Privacy Policy

About this policy
This policy explains how Pikkado collects and uses your personal information on pikkado.com and in the Pikkado mobile app. It describes the data needed to organize gift exchanges, the analytics and advertising services used, and how to contact us or request deletion of your account and its associated data.

Information we collect

Depending on the features you use and the information provided by you or your group organizer, Pikkado processes information including:

  • Your first and last name, email address, password and account identifier.
  • Your gender, language and photos added to your profile or gift ideas.
  • Your groups, participation, partner relationships, exclusion rules and draw results.
  • Your wish lists, gift ideas and messages or comments exchanged within groups.
  • Gift exchange details, such as the name, date, budget and organizer's messages.
  • Your last access date and technical and usage data described in the section on cookies, analytics and advertising.

This information comes from your actions on the website or in the app, and from information entered by the organizer to create the group and invite its members. Gift exchange data is available to the organizer or participants according to their access rights and the group's settings. Communications with the production service use HTTPS to protect data in transit. Never include your password in a message to support.

Using the service and your information:

You provide information when you create or join a group, update your profile, prepare a wish list, add a photo, send a message or contact us. The organizer may also enter your contact details to invite you to a gift exchange.

We use this information for the following purposes:

  • Create and manage accounts, groups, invitations and participation in gift exchanges.
  • Run draws according to the selected rules and allow groups to be reused from year to year.
  • Share wish lists and deliver messages to their intended recipients.
  • Respond to support requests, operate the service and diagnose errors.
  • Measure use of the service and display advertising as described below.

Cookies, analytics, location and advertising

The website uses sign-in cookies and analytics and advertising technologies. The app also uses technical identifiers and Google services. Depending on the service used, the permissions granted and the applicable settings, the data processed may include the following :

  • Language, device information, operating system, browser and app version.
  • Visits, screens viewed, actions taken, service request results and technical diagnostics.
  • The IP address, which may be used to estimate a general location.
  • Session, installation or app identifiers, the account identifier used for analytics and, when available, the Android advertising identifier.
  • Ad interactions and data needed to deliver ads, measure their performance and prevent fraud.

Analytics. Pikkado uses Google Analytics on the website and Google Analytics for Firebase in the mobile app to understand and improve use of the service. In the app, a numeric participant identifier may be sent to Google as a user ID, along with the language and usage events. This identifier does not make the data anonymous. The app events defined by Pikkado do not send the contents of your messages, photos, wishes, password or email address to Analytics.

Advertising. The website uses Google AdSense and the mobile app uses Google AdMob. These services process identifiers, technical information and ad interactions to deliver and measure ads and prevent fraud. Personalization depends on the applicable choices, settings and rules. Google's UMP platform handles advertising consent requests in the app when required. You can review your choices through the app's advertising privacy options when they are available. These choices concern advertising and do not, by themselves, disable Analytics data collection.

Android location. If you allow access to approximate location, the app can determine your country and locality and send them to the Pikkado service. You can deny or withdraw this permission in Android settings. This permission is separate from Google services estimating a general location from the IP address.

Your settings and Google services. You can manage cookies in your browser and the advertising identifier in Android settings. Blocking sign-in cookies may prevent some features from working. To learn more about Google's data practices, read its privacy policy and its information about partner websites and apps.

Access, account deletion and retention

Request deletion of your account and data
You can request access to your information, corrections to it, or deletion of your Pikkado account and its associated data. Write to webmaster@en.pikkado.com or use our contact form, including “Account deletion” in your message. Provide the email address of the account concerned and, if possible, the names of your groups. Do not send your password. You can submit this request even if you have uninstalled the app. Our team handles these requests manually. We may need to verify your identity to protect your account.

Groups and accounts used for multiple exchanges
The organizer can delete a group using the group management tools. This removes the data for that exchange; it does not automatically delete an account that still belongs to another group. Leaving or deleting a single group therefore does not necessarily delete your entire account. If you are an invited participant, you can contact the organizer about changes to the exchange, or send us a request directly concerning your account and data. If a draw is in progress, mention it so that its consequences for other participants can be addressed.

Retention
Account, group and exchange data is used, among other purposes, to reuse groups and draw rules from year to year. It may therefore remain after the exchange date; uninstalling the app does not erase it. Technical logs and backups held by Pikkado are kept for one week. Data deleted from the active service may therefore remain in a backup until that backup expires.

For the website and mobile app, Google Analytics 4 retention settings are two months for event data and fourteen months for the user data concerned. The user data retention period resets when the user is active again, moving its expiry date to fourteen months after that activity. This reset does not extend the event data retention period. These settings do not limit retention of standard aggregated statistical reports or define retention of AdMob or AdSense advertising data. For Google's data practices, see the Google information linked in the previous section. To request deletion of your data, contact us using the details above.

You can use the same contact details for any other questions about this policy or your personal information.