Privacy Policy

This Privacy Policy explains what personal data Sensipets (the "Service") collects, how we use it, and your rights over it. It applies to anyone who signs up, signs in, or interacts with the Service.

1. Data we collect

• Account data — email address, username, date of birth (collected once at sign-up to confirm the minimum age in our Terms), and the consent records described below.
• Profile data you choose to share — interests, character bios, pet descriptions, signature, and any avatar image you upload.
• Activity data — posts, messages, trades, purchases, gameplay progress, and audit events written to our internal logs.
• Technical data — IP address, browser, device, and event analytics captured via PostHog. Until you make a choice in the cookie banner, analytics runs without storing anything on your device; accepting enables analytics cookies, and declining turns analytics off.
• Advertising data — if you arrive from an ad, we record campaign details in that link, including click identifiers such as Google’s gclid. After you accept advertising measurement, we report leads, completed registrations, and purchases to the advertising platforms listed in section 3. Purchase reports include the settled value and purchased product.
• Payment data — handled directly by Stripe or PayPal; we receive only the transaction confirmation, never your full card details.

2. How we use it

We use this data to operate the Service: authenticate you, render your profile, moderate the community, process purchases, send transactional email (e.g., magic-link sign-in, receipts, moderation notices), and improve the product. Marketing email is opt-in and is governed by a separate consent recorded alongside this policy.

3. Sharing

We do not sell your personal data. We share data only with service providers needed to run the Service — Neon (database hosting), SendGrid (email delivery), Stripe and PayPal (payment processing), AWS S3 (avatar storage), Google (OAuth sign-in), and PostHog (analytics) — and only the minimum necessary for each provider’s role.

We also work with Google Ads, Meta (Facebook and Instagram), and Reddit to measure our advertising. After you accept advertising measurement, browser tags may send page views, leads, completed registrations, and purchases. For completed registrations and provider-confirmed purchases, our server may send the click identifier, a one-way hash of your account or email identifier, IP address, user agent, and the event’s URL. Purchase events also include value and product information. Hashing lets a platform match an email only if it already holds the same address; we do not send the address in readable form. Declining or not choosing prevents these advertising reports.

4. Retention

Account data is retained for the life of your account. Audit records (including consent receipts) are retained as long as your account exists plus a reasonable period thereafter for compliance and dispute resolution. You can delete your account from Settings, which removes profile data and disassociates audit logs from your identity.

5. Children’s privacy

Sensipets is not directed to children under 13, and we do not knowingly collect personal information from them. Our Terms require members to be at least 13 years old, and we ask for a date of birth once during sign-up to confirm it. If the date provided is below 13, the account is blocked immediately and the information collected during sign-up — including the email address and date of birth — is deleted within seven days.

If you believe a child under 13 has created an account or provided us with personal information, contact privacy@sensipets.com and we will delete it promptly. We do not knowingly show personalized advertising to, or share advertising identifiers about, anyone we know to be under 13.

6. Your rights

Depending on your jurisdiction (GDPR, CCPA, and similar laws), you may have the right to access, correct, export, or delete your personal data, to withdraw consent, and to lodge a complaint with a data-protection authority. To exercise these rights, contact privacy@sensipets.com.

7. International transfers

Sensipets is operated from the United States. By using the Service from outside the US you consent to the transfer of your data to the US and other countries where our service providers operate.

8. Changes

We will present material updates to this Policy in-app and require acceptance before continued use. The date at the top of this document is the effective date of the current version.