Data Retention PolicyData Retention

1. Introduction

This Data Retention Policy explains how long Hipopick ("we", "us", "our") retains data collected through our platform, and the principles we follow when determining retention periods.

As described in our Privacy Policy, Hipopick does not collect personal account information (such as email addresses or phone numbers). However, we do collect and temporarily store analytics, device-level data, and operational logs to ensure the platform functions properly and to improve the user experience.

2. What Data We Retain

Hipopick retains the following types of data:

2.1 Analytics and Usage Data

• Page views, click events, session duration, and navigation patterns
• Interactions with product cards, looks, QR modals, and other features
• Device information (browser type, screen size, operating system)
• Aggregated performance metrics and error logs

2.2 Advertising Attribution Data

• Internal identifiers such as scan_id used to connect desktop and mobile flows
• Ad platform parameters such as ttclid (TikTok Click ID) for attribution purposes
• Campaign performance metrics and conversion tracking data

2.3 Functional and Preference Data

• Language, currency, and theme preferences stored in cookies or local storage
• Cookie consent choices and related timestamps

2.4 Operational and Security Logs

• Server logs, security events, and anti-fraud indicators
• IP addresses (used for security, regional routing, and fraud prevention)

3. How Long We Retain Data

Retention periods vary depending on the type of data and the purpose for which it was collected. Our general approach is to retain data only for as long as necessary to fulfill the purposes described in our Privacy Policy.

3.1 Analytics and Usage Data

Analytics data collected via Google Analytics 4 (GA4) is retained according to GA4's default settings, which is typically 14 months from the date of collection. After this period, the data is automatically deleted or anonymized by Google.

Internal analytics logs and aggregated metrics may be retained for up to 24 months for long-term performance analysis and product improvement.

3.2 Advertising Attribution Data

Attribution identifiers (such as scan_id or ttclid) and associated event data are retained for up to 90 days to measure advertising performance and optimize campaigns. After this period, they are either deleted or anonymized.

Campaign-level reports and aggregated metrics (without individual-level identifiers) may be retained indefinitely for business analysis and compliance purposes.

3.3 Functional and Preference Data

Cookies and local storage used to remember your language, currency, and theme preferences are retained until you clear them manually, or until they expire based on the cookie's own lifespan (typically 30 to 365 days).

Cookie consent choices are retained for up to 12 months to ensure we respect your preferences across multiple visits.

3.4 Operational and Security Logs

Server logs and security-related data (including IP addresses) are retained for up to 90 days for troubleshooting, fraud prevention, and security investigations. After this period, they are either deleted or anonymized.

4. Deletion and Anonymization

Once the retention period has expired, data is either permanently deleted from our systems or anonymized in a way that it can no longer be linked to any specific user or device.

Anonymized or aggregated data that cannot identify individuals may be retained indefinitely for statistical analysis, product development, and business intelligence purposes.

5. Third-Party Data Retention

Some data is processed by third-party analytics and advertising platforms (such as Google Analytics 4 and TikTok Pixel). These platforms have their own data retention policies, which may differ from Hipopick's practices.

We encourage you to review the data retention policies of these third parties if you have concerns about how long your data is stored:

• Google Analytics 4 Data Retention
• TikTok Privacy Policy

6. Your Rights

If you are located in a region with data protection rights (such as the EU, UK, or California), you may have the right to request access to, correction of, or deletion of your data. Since Hipopick does not collect personal account information, most requests will apply to analytics or device-level data.

To exercise your rights, please contact us at: [email protected] with the subject line "Data Retention Request".

We will respond to valid requests in accordance with applicable laws and within the timeframes required by those laws.

7. Changes to This Data Retention Policy

We may update this Data Retention Policy from time to time to reflect changes in our practices, technologies, or legal requirements.

Any updates will be posted on this page with an updated "Last Updated" date. Continued use of Hipopick after changes have been posted constitutes your acceptance of the updated policy.