Privacy Policy

Scope of this policy

This policy covers the HappyToyGo app, happytoygo.com and the services described below. “We” means the operator identified in Operator information. The operator is responsible for personal information protection. Contact: privacy@happytoygo.com.

Age and protected mode

The HappyToyGo app is for people aged 13 and older, or 14 and older in Quebec. Under 18s use protected mode: collections stay private, with no adult accounts, cloud sync or public sharing. Use stops below the minimum age. Birth year and month are used on the device to calculate an age band and are not saved. If we discover an account below the minimum age, we close it and delete its data.

Information we process

Without sign-in, your collection, settings, age band and province stay on your device. Public catalogue and store requests do not carry your collection or age band.

When you contact us, we process your email address and message to answer, verify or complete your request. A catalogue addition request includes the name, brand and optional link you send; please do not include unrelated personal information.

Optional adult accounts

This section applies only when you use an adult account feature offered in your app. To provide sign-in and collection sync, we process your email, the account identifier assigned by the sign-in provider, cloud collection, age band, province and a record of adult eligibility.

Choosing a platform sign-in does not authorize us to read your friends, profile photo or birthday. An available platform age-range signal is used only to determine eligibility for adult features. Available account features are shown in the app.

Service providers

OVH hosts the website and app services in Canada. Porkbun forwards support and privacy email. Versions offering adult sign-in use Amazon Web Services (Amazon Cognito, Canada Central) for sign-in and email codes.

Only when you choose the relevant sign-in method do Google or Meta process platform sign-in under their own policies; where applicable, Google Play provides an age-range signal. Platform and email services may process relevant information outside Canada. We remain responsible for processing on our behalf and do not sell personal information. Disclosures required by law or necessary to protect people and the service are limited to what is needed.

Website and cookies

Website pages, images and scripts are served by this site. It uses no advertising or analytics trackers and does not request device location. The collection demo lasts only in the open page; the language choice is included in the URL and does not create a persistent profile. Normal connections process technical information such as your IP address to deliver pages and protect the service.

If you use a hosted adult-account sign-in page, the sign-in service uses necessary session cookies. These public pages require no sign-in.

Information security

Connections use TLS encryption, and system access is restricted to people who need it. App services record only operational and security information; app request logs exclude raw IP addresses, search text, sign-in tokens and submitted bodies. Abuse prevention uses a short-lived identifier derived from an IP address. We notify affected people and regulators of privacy incidents where applicable law requires it.

Retention and deletion

We keep personal information only for the purpose it was collected for, then delete it or make it anonymous.

• Local collection and age-band settings: stay on your device until you clear app data or uninstall. Birth year and month are not saved.
• Account and cloud collection: kept while the account exists. After an authenticated deletion request is accepted, account access is revoked immediately and a background task deletes the account, sign-in methods and cloud collection.
• Catalogue requests: deleted 90 days after handling, or after one year if unhandled.
• Abuse prevention: a temporary IP-derived abuse-prevention identifier is retained for about two minutes.
• Routine database backups: expire on a daily rolling schedule, normally after about two weeks and within 16 days. Deleted accounts are not restored into active service.
• Support and privacy correspondence: retained only while needed to answer, verify and complete the request and meet applicable legal obligations; unnecessary message content is deleted when no longer needed.

Any record required by law is kept only for the required purpose and period, with restricted access. We do not keep a full account merely because a limited record must be retained.

To request account deletion, use Me → Data & account → Delete account in the app, or follow Delete your account to contact us without reinstalling the app. Email requests require identity verification; sending an email alone does not immediately delete an account. Deleting cloud data does not remove local collection data or your Google or Facebook account.

Your choices, rights and complaints

You can use the app without an account, stop using an optional sign-in service, clear local app data, or request account deletion. Subject to applicable law, you can request access, correction, deletion or withdrawal of consent, and a portable copy where that right applies. Withdrawing consent may prevent us from providing a feature that needs the information.

Write to privacy@happytoygo.com. We verify only what is reasonably needed to protect your data and respond within 30 days; we explain any lawful extension or refusal and available recourse. You can raise a concern with the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Policy updates

We update the version and effective date when this policy changes. Material changes are announced in the app or on this website before taking effect. We obtain consent in advance where a new purpose requires it.