Privacy Notice

Who operates CatTinder

Hey Brain LLC, based in Conyers, Georgia, United States, operates CatTinder. Contact accounts@cattinder.app about privacy. This notice covers visitors, account holders and people who contact us.

CatTinder is a free cat entertainment web app and PWA with profiles, photo journals, follows, likes and passes, playful cat matches and public meow comments. There is no private messaging.

Information we process

• Account details: your email address, authentication and session identifiers, public username, and records of your age attestation and Terms acceptance, including their times and policy versions. We use them to run and secure accounts and record account eligibility and agreement.
• Private ZIP code: account setup requires a U.S. ZIP code. It is stored privately for planned nearby shelter-cat features. Those adoption features are not currently available, and ZIP is not currently used for nearby matching.
• Contributions: cat profiles, descriptions, uploaded photos, captions and public comments, used to provide the features you choose.
• Interactions: guest and account likes and passes, follows, cat interests and mutual matches, blocks, and records of displayed cat cards. These maintain your choices, feeds, matching, block controls and counts, including owner statistics.
• Reports and messages: content reports, moderation decisions, support and legal correspondence, contact-form details and mail delivery records, used to respond, review concerns and record actions.
• Network and security data: requests include an IP address and browser/network information handled by our infrastructure providers. The app derives keyed network identifiers for abuse prevention instead of storing raw IP addresses in its application rate-limit records. Contact-form verification uses Cloudflare Turnstile.

Information comes from your submissions and interactions, other people’s reports and our service providers. Photos may reveal faces, addresses or other personal details. The upload pipeline processes photos into JPEG copies and removes embedded EXIF/GPS and other JPEG metadata from those copies. This does not remove details visible in the photo. Check your image before uploading.

What others can see

Public usernames, published cat profiles, photos, journals and comments are visible to visitors without an account. Public engagement counts can appear with cats or photos. Your email and ZIP are not public profile fields. Your following feed and individual account reactions are account-specific; owner statistics show aggregate counts. Unreciprocated cat interests are not shown to the other cat’s owner. A mutual match and its simple meow signals are shared with the participating cat owners. Block records are available to the account that created them.

People may save or share public material. Removing it from CatTinder cannot remove copies independently saved elsewhere.

Providers and disclosures

Cloudflare hosts the app, stores processed photos in R2, processes images and provides Turnstile verification. Supabase provides authentication and the database. Resend sends sign-in, security, moderation and contact-form email. Purelymail receives mail at our contact inbox. These providers process the information involved in delivering their services, such as network requests, account records, photos or message content. Processing may occur outside your state or country.

We may disclose relevant information to respond to lawful requests, handle rights complaints, protect people or the service, or establish or defend legal claims. A valid copyright counter-notice is forwarded to the original complainant with its required contact details, as explained on the Copyright page.

Advertising is disabled. We do not run analytics or session-replay SDKs or marketing campaigns. Gifts and artwork are paused, and there is no paid checkout. These facts do not mean that the app is cookieless or that providers receive no network information.

Cookies and browser storage

• A signed guest cookie, lasting up to 30 days, remembers guest likes and passes and supports their transfer when you sign in.
• Authentication cookies support sign-in and session refresh. Their configured browser lifetime can be up to 400 days; continued account access still depends on a valid session. Temporary sign-in and meow-resume cookies last up to 10 minutes.
• A motion-preference cookie lasts up to one year.
• Local storage remembers dismissal of the parody notice without an application-set expiry. Tab session storage holds temporary meow drafts and PWA refresh timestamps. Prepared sign-in drafts expire after 10 minutes and are cleared when applicable, including sign-out.
• The PWA service worker uses network requests and does not cache pages, API responses, photos, credentials or drafts. The browser may separately cache ordinary app assets under their HTTP cache settings.

Clear cookies and site storage through your browser to reset these choices. Doing so may sign you out or remove drafts; it does not delete server records. Browser storage durations are not database retention periods. The app does not currently change its processing in response to Do Not Track or Global Privacy Control signals.

Account age and visitors

Accounts are for people 18 or older. We ask for an age attestation and record acceptance of the Terms. We do not collect a date of birth or identity document for this check, and self-attestation is not verified proof of age. Public pages can be viewed without an account; we do not verify the age of every visitor.

If you believe someone under 18 has an account, or a child has submitted personal information, contact accounts@cattinder.app. Identify the relevant account or material without sending identity documents or another copy of sensitive content.

Retention, archive and requests

Account and content records, processed photo copies, interactions, reports and delivery records remain stored unless removed through an available control or an operator action. A comprehensive deletion process and fixed retention schedule, including for provider backups and correspondence, are not yet implemented. We cannot promise an automatic deletion date or immediate erasure of every copy.

Archiving a cat hides it in the app and preserves its records and stored photos for restoration. Archive is not account deletion or permanent photo erasure. Do not use it as a way to resolve sensitive-image exposure; use the urgent reporting route.

You can edit available account and cat details, report content, block accounts and archive cats. Write to accounts@cattinder.app for access, correction, removal or another privacy request. Describe the request and relevant account or URL. We may need to verify that you are entitled to the requested information or action. Do not send passwords, sign-in links or identity documents. Applicable privacy rights depend on your location and circumstances; nothing in this notice removes those rights.

Changes

We will update this notice when our practices change and identify its effective date. Material changes will receive notice as appropriate.