specific records. Review each exception at least annually. Hobbias-controlled database and media backups Proposed daily backups with a maximum 30-day rolling retention. Delete manual cutover exports within 30 days of creation after verifying a suitable replacement. Restrict access and test restoration at least quarterly and after material changes. These jobs and checks are not established by this document. Support mailbox correspondence Apply the 12-month closed-case schedule to ordinary support correspondence under Hobbias’s control. Identify the mailbox provider and configure retention consistently.

Deletion includes copies and exports under Hobbias’s control. Where a backup cannot be selectively edited, restrict its use, let it expire under the confirmed schedule, and reapply valid deletion requests before restoring data to ordinary use.

Keep a minimal restricted record of deletion instructions only as long as necessary to prevent improper restoration.

A legal hold must identify the specific matter, record categories, basis, responsible person and next review date. Preserve only what is necessary and delete or anonymise it when the reason ends.

General historical interest, an archive-access entitlement or the existence of a backup does not justify indefinite retention of unrelated personal information.

17. Your privacy rights and security

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal information. You may object to processing based on legitimate interests and withdraw consent for processing based on consent.

Contact legal@hobbias.com. Requests are handled manually. We may need proportionate information to verify your identity.

We respond without undue delay and normally within one month of receiving a request. Where the law permits an extension because of complexity or the number of requests, we inform you within the initial month and explain the reason. Any exception or refusal must have a lawful basis.

We use technical and organisational measures appropriate to the service, including password hashing and access restrictions. No system can guarantee complete security.

If you believe we have mishandled your information, you may complain to Integritetsskyddsmyndigheten (IMY) or another competent supervisory authority. You do not have to contact us first.

Information about submitting a complaint to IMY

18. Contact and policy updates

For account, privacy, content or legal matters, contact legal@hobbias.com.

Postal contact: Mathias Lin, Arbogagatan 14, 418 71, Sweden.

We will update this policy when the service or its processing changes. Material changes will be communicated appropriately. Any new processing requiring consent will have its own consent request.