Privacy Policy
Last updated: 1 October 2026
MyPetTag helps reunite lost pets with their owners through a scannable QR tag. This page explains what personal data we process, why, for how long, and what rights you have under the GDPR.
Who is responsible for your data
The data controller for this service is:
Hosting provider details are listed in the legal notice.
What we process, why, and on what legal basis
- Account email and password: to create and secure your account. Legal basis: performance of the contract.
- Pet details you enter (name, species, breed, sex, birth date, chip number, photos, notes): to generate the pet page your tag points to. Legal basis: performance of the contract.
- Owner contact details you choose to publish (name, phone, email): to let whoever finds your pet reach you. Legal basis: your consent.
- Messages and locations sent by a finder: to pass them on to you. Legal basis: performance of the contract, and the finder's own initiative.
- IP address and approximate location (city, region, country) recorded when an account is created: to prevent abuse and fraudulent sign-ups. Legal basis: our legitimate interest in keeping the service safe.
- IP address and approximate location recorded when a tag is scanned: to help investigate a suspected theft. Legal basis: our legitimate interest, and yours, in recovering a stolen animal.
- Audience measurement (Google Analytics): to understand how the site is used. Legal basis: your consent, which you can give or refuse in the cookie banner.
- MyPetTag Plus subscription (only if you subscribe): your payment is handled by Stripe, which collects your name, email and card details on its own payment page. We receive only a Stripe customer and subscription reference, the status and the dates of your subscription, and the amount, never your card number. Legal basis: performance of the contract, and our legal obligation to keep accounting records.
What is shown publicly
When someone scans your pet's active QR code, the public page shows only the fields you explicitly enabled, plus the pet's photo, species, age and notes. Nothing is published before you give consent, and you can take the page offline at any time from your dashboard.
The scan log is never shown to you, to the finder, or to anyone else. It is kept only so that a theft can be investigated.
Cookies and audience measurement
We only set a cookie that is strictly necessary to keep your session open and remember your chosen language. These do not require consent.
Google Analytics is loaded only if you accept it in the cookie banner. If you refuse, or simply ignore the banner, no analytics cookie is ever set. You can change your mind at any time from the Cookies link at the bottom of any page. Refusing after having accepted also deletes the analytics cookies already stored.
Who else receives data
- Google (sign-in with Google): only if you choose that sign-in method.
- Google (Analytics): only after you accept the cookie banner.
- Stripe (Stripe Payments Europe, Ltd., Ireland): only if you subscribe to MyPetTag Plus. It processes the payment, issues the invoice and hosts the page where you manage or cancel your subscription.
- ipwho.is: receives an IP address only, to estimate an approximate location.
- OpenStreetMap: receives your IP address when a map is displayed (map tiles), and the address you type when you search for a location on the map.
- Treatstock: only if you open the 3D printing widget yourself; it is not loaded otherwise.
We never sell your data, and we never use it for advertising.
Transfers outside the European Union
This site and its database are hosted in a data centre in Hong Kong, which is not covered by a European Commission adequacy decision. This transfer is governed by the European Commission's standard contractual clauses (Module II, controller to processor), which form part of the data processing agreement with our host.
Some of the other recipients listed above are established in the United States. Those transfers rely on the EU-US Data Privacy Framework, or on the standard contractual clauses where the recipient is not certified under it.
How long we keep data
- Account and pet data: for as long as your account exists.
- Scan log (IP and approximate location): 30 days, then deleted automatically.
- Sign-up IP and approximate location: 12 months, then deleted automatically.
- Messages left by finders: until you delete them, or until the pet is deleted.
- Deleted account: 7 days, then permanently erased (see below).
- Subscription and invoices (only if you subscribe): the invoices and accounting records are kept for the period required by French law (10 years). They are kept even if you delete your account.
Deleting your account
You can delete your account at any time from My account. Your pet pages go offline immediately. Your data is then kept for 7 days so that you can change your mind, and is permanently erased after that, automatically and without any further action from you.
Your rights
Under the GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on your consent, you can withdraw that consent at any time, without affecting what was done before.
Most of these you can exercise directly from your dashboard: edit any field, toggle what is public, or delete your account. For anything else, write to us at the contact address above. We answer within one month.
If you believe your data is not handled properly, you also have the right to lodge a complaint with your national data protection authority.
Security
Access to your dashboard requires authentication. A self-service account can never reach the administration backend. Public pet pages show only what you explicitly chose to publish.
Language
This policy is translated for convenience. In case of any discrepancy between versions, the English version prevails.
Back to home