Privacy Policy
Last updated July 24, 2026
Lost Pet Radar is committed to protecting your personal information and your right to privacy. This policy explains what data we collect, how we use it, and the controls available to you - including your rights under the California Consumer Privacy Act (CCPA).
1. Information We Collect
We collect information you provide directly (for example through forms) and limited technical information collected automatically (such as device/browser metadata and usage diagnostics).
2. How Information Is Shared
Information may be shared when required to provide services, comply with legal obligations, protect rights, or operate the platform with the service providers named in Section 3 below. Each named provider processes personal information only on our behalf and under contract.
3. Service Providers (Subprocessors)
We use the following third-party service providers to operate the platform. Each acts as a service provider or processor - they process personal information solely on our behalf and are not permitted to use it for their own purposes.
- Cloudflare, Inc. - Cloud hosting, CDN, DNS, Workers compute, D1 database hosting, R2 object storage for uploaded pet photos, Workers AI for automated image moderation, Turnstile bot protection, and DDoS protection. Data may be processed in the United States and other regions where Cloudflare operates.
- Resend, Inc. - Transactional email delivery (verification emails, notifications, sign-in links).
In addition to the processors above, the interactive map loads assets and tiles directly in your browser from the following third parties. Because your browser contacts them directly to fetch map data, they may receive your IP address and standard request information. They do not receive your account details, and we do not share your personal information with them.
- OpenStreetMap Foundation - Base map tiles for the interactive map.
- Esri (ArcGIS Online) - Satellite imagery tiles for the map’s satellite view.
- unpkg (Cloudflare-operated CDN) - Serves the open-source Leaflet mapping library used to render the map.
We do not use a third-party payment processor because Lost Pet Radar does not charge for any feature; if we add paid features in the future we will update this policy to name the payment provider before launch. We do not sell your personal information to any third party, and we do not share personal information with third parties for their own direct marketing purposes.
4. Cookies And Tracking
We use cookies and related technologies for essential functionality and analytics. See the Cookie Policy for detailed controls.
5. Retention And Deletion Timelines
We keep each category of data only for as long as it serves the purpose it was collected for, then delete or expire it as described below. The periods below reflect how the service is built to handle data today.
- Pet sighting reports - a sighting report is shown on the public map and in search results for 30 days from the time it is posted, after which it automatically expires and is removed from active results. The underlying record and its photo are kept in our database and storage after expiry so that search history and duplicate-photo detection continue to work, until you ask us to delete it.
- Owner “lost pet” notices - remain active until you mark the pet as found or ask us to remove the notice. Marking a pet found closes the notice; the record is then retained on the same basis as an expired report above until a deletion request is received.
- Uploaded pet photos - stored in Cloudflare R2 object storage alongside the report they belong to, and kept for the same period as that report. When a report is deleted at your request, its photo is removed within 30 days.
- Account and sign-in data - your account record is retained for the life of your account. Sign-in is passwordless: a one-time sign-in code expires after 10 minutes, and a signed-in session lasts 24 hours before you must sign in again.
- Contact-form messages - messages you send us through the contact form are retained until you ask us to delete them, so we can respond to and follow up on your inquiry.
- Security and abuse-prevention records - short-lived records such as rate-limit counters are purged automatically once their time window closes, typically within 24 hours.
- Usage logs and diagnostics - retained for up to 90 days for security and debugging, then purged on our infrastructure provider’s standard log-retention schedule.
- Email delivery logs - retained for up to 30 days by our email provider (Resend) for deliverability diagnostics.
- Legal-hold exception - where the law requires it, limited records (for example fraud-prevention or tax records) may be kept longer, up to 7 years, even after a deletion request.
Deletion requests. To have your account, a report, or other personal information deleted, submit a request as described in the Verifiable Consumer Requests section below. Once we have verified your request, we complete the deletion within 30 days, and any residual copies held in encrypted backups are purged on our normal backup rotation, no later than 90 days after deletion. These timelines are separate from, and do not extend, the response deadlines we commit to in Section 9.
6. AI and Automated Processing
Parts of Lost Pet Radar use artificial intelligence and automated processing to keep the service safe and to improve search results. This section explains what these systems do, the decisions they make, and how we handle the content you provide.
Automated image review. When you upload a photo to create a pet report, the image is automatically analyzed by an AI vision model before the report is published. We use this to detect and block unsafe or off-topic content - for example nudity, graphic violence or gore, hateful symbols, or images that do not contain a pet.
