Privacy Policy

1.1 Information You Provide Directly

• Account information: Email address and password when you register.
• Profile information: Username (randomly assigned), bio, niche, and any other information you choose to add to your profile.
• User Content: Posts, comments, income disclosures, and other content you submit to the Service.
• Communications: Messages you send to us for support or other inquiries.

1.2 Information from Connected Social Accounts

If you choose to connect a third-party social media account (e.g., YouTube, TikTok, Instagram), we collect:

• Platform user ID and username/handle
• Display name and profile picture
• Follower/subscriber count
• Video/post count and aggregate view or like counts
• OAuth access tokens and refresh tokens (stored securely server-side; never exposed to other users)

We request only the minimum permissions necessary to verify your creator status and display your public statistics. We do not access your private messages, contacts, or any content beyond what is described above.

1.3 Information Collected Automatically

• Log data: IP address, browser type, pages visited, referring URL, and the date/time of your visit.
• Device information: Device type, operating system, and browser version.
• Cookies and similar technologies: Session cookies required for authentication and preference cookies. See Section 7 for details.

1.4 Information from Third Parties

We use Supabase for authentication and database services. When you sign in, Supabase may provide us with authentication metadata such as sign-in timestamps and session information.

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Provide, operate, maintain, and improve the Service.
• Display your verified creator status and social statistics to other users (only as you permit).
• Enable anonymous community participation while preventing abuse.
• Send you transactional emails such as password resets and security alerts.
• Respond to your comments, questions, and support requests.
• Monitor and analyze usage trends to improve user experience.
• Detect, investigate, and prevent fraudulent activity, abuse, and violations of our Terms of Service.
• Comply with legal obligations.

We do not sell your personal information to advertisers. We do not use your data for behavioral advertising or build advertising profiles about you.

Holler is built with anonymity as a core value. Your real identity is not displayed to other users. However, please be aware of the following:

• Your anonymous username is linked to your email address in our systems. We can associate the two internally, and may do so if required by law or to investigate serious violations.
• We cannot guarantee that content you post will not be linked to your identity by external parties if you include identifying details in your posts.
• OAuth tokens for connected social accounts are stored encrypted and are never exposed to other users or displayed publicly.

We do not sell, trade, or rent your personal information. We may share information in these limited circumstances:

• Service providers: We share data with trusted third-party vendors who help us operate the Service, including Supabase (authentication and database), Vercel (hosting), and other infrastructure providers. These parties are contractually obligated to protect your data and use it only as directed by us.
• Legal compliance: We may disclose your information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business transfers: If Holler is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your information becomes subject to a different privacy policy.
• With your consent: We may share your information with third parties when you give us explicit consent to do so.

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data in a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, legal disputes).

User Content (posts, comments) may be anonymized rather than deleted so that community discussions remain coherent. Anonymized content cannot be linked back to you.

OAuth access tokens are refreshed periodically and revoked upon disconnection of a social account. Refresh tokens are deleted upon account deletion or social account disconnection.

We implement industry-standard technical and organizational measures to protect your information, including:

• TLS/HTTPS encryption for all data in transit.
• Encryption of sensitive fields (OAuth tokens) at rest.
• Row-level security policies to prevent unauthorized database access.
• Regular security reviews of our infrastructure and code.

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable authorities as required by law.

We use the following types of cookies:

• Strictly necessary cookies: Session and authentication cookies required for the Service to function. These cannot be disabled.
• OAuth state cookies: Short-lived cookies used to secure the social account connection flow. These expire within 10 minutes.

We do not use advertising or tracking cookies. We do not use third-party analytics services that track you across other websites.

You can control cookies through your browser settings, but disabling cookies may affect your ability to sign in and use the Service.

The Service integrates with the following third-party platforms. Your use of their OAuth connections is subject to their respective privacy policies:

• Google / YouTube: Google Privacy Policy
• TikTok: TikTok Privacy Policy
• Instagram / Meta: Instagram Privacy Policy
• Supabase: Supabase Privacy Policy
• Vercel: Vercel Privacy Policy

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before connecting your accounts.

The Service is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@holler.community and we will promptly delete it.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain processing of your data.
• Withdraw consent: Disconnect social accounts or delete your account at any time.

To exercise any of these rights, contact us at privacy@holler.community. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and service providers are located. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: