Privacy policy
Last updated: October 2026
Controller
The operator named in the legal notice is responsible for data processing.
Data we process
When signing in: email address or Google account data (name, email) and a display name. For reports: details about the animal, photos, date and location. For messages: message content between the people involved.
Location data
For lost-pet reports we store the exact location but publicly show only a location rounded to about 300 m so no home address can be identified. Only the reporter sees the exact location.
Purpose and legal basis
Providing the platform and connecting owners and finders (Art. 6(1)(b) GDPR). Moderation and abuse prevention (Art. 6(1)(f) GDPR). Web analytics only with your consent (Art. 6(1)(a) GDPR).
Contact between users
Email addresses are never shown to other users. Contact happens only via internal messages.
Processors
Supabase (database, authentication, file storage, servers in the EU), Vercel (hosting), OpenStreetMap/Nominatim (map tiles and address search; your IP address is transmitted to OSM servers), Google (sign-in with a Google account if you choose it; Google Analytics only with your consent).
Cookies and local storage
We use strictly necessary cookies for sign-in without consent (§ 165(3) TKG 2021). Analytics cookies are only set once you choose “Accept” in the cookie banner. Your choice is stored locally in your browser and can be changed at any time via “Cookie settings” in the footer. There is no advertising or ad tracking.
Web analytics with Google Analytics
With your consent we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the site is used. This sets the cookies “_ga” and “_ga_*” and processes usage data such as pages viewed, time on page, device type, browser and approximate location (derived from your IP address; Google Analytics 4 does not store full IP addresses). Google signals and advertising features are disabled. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework, which is covered by an EU Commission adequacy decision. Analytics data is deleted after 14 months. You can withdraw your consent at any time with effect for the future via “Cookie settings”.
Retention
Reports remain active until you delete them. Reports marked as reunited stop appearing in search after 30 days. Deleting your account deletes all your data.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection. You can lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).