Privacy

Last updated: September 26, 2026

TL;DR
  • We don’t track you. No third-party analytics. No ad pixels.
  • Server logs are retained 90 days for security, then deleted.
  • If you email us, we keep your message and the details you choose to share until the inquiry is resolved, or 18 months from last activity at most. You can ask us to delete it.
WHAT WE COLLECT

When you visit ohiiho.com:

  • Edge logs (Cloudflare) for DDoS mitigation, caching, and bot management. Cloudflare may retain visitor IP addresses briefly for security purposes.
  • Our origin server logs (IP, user agent, path, timestamp), retained 90 days for security and incident response, then deleted
  • OHIIHO does not set cookies on the marketing site. Cloudflare may set strictly necessary technical cookies (e.g. __cf_bm for bot management) for security purposes — these are not used for tracking or analytics.
  • No analytics — no Google Analytics, no Plausible, no Fathom, no Matomo on our side
  • No Cloudflare Web Analytics beacon

When you email any of our published addresses (hello@ohiiho.com, security@ohiiho.com, privacy@ohiiho.com, dpo@ohiiho.com or legal@ohiiho.com):

  • Your email address and the content of your message, retained until the inquiry is resolved, or 18 months from last activity, whichever comes first.
WHAT WE DON'T DO
  • We never sell personal data.
  • We do not use trackers, fingerprinting or ad pixels.
  • We do not run A/B tests against visitors.
SERVICE PROVIDERS & SHARING

To run the site and handle email, we rely on a small number of processors:

  • Cloudflare — edge delivery, DDoS protection and bot management.
  • Proton — hosting of our mailboxes (Switzerland).
  • EU hosting — the origin server is in the European Union.

Partners. We may introduce you to an OHIIHO partner in your region, but only if you ask us to or agree when we propose it. We do not pass your inquiry to anyone otherwise.

YOUR RIGHTS

Under PDPA (Singapore) and GDPR (EU), you may request:

  • Access to the personal data we hold about you
  • Correction of inaccurate data
  • Deletion
  • Objection to processing

Send requests to: privacy@ohiiho.com
Data protection officer: dpo@ohiiho.com
Response time: 30 days or less.

CONTROLLERS AND DATA LOCATION
  • APAC visitors (PDPA): OHIIHO Pte. Ltd., Singapore
  • EU / EEA visitors (GDPR): OHIIHO OÜ, Tallinn, Estonia

Origin hosting is in the European Union. Edge caching is distributed globally via Cloudflare, including APAC nodes, to serve visitors from the nearest location. We do not transfer personal data to jurisdictions without an adequacy decision or equivalent safeguards.

CHANGES

Material changes to this policy will be published on this page with an updated date. We will not silently alter it.