Your activity,
your controls.

HF Notify is an independent HFTools service. It uses the read permissions you grant through Hack Forums to detect activity while your linked browser is active.

What we store

Your HF user ID and username, an encrypted HF access token, linked-device credentials stored as hashes, notification preferences, thread IDs and titles, activity cursors, and generated notifications. Byte alerts can include a sender and amount. Contract alerts include the contract ID and status. Private-message alerts contain counts, never PM content or senders.

How it works

The server polls HF’s API. The userscript adds a bell on hackforums.net and connects only to notify.hftools.org. It does not send your HF password, browser cookies, private-message text, or browsing history to the service. Following a thread sends its thread ID. Post text is processed to detect quotes and is not retained as full post content.

Retention and removal

Notification history is retained for up to 30 days, limited to the latest 1,000 notifications per account. Activity cursors remain while the account is connected. Device links expire after 90 days. Sign in on the installation page and use “Delete my Notify data” to remove your server-side connection, history, and device links. Removing the userscript alone does not delete server data. You can also revoke access through HF’s API settings.

Scope and limitations

Initial history is silently baselined. Older posts and threads are indexed gradually. Detection can be delayed by API availability, rate limits, account size, and browser activity. Only returned API records can be checked: bursts beyond a 30-record summary window may be missed. PM counts cannot guarantee a separate alert for each message. Quotes are detected within tracked threads, not across the entire forum. No Convo access is used.

Preferences, desktop alerts, and sound are controlled from the bell. Desktop alerts only operate while an HF tab with the script is open. Support: contact Charlie Sheen on Hack Forums.