Privacy Policy
Last updated: September 20, 2026
Who we are
Haunt My House is an independent Halloween project where you create a house and friends leave tricks and messages. This policy explains how we handle information when you use the service. Contact the operator at hauntmyhouseapp@gmail.com with privacy questions.
Information we collect
When you sign in with Google, our authentication provider receives your account identifier, email address, name, and profile picture information. We use this to sign you in and manage your account. We do not request access to your Gmail inbox, contacts, or Google Drive. We also store profile preferences, house names and designs, tricks and their positions, optional sender names, message text, and submission times. Contact us submissions include your selected topic and message, plus any name, email address, or phone number you choose to provide.
What other people can see
A house is accessible through its public link. Its display name, appearance, tricks, and optional sender names can be seen by visitors. Do not put private information in these fields. Message text is withheld from the house recipient until the Halloween opening time shown by the service. Authorized administrators can review messages before then to investigate abuse and moderate content. Messages are not end-to-end encrypted, and the recipient can copy or share a message after reading it.
How we use information
We use information to authenticate accounts, save and display houses, deliver messages, respond to inquiries, maintain the service, and address abuse. To limit spam, the server processes your IP address and stores a keyed hash with submission protection records. Hosting and authentication providers also process network and technical information needed to deliver and secure the service. Google account information is used for authentication and account features, not to create advertising profiles.
Service providers and disclosures
We use Supabase for authentication and database storage, Cloudflare for hosting, security, and domain email forwarding, and Google for sign-in. These providers process information needed to supply their services, potentially in countries other than your own. We do not sell your personal information. We may disclose information when necessary to comply with applicable law, investigate abuse, or protect users and the service.
Cookies and browser storage
Authentication uses cookies or browser storage to maintain your session. We also store preferences and, from this update onward, a list of tricks successfully left from this browser. That list contains the house name and link, trick type, and date, not a copy of the message text. Anyone using the same browser profile may see it. It is not synchronized between devices and can be cleared from the Tricks I left page or your browser settings.
Retention and deletion
Houses and messages may remain available in seasonal archives; they are not automatically deleted after Halloween. We retain account, content, inquiry, and security records as needed to operate the service, address requests and abuse, and meet applicable obligations. There is no single automatic deletion deadline for all records. You can request access, correction, or deletion by emailing hauntmyhouseapp@gmail.com. Include the relevant house link, but do not send passwords. We may ask for information needed to verify the request. Backups or records needed for legal or security reasons may remain after deletion from active systems, subject to applicable retention requirements.
Your choices and updates
You may use the service without creating a house or submitting a message. Sender names and contact details in the contact form are optional. You can revoke Google access in your Google Account settings; doing so does not by itself delete data already stored by Haunt My House. Privacy rights depend on where you live. Contact us to exercise applicable rights. If this policy changes, we will update this page and its date and provide additional notice where required.