Privacy policy

Have you seen? exists to help people and pets reunite. We only collect what we need to connect owners with the neighbors who spot their pets. This page explains what we collect, why, and who can see it. We never show anyone's email address to other users.

What we collect

• Email address of anyone who posts, signs in or sends a message. Used to verify you, deliver messages and send the links you need to manage a post.
• Post details you enter: pet name, breed, color, sex, size, notes, when and where it was seen.
• Exact location you pick for a post. It is stored privately and never shown to other users.
• Photos you upload. Metadata such as GPS and camera details is removed before storage.
• Messages sent through a post, so owners and finders can talk without sharing addresses.
• Technical data needed to prevent abuse: for each request that is limited, a one-way hash made from your IP address and browser type, or from your email address, with the kind of action and the time. We do not keep your raw IP address. These rows are deleted by a daily job once they are about two days old. If you report a post we also keep the same kind of hash, so one person cannot report it repeatedly.

What is public

• The post details and photos, plus an approximate map position. For found pets the position is deliberately shifted by a few hundred meters, and distances are rounded.
• Anything you type into notes or a place name is public. Please do not put phone numbers, home addresses or other personal details there.
• Posts are hidden from public view 30 days after they are published or renewed, or sooner if closed.

How long we keep things

• Photo files are deleted from storage about 30 days after a post stops being public (so roughly 60 days after it was last published or renewed). Until then you can still renew or reopen the post.
• Post details, your email address and conversation messages are not deleted automatically. A hidden post stays in our database, private to us and to you.
• Your private conversation link stops working 14 days after the last message in that conversation. The messages themselves stay stored, and the post owner can still read them when signed in.
• The abuse-prevention data described above is deleted after about two days.

Who else handles data

• Hosting, database, sign-in and photo storage providers, to run the service.
• An email delivery provider, to send message notifications and contact emails (sign-in codes come from the sign-in provider). It sees the recipient address and the text of what it delivers.
• Cloudflare Turnstile, a captcha shown to signed-out visitors when they post or send a message. Your browser talks to Cloudflare to solve it, and Cloudflare tells us whether it passed.
• Vercel Speed Insights, which measures page load performance. It does not use cookies.
• A map tile provider (OpenFreeMap) and a place-search service (Photon). Place lookups send your search text or approximate coordinates, rounded to about 100 m. Your browser also contacts the tile provider to draw the map.
• If you use your device location, it stays in your browser and is not put in shared links.

We do not sell personal data, and the site does not use advertising trackers or analytics cookies.

Cookies

We use only the cookies needed to keep you signed in. Turnstile may set its own cookie or storage in your browser to tell people from bots.

Your choices

• Close a post or mark it reunited at any time to remove it from public view.
• You can block a conversation to stop further messages from that sender.
• There is no self-service button to delete your account or data yet. To ask for a copy or for deletion, contact us using the address below (shown once a contact address is configured). Requests are handled by hand, and we cannot promise a deadline.

Children

The service is not directed at children under 13.

Changes

We may update this policy. The date above shows the latest version.