PRIVACY

ohhRIPZ privacy

Full Privacy Policy (ohhTCG) · Full Terms

Promotions and fraud prevention

When you use a promo code like WELCOME10, we check that each person gets it only once. To do that, we collect a few extra pieces of information. We use them only to decide if you can use the promo and to stop fraud. We never use them for ads, and we never sell or share them (as "sell" and "share" are defined by law).

What we collectWhyHow we protect itWho else gets itHow long we keep it
Your verified phone numberTo limit promos to one per person.We check the number by text message. We store a scrambled (hashed) version to match repeat uses.If we ask you to verify a phone number, our provider Twilio checks the number and its type (mobile, landline or internet number).24 months after the code was used (12 months for IP data).
Your sign-in emailYour sign-in email, standardized and stored only as a scrambled (hashed) value, to stop one person claiming a welcome code twice. Kept 24 months after the code is used.Standardized, then stored only as a scrambled (hashed) value.No one.24 months after the code was used (12 months for IP data).
A device ID (cookie ohr_did)To spot many accounts made on one device.A random ID we create and store in your browser. It is ours only; we don't use ad trackers for it. We store a hashed copy.No one.24 months after the code was used (12 months for IP data).
Your IP addressTo spot many sign-ups from one network in a short time.Shortened to your network and stored as a scrambled (hashed) value.No one, except our hosting and security providers who store data for us.24 months after the code was used (12 months for IP data).

If our checks flag a promo use, a person on our team reviews it before we take action. You can ask us about it at hello@ohhtcg.com. We may keep a record longer if we are dealing with a fraud case, a dispute, or a legal duty, and only for as long as that lasts.

Hashing means we turn the information into a scrambled code that can be matched but not easily read back. We use a keyed hash and keep the key separate.

Cookies

CookiePurposeTypeHow long
ohr_didRandom first-party device ID used only to keep promo codes one per person and stop fraud. Never used for ads or shared.First-party, HttpOnly, Secure2 years in your browser; the stored hash is kept 24 months after the code was used.