Privacy policy
Last updated 11 June 2026 · Applies to xohanooc.com and the XOhan Ads console
XOhan Ads operates the website xohanooc.com and an internal console used to track app conversions and manage app remarketing audiences. This policy explains what we process, why, and how it can be removed.
1. Who we are
XOhan Ads operates this website and the mobile applications whose events are processed through the console. Contact: support@xohanooc.com · krzemienrao669@gmail.com.
2. Data we process
- Website visitors — server logs: IP address, user agent, requested URL, timestamp.
- Console users — name, work email, role and sign-in timestamps for provisioned staff accounts.
- App event data — app identifier, event type, event time, order identifier, conversion value
and currency, and advertising click identifiers (such as
gclid,gbraid,wbraid) received from our measurement partners or our own SDK.
We do not knowingly collect data from children and we do not buy contact lists.
3. Why we process it
- To attribute app installs and in-app actions to our own advertising campaigns.
- To upload verified conversions and conversion adjustments to our own Google Ads manager account.
- To build and refresh app remarketing audiences.
- To operate, secure and audit the console.
4. Legal bases
Where the GDPR applies we rely on performance of a contract (staff accounts), legitimate interests (measurement and fraud prevention) and consent collected in the app before any advertising identifier is transmitted, where consent is required by law or platform policy.
5. Cookies and the demo site
This public website sets no advertising cookies and runs no third-party analytics. The demo console stores a single session flag in your browser so the sign-in state persists until you close the tab; it contains no personal data. The demo uses static sample data and does not call the Google Ads API.
6. Sharing
We do not sell personal data. Event data is transmitted only to:
- Google, through the Google Ads API, for the accounts we operate;
- our own infrastructure and the measurement partners that deliver the events;
- authorities, where we are legally required to do so.
7. Identifiers and hashing
User identifiers such as email addresses and phone numbers are SHA-256 hashed at ingestion. Raw values are not written to the analytics store or to logs. Click identifiers are transmitted only inside the conversion upload and are not used for any other purpose.
8. Retention
- Raw event payloads: 180 days, then purged.
- Aggregated metrics: 24 months.
- Console audit logs: 12 months.
- Server logs: 30 days.
9. Your rights and data deletion
Depending on your jurisdiction you may request access, correction, deletion or a copy of your data, and you may object to processing based on legitimate interests. Send requests to support@xohanooc.com or krzemienrao669@gmail.com with the app and approximate event date. Verified requests are actioned within 30 days across the collector, the analytics store and any audience membership. Where data has already been forwarded to Google, we file a conversion adjustment or a user-list removal so the change is reflected there as well.
10. Security
Transport encryption, encryption at rest for tokens and identifiers, least-privilege access, MFA on console accounts and audit logging of every administrative action. Access is limited to named employees; there is no public sign-up.
11. International transfers
Data may be processed in countries other than your own. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
12. Changes
Material changes to this policy are published on this page with a new effective date.
13. Contact
Privacy questions: support@xohanooc.com · API, integration and review questions: krzemienrao669@gmail.com