Privacy Policy

1. What this policy covers

The campaign builder stores your draft and resized pet photo in your browser tab. When you request photo identification, we send the resized photo through our server to Google Gemini to suggest pet details. Place searches and map requests are sent to Google Maps. After you select a location, we send a rounded location and search-area boundary to WorldPop to estimate nearby residents. When you submit your email in the campaign builder, we save your campaign draft, resized pet photo, email and contact preferences in our private Firebase database. Later edits and steps update that draft. When you open checkout, we save an order linked to the campaign and send your email and selected plan to Stripe. Stripe hosts the payment fields; card details never pass through our server. Verified payment notifications update your order and subscription status. Paying submits a campaign for setup; it does not mean advertisements are already running.

2. Information we collect

Paid pet alerts have a public page containing the pet photo, description, last-seen details and the owner’s message to neighbors. The owner’s phone number is shown only when they choose public phone sharing; their sign-in email and billing details stay private. A visitor can submit a sighting, optionally including their name, location and reply contact. We store these messages in Firebase and make them available only to the campaign owner through their dashboard and to authorized service administrators. We use Resend to email the campaign owner when a new sighting message arrives. Resend receives the purchase email address, pet name and private inbox link; the notification does not include the sighting text or the reporter’s contact details. Sighting messages are not a public comment feed. We also store a hashed network identifier and submission counts to limit spam. Contact us to request removal of a public alert or sighting information.

• Population estimates: WorldPop receives the geographic boundary around your selected location, rounded to approximately 100 meters, to return a population estimate. We do not send your street-address text, pet photo, name, email or phone number to WorldPop.
• Pet-photo identification and location search: Google Gemini processes the photo you choose when you continue from the photo step. We do not intentionally store that photo on our server or include it in application logs. Google Maps processes place queries, map requests and associated technical information. Provider processing and retention are subject to the applicable Google service terms and account settings.
• Messages you send us: your email address, name if supplied, message content, attachments and any other information you choose to provide. Please do not send financial information, identification documents or other sensitive details.
• Technical information: hosting and security systems may process IP addresses, request times, pages requested, browser and device information, and error logs to deliver and protect the site.
• Website analytics: Explicit onboarding events include pet type, selected priority, radius, plan, progress, campaign identifiers and whether optional fields are filled. These event fields exclude your raw contact details, pet photo, exact address and free-form neighbor message. PostHog also collects page views, page exits, clicks and interactions, browser errors, device and browser details, referrer information, visitor and session identifiers, and campaign parameters in URLs, such as UTM tags and advertising click identifiers. These identifiers can distinguish a browser over time; the data is not necessarily anonymous.
• Session replay: when enabled in our PostHog project, recordings may capture the visible page and interactions such as clicks and scrolling. Form inputs are configured to be masked and console-log recording is disabled. Avoid including personal information in page URLs.

3. How we use information

We use information to operate and secure the website, respond to inquiries and privacy requests, troubleshoot errors, understand how visitors use the site and find us, improve our pages, and meet legal obligations. We do not use this website’s analytics to make decisions that produce legal or similarly significant effects about you.

Where a legal basis is required, we rely on our legitimate interests in operating a secure website, answering inquiries and improving our service, subject to your rights; taking steps you request before entering a contract; and complying with legal obligations. Where applicable law requires consent for particular processing or storage technologies, consent is the required basis.

4. Cookies and similar technologies

The campaign preview uses session storage to restore your answers, contact preferences, selected photo and progress when you refresh within the same browser tab. Use “Start over” in the preview to clear this draft. Submitting your email saves your campaign draft on our server, and opening checkout saves a linked order; clearing your browser draft does not delete these server records. Browser session restoration may retain tab storage. If you download a summary, that file remains on your device until you delete it.

PostHog analytics runs on the production website and may use cookies and browser storage to recognize repeat visits and connect interactions within a session. We also receive campaign parameters that arrive in the page URL. We use the Google tag and OpenAI’s ChatGPT Ads measurement pixel for advertising measurement, including page views, the selected plan and potential order value when you open checkout, and verified payment amounts. We retain advertising click references and the OpenAI browser reference with your private order to measure paid purchases and subscription renewals through Google Data Manager and OpenAI’s Conversions API. These server payloads contain the Stripe invoice reference, payment time, plan and amount; they do not contain your contact details, pet photo or last-seen address. Advertising references are retained in browser storage for up to 30 days before checkout. Explicit checkout payloads do not include your pet photo, contact details or last-seen address. OpenAI’s pixel uses first-party attribution and browser-reference cookies; when automatic advanced matching is enabled, it can detect supported customer information on the site and send hashed identifiers to improve matching. We do not currently load a Meta advertising pixel.

You can manage or delete cookies and local storage through your browser settings, or use browser tools that block tracking requests. Clearing storage may cause a new analytics identifier to be assigned on your next visit. These browser controls do not delete information already collected; contact us to request deletion. This website does not currently provide an in-site analytics consent selector for all analytics. The additional server advertising-attribution capture respects Do Not Track and Global Privacy Control at checkout. To withdraw measurement for an existing order, contact us; browser settings alone cannot change references already saved on that order.

5. Who receives information

We use service providers to operate the site and handle communications, including Vercel for hosting and delivery, PostHog for analytics and, when enabled, session replay, Google for advertising measurement, requested photo identification and maps, OpenAI for ChatGPT Ads measurement, WorldPop for geographic population estimates, Firebase for private campaign and order storage, Stripe for payment processing and billing, and Resend for campaign notification emails. Our support mailbox uses Namecheap Private Email. They receive information needed for their roles.

We may disclose information when required by law, to protect rights or safety, to investigate misuse, to professional advisers under appropriate confidentiality obligations, or as part of a merger, acquisition or transfer of our business with appropriate protections.

We do not sell personal information or share it for cross-context behavioral advertising. Social platform logos on our pages are illustrations and are not embedded social tracking widgets. Sending us a support message does not authorize us to publish it or use it in a pet advertisement.

6. Storage, retention and security

Our PostHog project uses its US hosting region. Other providers may process information in the United States and other countries, whose privacy laws may differ from those where you live. Where required, international transfers must use an applicable legal safeguard.

We keep information only as long as reasonably needed for the purposes described here. Retention depends on the type of information, whether an inquiry remains open, security needs, applicable legal requirements and our providers’ configured retention periods. We review information for deletion or de-identification when it is no longer needed; backups may persist until their normal expiry.

We use reasonable technical and organizational measures to protect information, including HTTPS for this website and access controls. No online service can guarantee absolute security.

7. Your choices and privacy rights

Depending on where you live and which laws apply, you may have rights to request access, correction, deletion or a portable copy of your personal information; object to or restrict certain processing; withdraw consent where processing relies on it; and appeal a refusal of a request. California residents may also have rights to know categories, sources, purposes and recipients of personal information, and to opt out of sale or sharing where applicable. We will not discriminate against you for exercising applicable rights.

Send requests to hello@lostpetsignal.com. We may need proportionate information to verify your identity or an authorized agent’s authority. Analytics associated only with a browser identifier may be difficult to locate without that identifier. We will explain any applicable exception or limitation and respond within the period required by applicable law. You may also complain to your local data protection authority where that right applies.

8. Children and external links

Our service is intended for adults aged 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a child has supplied information so we can investigate and take appropriate action.

External websites have their own privacy practices. This policy applies to Lost Pet Signal, not services you visit through external links.

9. Updates and contact

We will post changes here with a revised date and provide additional notice when required for material changes. For questions about this policy or our handling of your information, contact Solder Virtual Labs at hello@lostpetsignal.com.