Privacy Policy — MyOhara

      The short version: We collect only what we need to run the service. We don't sell your personal information. We don't spy on you. We store aggregated price statistics (min/avg/max per item) to power price history charts — this data never contains anything that identifies you personally.
    

1. Who We Are

MyOhara is a price aggregation service. When we say "MyOhara," "we," "us," or "our," we mean the operators of myohara.com. Questions about this policy can be sent to [email protected].

2. What We Collect

We collect only what's necessary to provide and improve the service:

What	Why	How long
Email address	Account creation, login, password resets, service updates	Until account deleted
Name (optional)	Personalizing your dashboard	Until account deleted
Password (hashed)	Authentication — stored as a one-way hash, never readable	Until account deleted
Usage logs	Usage tracking, rate limiting, abuse prevention	90 days rolling
Search queries	Returning results, caching, improving service quality	Anonymized after 30 days
Aggregated price data	Powering price history trend charts — stored as daily min/avg/max per item searched, no raw listing records or personal data	Indefinitely (or several years) — aggregated stats only
IP address	Security, fraud prevention, failed login tracking	90 days rolling
Discord user ID hash	Linking Discord account to MyOhara — stored as a one-way hash, not the real ID	Until unlinked or account deleted

3. What We Don't Collect

We do not collect or store:

Your real Discord user ID — only a one-way hash that cannot be reversed
Browsing history outside of MyOhara
Device fingerprints or tracking cookies for advertising
Any biometric data
Any information from children under 13

4. How We Use Your Data

We use your information to:

Provide and operate the MyOhara service
Authenticate your account and keep it secure
Track usage for rate limiting and abuse prevention
Send transactional emails (password resets, verification)
Prevent abuse, fraud, and unauthorized access
Improve the service based on how it's used

We do not use your personal data for advertising or sell it to third parties.

5. Aggregated Data

We may collect, analyze, and use aggregated and anonymized data derived from platform activity — such as trending search terms, average price movements across markets, and demand patterns. This data:

Cannot be used to identify any individual user
Does not include your email, name, or any personal information
May be used internally to improve the service

6. Cookies & Tracking

We use minimal cookies strictly necessary to operate the service — specifically session tokens to keep you logged in. We do not use advertising cookies, third-party tracking pixels, or analytics services that share your data with advertisers.

7. Third-Party Services

We use a small number of trusted third-party services to operate MyOhara:

Resend — transactional email delivery (password resets, verification emails). Only your email address is shared for delivery purposes.
Discord — if you use the bot integration. We store only a hashed version of your Discord ID.

We do not use Google Analytics, Facebook Pixel, or any advertising networks.

8. Data Security

We take reasonable technical measures to protect your data including:

Passwords stored as bcrypt hashes — never in plain text
Discord IDs stored as one-way SHA-256 hashes with a secret salt
HTTPS encryption for all data in transit
Admin access restricted to local network only

No system is 100% secure. In the event of a data breach affecting your personal information we will notify you promptly.

9. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you
Correction — update your name or email from your dashboard settings
Deletion — delete your account and all associated personal data from your dashboard. Anonymized aggregate data derived from your usage may be retained.
Portability — request an export of your data in a machine-readable format
Opt-out — opt out of non-essential communications at any time

To exercise any of these rights, contact us at [email protected].

10. Data Retention

We retain your personal data only as long as necessary to provide the service or as required by law. When you delete your account, your personal information is permanently deleted within 30 days. Anonymized aggregate data may be retained indefinitely.

11. Children's Privacy

MyOhara is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in your dashboard. The "last updated" date at the top of this page reflects the most recent revision.

13. Contact

Privacy questions or requests? Email us at [email protected] or visit our support page.