HoHoHo

Privacy Policy

Updated: 7 November 2026

Scope and contact

HoHoHo is a Secret Santa draw app provided by Arda Tor, the data controller. This policy covers the iOS and Android apps and hohoho.rotadra.com. Contact helphohoho@gmail.com for privacy, access or deletion requests. The Information Notice is a separate document.

Accounts and profiles

Google or Apple sign-in provides an account identifier and the name or email made available by that provider to locate or create your account. A Google profile photo may be displayed using the provider’s URL. Uploading a personal profile photo is not required. Guest sign-in also creates a server account using a device-linked identifier, such as identifierForVendor on iOS or Android ID, and securely stored credentials. It is not anonymous browsing. Losing the device or app data can affect recovery of an account that has not been linked to a sign-in provider.

Draws and sharing

We process display names, optional gift notes, draw titles, organizer and participant identifiers, status and matches. Members can see names within their draw. When a result is opened, the matched name and gift note are shown. Anyone with a valid invitation code or link can join; share these only with intended participants. Adding an address, size or interests to a note is optional. Do not include unnecessary sensitive or health information or someone else’s data. We cannot prevent recipients from copying visible information. The service does not promise end-to-end encryption.

Purposes and grounds

Necessary data supports account access, security, creating and joining draws, matching, support and purchases. Where applicable, processing relies on performance of a contract, legal obligations, protection of legal rights and legitimate security interests that do not override your rights. Optional usage analytics, crash reporting and advertising measurement depend on your choice. Reading this policy or using the service is not blanket consent to all optional processing.

Service providers

Google Firebase Authentication supports sign-in; Cloud Firestore and server functions process draw records; Firebase Remote Config provides configuration; Firebase Storage serves promotional images. OneSignal handles service notifications using notification/device identifiers and associated account identifiers or email. Apple/Google stores and RevenueCat handle product, transaction and entitlement records for support purchases. HoHoHo does not receive your payment card details directly. Cloudflare serves web pages and invitation links. These service functions are separate from optional diagnostics consent.

Optional analytics and advertising

With permission, Firebase Analytics and Mixpanel process usage events and Firebase Crashlytics processes crash reports. The app uses a random analytics identifier and filters direct identity fields from analytics properties; this does not make all technical or network data anonymous. Google AdMob provides advertising and measurement. Google consent flows and iOS tracking permission are presented separately where needed. Requests may include device/network information and ad interactions. The result-screen ad offer explains its conditions; ad availability and completion may affect that flow. Declining analytics or tracking does not disable basic account and draw functions.

Your controls

Change Usage and diagnostics in Settings and open advertising privacy options when available. Notification and iOS tracking permissions can also be managed in system settings. Withdrawal stops future optional processing but does not automatically delete historic records or invalidate earlier lawful processing. Fast support is an optional setting that includes technical/account details in support email drafts; you can inspect the draft before sending.

Local storage

Language, appearance, haptic preferences, consent, session, tutorial progress and configuration are stored locally. Activated Remote Config data can be used from a daily cache. Credentials use platform secure storage facilities. Clearing local caches does not delete your server account.

Retention, deletion and security

Data is retained as needed for the service, account/draw integrity, legal obligations or disputes. Provider logs and backups can follow separate retention processes; we do not promise an unverified fixed automatic deletion period. You can start account deletion in Settings. The current flow records the request and removes the authentication account; this does not mean every shared draw record or historic provider record is physically erased at the same instant. Contact us about associated records. Access controls and encrypted transport are used, but absolute security cannot be guaranteed.

International processing and rights

Providers may process data outside your country, including in the United States. Optional consent is not a blanket authorization for all international transfers; transfers must separately meet applicable legal conditions and safeguards. Depending on your location, you may have rights to information, access, correction, deletion, restriction, portability, objection, withdrawal and complaints to a competent data protection authority. We may request the minimum information needed to verify a request without exposing another person’s data. Requests are handled within applicable legal time limits.

Children and this website

Where local law requires it, children must use the service with a parent or legal representative and valid authorization. Contact us if a child has shared personal information inappropriately. These legal pages load no advertising or third-party analytics scripts. The hosting provider may process technical request logs, including IP addresses, for delivery and security.

Updates

We update this page when our practices change and provide additional notice when required. The date above identifies this version.