Scope and responsible person
HocTat is a content and knowledge website. Anyone can read its publicly available content without an account. This notice covers the information processed when visitors read content, create accounts, communicate with support, or participate in permission-controlled editorial workflows. Operator/responsible individual: Lê Tiến Hoàng. Privacy requests: privacy@hoctat.com; account support: accounts@hoctat.com; general inquiries: contact@hoctat.com.
Information concerned
- Public visitors: technical requests and potentially server/security logs, including IP address, access time, requested route and browser details depending on effective configuration. Reading content without an account does not mean no technical information is processed.
- Registered users: first and last name, email, security-handled credentials, session and account/permission status; additional profile fields only when actually collected or supplied.
- Authorized contributors: drafts, published materials, sources, uploaded files, authorship/reviewer references, workflow and change history. Published materials and selected attribution may be public; internal drafts are not automatically public.
- People contacting support by email, phone or Zalo: HocTat may receive a provided email address, phone number, contact-account name, message content and materials voluntarily submitted to respond and verify requests securely. Never share passwords, one-time codes or recovery codes through these channels. For requests to exercise personal-data rights, use privacy@hoctat.com.
- Google login: disabled for end users at present. If later approved and activated, the service may receive a provider identifier, verified email and necessary profile details; existing accounts are not automatically linked by matching email alone.
Why information is processed
To serve content, provide and secure accounts, manage authentication and permissions, support editorial publishing, respond to requests, diagnose incidents, maintain backups and meet applicable legal duties. Each purpose must have an appropriate processing basis and any legally required notice or separate consent. Accepting the Terms of Use is not blanket consent to all unrelated processing.
Cookies and usage analytics
Authentication and security functionality may require cookies or other session data; blocking necessary cookies can affect sign-in. HocTat's internally designed analytics can count eligible public page/post views and public searches, including no-result events. They measure events, not unique readers. This bounded analytics subsystem is designed without its own analytics cookie, raw IP, account/session or visitor identifier, stored search text or search-query hash. With HonorDoNotTrack enabled, DNT: 1 and Sec-GPC: 1 are excluded by the relevant analytics recorders.
The Owner-selected purpose, if production collection is authorized, is aggregate site/content improvement—not individualized reading profiles, targeted ads or cross-site tracking. The analytics feature is used only when enabled and authorized. Other authentication cookies, server and security logs are separate from the minimized analytics records.
Visibility, recipients and external processing
Published content and selected author attribution may be publicly accessible and indexed; credentials, drafts and internal administrative records are not thereby public. Authorized operators and necessary service providers may process relevant data for hosting, security, storage, backups and configured email functions. If you choose Zalo to contact HocTat, you use a third-party service that handles data under its own privacy practices. HocTat receives the information you send to its support account. Actual providers, recipient locations, transfers and lawful safeguards remain subject to verification. Do not infer that all processing stays in Vietnam.
Security and retention
HocTat uses appropriate account, access-control, session, incident-handling and backup protections but cannot promise absolute security. Retention and deletion must be defined separately for accounts, editorial data, support requests, operational logs, analytics and backups; copies may persist in protected backups pending an approved lifecycle.
Your rights and requests
Subject to applicable law, you may seek information about processing, access/copies, correction, erasure, restriction, objection, or consent withdrawal where applicable, and raise complaints. Send requests to privacy@hoctat.com. Identity should be verified proportionately to prevent unauthorized disclosure. Erasure may be subject to lawful preservation and backup constraints.
Children's information
Use by minors and processing of their personal data are subject to applicable age/capacity and parent/guardian rules.
Changes and effective date
Material changes will require appropriate notice or renewed consent where applicable. Version: v0.3. Effective date: 26 October 2026.