Privacy policy

Draft version 2026-11-04-en for the English-language community. Hosting location, operator procedures, and applicable US privacy requirements must be confirmed before public launch.

Information collected and why

Registration: email, display name, password hash, and required consent records. Sessions: hashed session tokens, CSRF tokens, and expiry. Verification and recovery: purpose-specific single-use token hashes, expiry, and encrypted queued email data. Community: posts, photos, comments, boards, follows, blocks, reports, and notifications. Pet names, species, weight, and age are optional. Support and rights requests collect the reply name, email, related URL, relationship, and message for handling the request, retained for 30 days after resolution. We do not collect payment information or GPS coordinates.

Photos and security

Uploaded photos are re-encoded on the server to remove EXIF metadata; originals are not stored or published. Faces, addresses, and phone numbers visible in image pixels are not automatically removed, so check before posting. Email/password accounts use Argon2id hashes. Provider sign-in accounts do not store provider passwords. Private posts and boards require server-side authorization.

External connections

The site does not use third-party analytics or advertising scripts. When configured, Google Identity Services loads on sign-in pages for Google authentication. ChatGPT sign-in uses the hosting platform. We store the provider account identifier, contact email, and your chosen public name; we do not receive your Google or ChatGPT password. Short-lived sign-in state expires after ten minutes and is removed during sign-in maintenance. Verification and recovery messages use the configured email service. The final provider and processing locations will be confirmed before public operation. Seller policies apply after following their links. Referral analytics count the offer and date without storing user IDs or IPs. Request limiting stores keyed identifier hashes, counts, and time windows rather than raw IPs or emails. Expired windows are periodically cleaned; operators review delayed cleanup.

Access, account closure, and retention

Account and authored data are retained while you use the service. You can download your data and close your account in settings. Closure immediately ends login and public visibility, then deletes the account, pet profiles, posts, comments, saves, and photos. Deleting a post also deletes photos used only by that post. Failed requests are retained for retry and operator review. Service-managed backups rotate for up to 30 days. A separate deletion history prevents erased data from returning after a restore. Remaining backups require deletion replay and recovery checks before use. Data deletion failures and replacement-backup failures are recorded separately. Expired managed backups are destroyed with retry on failure. Thirty days is an operational recovery period, not a statement of legal retention requirements. Records subject to applicable retention requirements are held separately where necessary. The service does not collect checkout or order records or apply transaction retention periods to all member data.

Responsible person and contact

Kiwoong Eom · eric.eom1@gmail.com · 9129960695
eric.eom1@gmail.com