Privacy

HUGE is a small project run by one person. This page says what's kept, who can see it and how to get rid of it. Last updated 9 October 2026.

The short version

• No ads, no trackers, no analytics. Your data is never sold or shared.
• Your workouts are only shown to you.
• You can download everything, or delete your account and everything in it, at any time.

What's kept

• Your account: a username and your password, scrambled with a one-way hash so nobody can read it back. No name or email is needed.
• What you enter: workouts, sets, weights, times, notes, how sessions felt, your own exercises, pools and settings.

Who can see it

• You. There are no shared or public pages.
• Me, the person who runs HUGE. Your data lives in a database on my server, so I could technically look at it. I don't, and I'd only ever look to fix a problem you've asked me to fix.

Services HUGE uses

• Oracle Cloud hosts the server, in Sydney, so your data is stored in Australia. Nothing is sent anywhere else.

Cookies and logs

• One cookie keeps you logged in. There are no other cookies.
• The web server keeps a standard log of visits (IP address, page and time) for 14 days, to spot attacks and fix problems.

Keeping it safe

• Everything travels over HTTPS. Passwords are hashed, never stored.
• After 5 wrong passwords, an account is locked for 15 minutes.
• The database is backed up every night. Backups are kept for 3 days, then deleted.

Your data, your call

• Download it: Settings › Download all workouts gives you a spreadsheet (CSV) of everything you've logged.
• Delete it: Settings › Delete my account removes your account and everything in it straight away. Copies in the nightly backups are gone within 3 days.

Not medical advice

HUGE suggests exercises at random. It doesn't know your body or your injuries. If you're recovering from an injury (back rehab included), check what's right for you with a doctor or physio.