Privacy policy

[NAME AND ADDRESS OF THE CONTROLLER ENTITY] operates Pawseno and decides what is done with your data (the “controller”). For any question or request about your data, write to us through the Support page.

Your account

Username, e-mail address, password and the language you want our e-mails in. The password is stored hashed and is never readable, not even by us. The username is permanent. When you change your e-mail address, the new one stays pending until you confirm it through the link we send, and the old address receives a warning.

Your profile

An optional profile photo, shown in your account bar. If you write articles, your name, photo, presentation and link are shown on those articles; the presentation of an ordinary account is displayed nowhere for now.

Your pets

Name, species, breed, sex, date of birth, description, the photos you upload and the privacy options you choose. A pet's public page can be read by anyone who scans its tag or reads its short code. Deleting a pet deletes its photos.

Lost pets

If you declare a pet lost, its page appears in the public list of lost pets with the date, the town and the message you write. You can end the alert at any time.

Tag scans and position sharing

Anyone who scans a tag can choose to share their position so the owner knows where the pet was seen. The sharing is voluntary and explicit: a dedicated button, then the browser's permission. We then record the coordinates, the time, the IP address and the device type. The coordinates are sent to HERE, a mapping service, to obtain a readable address; that address may differ by a few metres and point to a street, a neighbouring building or a place without an address. Position and address are shown only to the pet's owner, who can also cap the number of positions recorded per day. The IP address is never shown to the owner and is kept only to prevent abuse. Positions are deleted automatically after 90 days. No account is needed; to have a shared position removed earlier, write to us through the Support page.

Shop, orders and payment

Your cart lives in your browser until you order. An order records the items, quantities, the engraving text (your pet's name and the phone number you choose), the delivery country, any promo code and the amounts. Payment happens on Stripe's pages: Stripe receives your e-mail address, the delivery address you enter, the item names and the engraving text; your card details never reach our servers. Once paid, we keep the confirmed e-mail address and the delivery address on the order to produce and ship it. We send transactional e-mails only: order confirmed, in production, shipped, and a single reminder if a payment was started but not completed. We send no newsletter.

Support requests

The subject and message you write on the support page are sent by e-mail to our team, together with your account's e-mail address, so we can answer you. When a sign-in code or a confirmation link we sent you is refused by your e-mail provider, you can also write to us without being signed in: that request carries the address concerned, the provider's refusal reason and the identifier of the refused message.

Security and technical data

IP addresses and device types appear in our technical logs and in the request limiter that protects the service against abuse. Sign-in codes sent by e-mail (two-step verification) and single-use registration codes are short-lived. When an error occurs, its details are sent to Sentry, an error-monitoring service, with your account identifier, your username and the content of the request that failed.

Your account, your pets, their photos and your favourites: until you delete the account (a deletion is confirmed by e-mail before it happens). Paid orders: seven years, as accounting records require, but stripped of your e-mail, delivery address, pet name and engraving text as soon as the account is deleted; only amounts and statuses remain. Orders started but not paid: cancelled automatically after one hour. Scan positions: 90 days. Sign-in and registration codes: a few minutes, or single use. Technical logs: [RETENTION OF TECHNICAL LOGS].

You can consult, correct and delete your data from your profile; deleting the account erases your pets, their photos and your favourites and anonymises your paid orders. You also have the right to restrict or object to a processing, to withdraw a consent at any time, and to receive a copy of your data: there is no automatic export yet, so ask us through the Support page and we will answer within one month. Someone who shared a position without an account can ask for its removal the same way. If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, Rue de la Presse 35, 1000 Brussels, autoriteprotectiondonnees.be).

Like any website, we place a few items on your device: three cookies and some browser storage. Here is the complete list, what each one is for and how long it stays.

Every one of these items is needed for the service you asked for or remembers a choice you made: the law does not require prior consent for them, only this information. We use no audience measurement and no advertising, and no third-party script runs on this site. Payment happens on Stripe's own pages, which set their own cookies on their domain, under Stripe's responsibility.

You can delete all of them at any time from your browser settings; signing out removes the session cookie. Without them, your sign-in, your language and your cart cannot be kept.

The date at the bottom of the page changes with every revision. If a change affects what we collect or who receives it, we tell you in the application before it applies.