Privacy Notice

Draft pending legal review. This notice describes the practices we have built the product around. It has not yet been reviewed by counsel and should not be relied on as a final legal document.

Who we are

petfocial is operated by artifocial. For any question about this notice or about your data, write to info@petfocial.com.

What we collect

If you only browse

You can read the map, the organization listings and the access guide without an account. We use Vercel Web Analytics on public pages to measure page views and visitor counts, referrers, approximate city/region/country, and browser, operating-system and device type. Vercel receives network requests containing your IP address and browser user-agent; these requests support approximate location, browser/device statistics and temporary visitor identification. We remove query strings and URL fragments from page-view URLs sent to Vercel, and exclude account, authentication and administrative pages. We do not build advertising profiles and we do not sell any of it.

The access map also sends a separate first-party page-view metric to our API, including its path, query string and referrer. The API uses the query and referrer to classify the traffic source, and stores the path, traffic channel, referrer domain, paid-campaign marker and a visitor hash derived from IP address and user-agent with a monthly salt. This separate metric does not use Vercel's 24-hour visitor session or the Vercel browser opt-out described in our analytics instructions.

If you create an account

Accounts are handled by our authentication provider, Supabase. When you sign in with Google we receive your email address, your display name and your profile image from Google. We never receive your Google password.

We additionally store, only if you provide it:

• a phone number, so an organization can reach you about a report you filed;
• an approximate location, so we can show you what is nearby. This is optional, and the site works without it.

If you report an animal

A report contains what you describe, any photographs you attach, and the location of the animal. Please note the distinction we draw here:

• The animal’s location is published — coarsened, not exact — because responders need it. That is the point of the report.
• Your location is not. Your own coordinates are never shown to other users.
• Your display name is shown on reports you file, so responders know who to follow up with. Your email address and phone number are not shown publicly.

Why we are allowed to hold it

We process account and report data to provide the service you asked us for. We process aggregate analytics on the basis of our legitimate interest in knowing which parts of the site are used. Where consent is the right basis — optional location, for instance — we ask, and you can decline without losing access.

Who we share it with

Our processors: Supabase (authentication and database), Vercel (hosting and web analytics), and Mapbox (map rendering). Mapbox receives the map viewport in order to serve tiles. Each acts on our instructions and none of them is permitted to use your data for their own purposes.

We share a report’s contents with the organizations able to respond to it. We disclose data to authorities only where we are legally required to.

We do not sell personal data. We do not run third-party advertising.

How long we keep it

Account data is kept while your account exists and for 30 days after you delete it, to allow for accidental deletion. Reports are retained after resolution as a record of what happened in an area, but we will detach your identity from a report on request. Aggregate analytics are retained in non-identifying form.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to a particular use. Write to info@petfocial.com and we will respond within 30 days. Depending on where you live you may also have the right to complain to a data protection regulator.

Cookies

We set a session cookie when you sign in. That is required for the site to know you are logged in and cannot be turned off while you are signed in. We do not use advertising or cross-site tracking cookies. Vercel Web Analytics loads a third-party analytics script, uses no analytics cookies, and derives a temporary visitor hash from the incoming request; its visitor session is discarded after 24 hours. We do not send account details or precise location to Vercel Web Analytics. See the Vercel Web Analytics privacy documentation.

One page is different, and you have to go looking for it. On the booking payment form we load Stripe's payment library so your card details go straight to Stripe and never touch our servers. Stripe sets two cookies of its own there, which it uses to tell a real customer from a fraudulent one: __stripe_sid, which lasts for the payment session, and __stripe_mid, which lasts a year and identifies the device across sessions. They are set only on that form, never on the map, the listings or the access guide. What Stripe does with them is described in Stripe's cookie policy. If you never book and pay, they are never set.

Children

The service is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has given us data, contact us and we will remove it.

Changes

If we change this notice we will update the date above. For a change that materially affects how we use your data, we will tell account holders directly rather than relying on you re-reading this page.