Privacy policy

• Account details from sign-in: your email address and name.
• What you put on your page: handle, display name, tagline, bio, city, links, and Lost Mode details. Only what your disclosure setting allows is shown publicly.
• Billing status if you subscribe to Pro (payments are handled by our payment processor; we never see your card number).
• Push-notification subscriptions if you turn them on.

• The message you send: what you found and your note.
• Anything optional you choose to add: a way to reach you and where the item is now.
• Your approximate location, only if you tick the box and your browser shares it.

When a page is viewed or a message is sent, we record a scan: the page, the time, a coarse device and browser type, and a one-way hash of your IP address that changes every day. We never store IP addresses themselves. We also record anonymous page-view events to understand how the site is used.

We use a single sign-in cookie for owners. We don’t use advertising cookies or sell data.

• To show your page and deliver finder messages and replies.
• To screen messages for spam and abuse. Message text is checked by an automated classifier (an AI model run by a service provider) before it reaches the owner.
• To send the emails and notifications you’d expect: new messages, replies, account notices.
• To keep the service secure, rate-limit abuse, and improve it.

We run on infrastructure providers for hosting, databases, sign-in, email delivery, payments, and message screening. They process data only to provide those services to us. We share information with authorities only when the law requires it.

Owner pages are hidden from search engines unless the owner switches search on. Pages using the kid-safe Sticker layout and anonymous pages can never be indexed.

• Raw scan records are deleted after 90 days; only daily totals are kept.
• Finder reply links expire after 90 days of inactivity.
• Messages and page content stay until the owner deletes them or closes their account.

Accounts are for adults. Parents can create pages for their children’s belongings using the kid-safe layout, which never displays a name. We don’t knowingly collect personal information from children under 13; if you believe a child has contacted us or created an account, let us know and we’ll delete it.

You can edit or pause your page at any time from your dashboard. To get a copy of your data or have your account, page, and messages deleted, contact us and choose “Account & data”. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor those requests the same way.

If we change this policy in a way that matters, we’ll update the date above and, for significant changes, tell owners by email.