Privacy policy

Last updated September 28, 2026

Hurdle is made by Circus Corporation, a Delaware corporation ("we", "us"). This policy explains what information we collect when you use hurdle.so and the Hurdle app at app.hurdle.so, how we use it, and the choices you have.

What we collect

Account details: your name, email address and sign-in information.
Your work: the prompts you write, the models and parameters Hurdle generates, and the files you export.
Billing: your plan and payment status. Card details are handled by our payment provider; we never see or store your full card number.
Website analytics: pages visited, the site that referred you, campaign tags in the link you followed, your approximate location (country, region and city), and device and browser type.
Referral details: if you arrive through a tagged campaign, partner or affiliate link, the codes in that link.
Hosting and security logs: our hosting provider automatically logs IP address, browser and request details for every request, to keep Hurdle secure and working.

How we use it

To run Hurdle: build your parts, save your work and keep your account secure. (Necessary to provide the service you've asked for.)
To bill you for your plan and send receipts. (Necessary to perform our contract with you, and to meet our tax and accounting obligations.)
To answer support and sales questions, and tell you about important changes to the service. (Necessary to provide the service, and our legitimate interest in supporting you.)
To understand which pages, campaigns and partners bring people to Hurdle, and to pay partners for the customers they refer. (Our legitimate interest in growing Hurdle sustainably, and necessary to honor our contracts with partners.)
To keep Hurdle secure and stop abuse. (Our legitimate interest in protecting Hurdle and our users.)
To improve Hurdle. (Our legitimate interest in building a better product.)

Your prompts and models are yours. We don't sell your personal information, and we don't use your prompts or designs to train any AI model, ours or anyone else's.

How Hurdle generates your models

When you describe a part, Hurdle sends your prompt and the relevant context to third-party AI model providers to generate and check the design. We choose providers whose terms prohibit using your data to train their models, and we don't send them your account details or billing information. See "Who we share it with" below.

Analytics and cookies

We run our own analytics on our own servers, using Umami. It doesn't use cookies, doesn't follow you across other websites, and doesn't store your IP address: your IP is used for a moment to estimate your location, then discarded. We don't load it at all if your browser sends a Global Privacy Control or Do Not Track signal.

Umami can also show us aggregated heatmaps (where on a page people click, move and scroll, combined across visitors) and session replay (a recording of how one visit moved through a page — not anything you type, since this site has no text fields). If we turn either on, it's covered by the same first-party setup and the same Global Privacy Control / Do Not Track opt-out described above.

We set one first-party cookie, hurdle_attr, on .hurdle.so, for 90 days. It's set only when you arrive through a link tagged with a campaign, partner or affiliate code, or an advertising click ID — never from an ordinary visit. It stores those codes, the page you landed on and the date, for your first and most recent tagged visit, so we can credit the right campaign or partner if you sign up. The Hurdle app can read this cookie because it shares the hurdle.so domain, and we add the same codes to links from this site to the app so attribution still works if cookies are blocked. We don't set this cookie if your browser sends a Global Privacy Control or Do Not Track signal.

Videos on this site come from YouTube and load only when you press play, using YouTube's privacy-enhanced mode. Once a video plays, YouTube's privacy policy applies to it. We don't use advertising cookies or pixels on this site.

Who we share it with

We share information only with service providers that help us run Hurdle, and only as much as they need to do that work:

Hosting and infrastructure: Railway, which hosts hurdle.so, the Hurdle app and our databases.
AI model providers: the third-party AI providers Hurdle uses to generate and check your designs.
Payments: our payment processor, which handles your card details directly; we don't store them.
Email: Amazon SES, which we use to send account and billing email, and Google Workspace, for support and sales email.
Video: YouTube (Google), for videos you choose to play.

If you came through a partner or affiliate link, we tell that partner that a referral signed up, without sharing your designs. We may also disclose information if the law requires it, or to protect Hurdle, our users or the public. We're based in the United States, and our providers may process information in the United States and other countries; where required, we rely on the EU Standard Contractual Clauses, the UK's International Data Transfer Addendum, or equivalent safeguards for transfers out of the EU, UK or Switzerland.

How long we keep it

Account and your work: for as long as your account is open, and up to 30 days after you close it, so you can recover it if you change your mind.
Billing records: up to 7 years, to meet tax and accounting obligations.
Support and sales email: up to 3 years after our last exchange.
Website analytics: up to 25 months.
Hosting and security logs: up to 30 days.
Attribution cookie: 90 days, as above.

We may keep information longer where we need to for legal, tax or security reasons, or to resolve disputes.

Your rights

You can access, correct, export or delete your information at any time by emailing support@hurdle.so. Depending on where you live, you may have further rights:

EU, UK and Switzerland: you can object to processing based on our legitimate interests, ask us to restrict it, ask for a copy of your data in a portable format, and complain to your local data protection authority. We're in the process of appointing a representative in the EU and UK for data protection matters; until then, contact us at support@hurdle.so.
California and other US states: you can ask what we collect and delete it, and you won't be treated differently for using your rights. We don't currently sell or share personal information for cross-context behavioral advertising. If that changes, we'll update this policy and add a way to opt out before it does.

Security

We protect your information with encryption in transit, access controls and regular reviews of who can see what. No system is perfectly secure, so if you think your account has been compromised, contact us right away at support@hurdle.so.

Age

Hurdle is for adults 18 and over, or the age of majority where you live, in line with our terms of service. We don't knowingly collect information from children, and we don't knowingly allow children to create accounts.

Changes to this policy

If we make a significant change, we'll update the date above and let account holders know by email before it takes effect. For minor changes, we'll just update the date.

Contact

Circus Corporation, 251 Little Falls Drive, Wilmington, Delaware 19808, United States. Email support@hurdle.so.