Pet identification. The same kind of model may also examine an uploaded photo to estimate the type of animal shown (for example “tabby cat” or “mixed-breed dog”). When the model is confident, that label is stored with your report to help people find matching pets more easily. When it is unsure, no label is added.
Automated text screening. Text you submit with a report, such as remarks, is automatically screened against a profanity filter and may be declined if it contains blocked language.
The AI image processing above is performed on our behalf by our cloud infrastructure provider (Cloudflare Workers AI) acting as a service provider. Your photos and report text are used only to operate, protect, and improve the service. They are not used to train any artificial-intelligence models - whether ours, our provider’s, or any third party’s - and are not sold or shared for that purpose.
The only automated decision these systems make is whether to accept or decline a submission. No automated decision produces legal or similarly significant effects about you. If a report you submit is declined and you believe that was a mistake, you can contact us at privacy@lostpetradar.com to request human review.
7. Your Rights
Depending on your region, you may request access, correction, or deletion of your personal information. You may also opt out of certain communications. California residents have additional rights described in the section below.
8. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you the following rights:
- Right to Know - You may request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for which we collected it, and the categories of third parties with whom we have shared it.
- Right to Delete - You may request that we delete personal information we have collected from you, subject to certain exceptions (for example, information we are required to retain by law or need to complete a transaction you requested).
- Right to Correct - You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt Out of Sale or Sharing - We do not sell or share your personal information with third parties for cross-context behavioral advertising. There is nothing to opt out of, but you may still submit a request to confirm this.
- Right to Limit Use of Sensitive Personal Information - We do not use or disclose sensitive personal information beyond the purposes permitted by the CPRA.
- Right of Non-Discrimination - We will not discriminate against you for exercising any of the rights listed here.
How to Submit a CCPA Request
To exercise any of these rights, submit a verifiable consumer request as described in the Verifiable Consumer Requests section below. That section explains the submission methods, how we verify your identity, and the timelines we commit to for confirming receipt and responding.
Do Not Sell or Share My Personal Information
We do not sell personal information and do not share it for cross-context behavioral advertising. If you wish to confirm this in writing or submit a formal opt-out of sale / sharing request, email privacy@lostpetradar.com with the subject line “Do Not Sell or Share”.
9. Verifiable Consumer Requests
This section describes how to submit a request to exercise the rights listed above, how we confirm your identity, and the timelines we commit to. It applies to California residents exercising CCPA/CPRA rights and to any other person we choose to extend these rights to.
How to Submit a Request
You may submit a privacy request through either of these methods:
- Email - send a message to privacy@lostpetradar.com with the subject line “Privacy Request”.
- Online form - use our Contact form and state that you are making a privacy request.
To help us locate your records and respond, please include your full name, the email address associated with your account, the specific right you wish to exercise (for example, to know, delete, or correct), and any detail that helps us identify the information at issue.
How We Verify Your Identity
Before we act on a request, we must verify that you are the person whose personal information is the subject of the request. We do this by asking you to confirm identifying information we already hold and matching it to our records - for example, the email address on your account and details of recent account activity. For requests to know or correct information, we generally match at least two data points; for requests to delete information, we apply a higher degree of certainty before acting because the action is not reversible.
We use the information you provide for verification solely to verify your identity and will not retain it for any other purpose. If we cannot verify your identity with the information available, we may decline the request and will explain why so you can resubmit with additional detail.
Authorized agents and minors. You may authorize an agent to submit a request on your behalf; the agent must provide written, signed permission, and we may still ask you to verify your own identity directly with us. A parent or guardian may submit a request on behalf of a minor child in their household.
Our Response Timelines
- Confirmation of receipt within 10 business days - after you submit a request, we will confirm that we received it within 10 business days and describe how we will process it, including our verification process.
- Substantive response within 45 calendar days - we will respond to a verifiable request within 45 calendar days of receiving it. If we need more time, we may extend once by up to an additional 45 calendar days (90 calendar days total) and will notify you in writing of the extension and the reason for it.
Fees, Format, and Non-Discrimination
Verifiable requests are free. If a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee or decline to act, and we will explain that decision. We deliver our response by email or another readily accessible format, and for requests to know we cover the 12-month period preceding the request. We will not discriminate against you for exercising any of these rights. If you are not satisfied with our response, you may reply to privacy@lostpetradar.com to ask us to reconsider.
10. Contact Us
For privacy inquiries, CCPA requests, or to exercise any of the rights described in this policy, contact us at privacy@lostpetradar.com. Please include your name, the email associated with your account, and a brief description of your request so we can process it promptly.