This policy explains what Holiday Spirit collects, why, who it goes to, and how to get rid of it. It is written to be read, not survived.
Holiday Spirit is operated by Krampus, LLC, a Pennsylvania limited liability company. We are the controller of the personal information described here.
Krampus, LLCPrivacy contact: support@krampus.studio
| What | Why | Kept |
|---|---|---|
| Account details Email address, display name, avatar, an optional bio, and your holiday and notification preferences | To create your account, attribute your submissions, and let you sign back in | Until you delete your account |
| Year of birth The year only — never a full date of birth | To check you meet the minimum age of 13. Asked once, when you first open the app | Until you delete your account. It cannot be changed once set |
| Holiday display submissions Location, description, and photographs you choose to submit | To show the display to other users on the map | Retained after account deletion in anonymized form — see below |
| Approximate device location | Used only while the app is open, to find displays near you. Sent to our server as part of the search request and used to compute results | Never stored. Not written to any database table |
| Purchase records Which cosmetic items you bought, and the order identifier Google Play gives us | To give you the item you paid for, restore it when you reinstall, and handle support and refund queries | Until you delete your account, except where we must keep transaction records for tax and accounting purposes |
We want to be specific about this, because it is unusual:
Holiday Spirit sells cosmetic items for your profile. These are optional, and nothing about finding or submitting displays is behind a payment.
Payments are handled entirely by Google Play. Your card details go to Google, not to us. What we receive is a purchase token and an order identifier telling us the transaction succeeded and which item to grant. We hold that so you keep your items across devices and reinstalls.
Refunds are handled under Google Play’s refund policy. Contact us at support@krampus.studio and we will help, but the refund itself is issued by Google.
Cosmetic items have no monetary value outside the app. They cannot be exchanged for money, transferred to another account, or recovered after account deletion.
Please read this before you submit a photo. Photographs you submit are stored in a publicly accessible location. Anyone who has the image link can view the photograph without signing in to Holiday Spirit, including people who do not use the app. Image links are not indexed by us, but they are not secret.
Do not submit a photograph you would not be comfortable being seen publicly, and do not submit photographs of people without their agreement.
We remove the hidden metadata from your photographs before storing them. A photo taken on a phone normally carries embedded information the picture itself does not show — commonly the exact GPS coordinates where it was taken, along with the device model and timestamps. Because these images are publicly reachable, that information would otherwise be readable by anyone holding the link. We strip it during upload. The picture is not altered: the image data itself is copied across untouched, so nothing about how the photograph looks changes.
We also went back and removed this information from every photograph that had already been uploaded before we started doing it.
Holiday Spirit is about displays that people put up where they can be seen, and many are at private residences. If a display at your property has been listed, you have two options and neither requires you to become a regular user of the app.
Both require us to verify that the property is yours, and we do that by email and by hand. Write to support@krampus.studio from any address with the listing and the property address. We check what you tell us against what is already on the listing, and we may write back with a question or two that somebody at the address would be able to answer. What we do not do is put you through an identity check: no identity documents, no proof of purchase, no phone number. You never have to tell us why you want a listing gone — that part is your business, and we will not ask. We keep the correspondence only as long as it takes to settle the request, and we use it for nothing else.
No account is needed for either. We reply within 48 to 72 hours.
We do not sell personal information, and Holiday Spirit carries no advertising. There is no ad network in the app, so no advertising identifier and no device profile leaves it.
We use Supabase as our database, file storage, and authentication provider. Supabase processes this data on our behalf under our instructions. The infrastructure serving Holiday Spirit is located in the United States (AWS us-east-2).
We may disclose information where legally required, or where necessary to investigate abuse, protect someone’s safety, or enforce our Terms.
You can delete your account from inside the app, or from krampus.studio/delete-account without reinstalling.
When you delete your account, we remove your account record and the identifiers linking you to your submissions. The display listings and photographs you submitted remain in the app in anonymized form, because other users rely on them to find displays. Once anonymized they are no longer associated with you and we cannot re-link them to you.
That is the default rather than a requirement. If you want those removed as well, email support@krampus.studio from the address on the account and say so; the deletion flow has no option for it, so it happens only if you ask. What we remove and how long it takes is set out under deleting some of your data.
Account deletion happens immediately. It is a single operation, not a queued request: when it returns, your account record is gone and the identifiers linking you to your submissions have already been removed. There is no waiting period and no window in which it can be undone.
Our hosting provider keeps rolling daily snapshots of the database, retained for no more than seven days on our current plan. A copy of a deleted account record can therefore sit in a snapshot for up to a week before it ages out. Snapshots exist for disaster recovery and are never used to restore a deleted account. Photographs are held in separate file storage that database snapshots do not include.
You do not have to close the account to get rid of something, and if you are closing it you can ask for these to go at the same time. Comments, applause and follows you can remove yourself in the app, and they go immediately. Displays you submitted, their photographs, and reviews you wrote have no in-app control yet, so those go by email and we handle them by hand.
The steps, what is removed, what is kept, and how long it takes are set out on deleting some of your data. You do not have to give a reason, and we reply within 48 to 72 hours.
Data is transmitted over encrypted connections and stored with our hosting provider under their access controls. No system is perfectly secure, and photographs you submit are deliberately public as described above.
Holiday Spirit is not intended for children. You must be 13 or older to create an account. We do not knowingly collect personal information from children. If you believe a child has created an account, email support@krampus.studio and we will remove it.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information. Email support@krampus.studio and we will respond. We will not treat you differently for exercising these rights.
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app before it takes effect.
support@krampus.studio · Krampus, LLC, 951 Viewmont Dr # 1081, Dickson City, PA 18519, United States
This policy is governed by the laws of the Commonwealth of Pennsylvania, United States.