Privacy policy
Applies to the OhMyAds apps for Android and iOS, and to this website. Last updated 16 September 2026.
What we collect
- Your email address
- Supplied when you create an account, and held by Google Firebase Authentication on our behalf. We never see or store your password — Firebase handles it, and we cannot read it. Your email is stored alongside your usage records so that a person can be told apart from another person, and so that you can be shown your own data.
- Ad interaction records
- When an ad is requested, shown, clicked, dismissed or reports a value, the app records what happened: the time, the ad format and placement, how long a full-screen ad was on screen, any revenue figure the ad network reported with its currency, the platform, the app version, a per-install identifier, a per-session identifier, and the account that was signed in.
- What we deliberately do not collect
- No advertising identifier, no device identifier, no location, no contacts, no photos, no address book, and no analytics profile. The per-install identifier is a random value the app generates for itself; it is not your device’s advertising ID, it does not follow you to any other app, and it is destroyed if you reinstall.
Why we collect it
To work out which ad formats and placements actually earn, which is the entire purpose of the apps. The records are aggregated into a private dashboard that only we can open. We do not sell this data, we do not share it with anyone other than the processors named below, and we do not use it to build a profile of you or to target advertising at you.
Advertising
The apps display ads through Google’s Mobile Ads SDK. Google collects its own data as an independent controller when it serves an ad, on its own terms and not on ours, and what it collects is governed by how Google uses information from sites or apps that use its services. We receive nothing from Google that identifies you personally — only the anonymous revenue figure the SDK reports back to the app.
Who processes it
- Google Firebase Authentication
- Holds your email address and password so you can sign in.
- Our own server
- A single machine we run, in Germany, hosted by Hetzner Online GmbH. It holds the ad interaction records and your email address. It is reachable only over HTTPS and every route on it requires a credential.
- Google AdMob
- Serves the ads, as described above.
How long we keep it
Ad interaction records are deleted automatically 30 days after they are recorded. Your account and email address are kept until you delete the account.
Deleting your data
You can delete your account and everything attached to it at any time, and you do not have to ask us. There are two ways, and both do the same thing:
- In either app
- Settings → Account → Delete account.
- On the web
- ohmyads.shimmytech.com — sign in, and the same button is there.
Deletion removes every ad interaction record attached to your account, then removes the account itself from Firebase. It is immediate and it cannot be undone. The same page will also show you what we currently hold, before you decide.
Your rights
If you are in the UK or the EU, the GDPR gives you the right to access, correct, export, restrict or erase your personal data, and to object to our processing of it. The deletion button above is the fastest route to erasure; for anything else, write to us and we will answer within one month. You may also complain to your national data protection authority.
Children
The apps are not directed at children and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, write to us and we will delete it.
Changes
If this policy changes, the date at the top changes with it. Material changes will be announced in the apps before they take effect.