Short version: we hold as little as we can, we never show owners and finders each other's details, and we don't sell or share anything for advertising.
Draft. Needs checking before launch (controller details, ICO registration number, retention periods).
We keep your message and, if you give it, your email address, so we can pass the owner's replies to you. The owner never sees your email. We delete it 90 days after the conversation goes quiet. The found page sets no cookies and loads nothing from other companies.
We hold your email address, what you've tagged (the type, name and note you chose), first names of any children you manage, your messages with finders, and your orders. We count scans of your stickers (the time, and whether it was you), but not who scanned them or where.
Under-13s can't have accounts. A parent manages their stuff, and the child's first name is only ever shown to that parent. We follow the ICO's Age Appropriate Design Code.
Stripe handles payments. We never see your card. We keep order records (what you bought, where we posted it) for six years, as UK tax law requires.
The site runs on our own server in the UK, behind Cloudflare, which protects it from attacks. Cloudflare sees visitors' IP addresses to do that job. We don't use its analytics or tracking.
One cookie, to keep you signed in and remember your basket. No analytics or advertising cookies.
You can download everything we hold about you, or delete your account, from your account page. For anything else, email [email protected].