Privacy policy

The data controller is Louis Lambert EI (trading as Nimbus Pronos), 16 rue Saint-Esprit, 24100 Bergerac, France, SIRET 925 059 883 00015. For anything about your data, write to contact@pawpredict.com.

• Account — your email address, a password (stored hashed: we cannot read it), the date you signed up and last signed in, and the date and version of the Terms and Privacy Policy you accepted. Your email is never shown publicly. Legal basis: the contract you enter into by accepting the Terms.
• Your animal’s public profile — name, species, breed, country, sex, age, favourite food, personality, photo, Instagram and TikTok links, and the support link you choose to show. This is what you publish: it appears in rankings and on the profile page. Photos are re-encoded on our server, which removes their hidden data (such as location). Legal basis: contract.
• Predictions and proof videos — your picks, and for each one a link to your Instagram or TikTok post or a video file you upload. Approved predictions and videos are public: that is the game. We strip location metadata from uploaded MP4 and MOV files. Legal basis: contract.
• Favourites — the animals you star. Private to you. Without an account they stay in your browser only. Legal basis: contract.
• Notifications — if you turn on a bell, we store the technical address your browser gives us to deliver the notification, and which animal it is for. No account needed. Legal basis: your consent, given in your browser; turn the bell off to withdraw it.
• Weekly email — only if you tick the box in your settings. Legal basis: your consent; untick the box to withdraw it.
• Subscription (Paw Predict+) — when you subscribe on the website, the sale and the payment are handled by Link, a service of Stripe, which acts as the seller and is responsible for its own processing of your payment details, receipts and invoices. When you subscribe in the app, Apple or Google handle the payment. We never see or store your card number. We keep whether your subscription is active and until when, and the date you confirmed being 18 or older. If you ask Link to delete your data, Link cancels the subscription. Legal basis: contract; legal obligations for accounting records.
• Reports and moderation — a report you file (its text, and your account if you are signed in), review decisions on profiles, photos and videos with their reason, and account suspensions with their reason. Legal basis: our legitimate interest in keeping the platform safe and fair, and our legal obligations as a hosting provider.
• Technical and security logs — IP address, date and time, pages requested, and sign-in events, kept by our hosting and authentication providers to run and protect the service. Legal basis: our legitimate interest in securing the service.

We do not collect audience analytics, advertising identifiers or precise location, and we do not build advertising profiles. Donations to creators happen entirely on the creator’s own external page (Ko-fi, PayPal, Buy Me a Coffee, Tipeee or Patreon): we receive no information about them.

We only use what is strictly necessary to run the site, which is why there is no cookie banner. There are no advertising cookies, no analytics cookies and no third-party cookies.

The checkout page is hosted by Stripe on its own domain and sets Stripe’s own cookies there. If we ever add advertising or audience measurement, we will update this policy first and ask for your consent before anything loads.

Only the service providers we need to run PawPredict, each under a data processing agreement:

• Supabase — database, accounts and uploaded files, stored in Ireland (European Union).
• Vercel (United States) — hosts the website and processes technical logs.
• Resend (United States) — sends our emails: sign-up confirmation, password reset, weekly email.
• Stripe (Ireland and United States) — sells and processes Paw Predict+ subscriptions taken on the website, through its Link service, as the seller of record and for its own purposes (payment, tax, receipts, fraud prevention, disputes). See Stripe’s privacy policy.
• Apple (App Store) or Google (Google Play) — sell and process subscriptions taken in the PawPredict app, once it is available, under their own privacy policies.
• Google Workspace (Ireland and United States) — hosts our contact mailbox, so it receives the emails you send us.

Where data goes to the United States, the transfer relies on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses. Videos you link from Instagram or TikTok stay on those platforms, under their own policies. Our moderators (a small team that includes the publisher) see the content they review, the reports, and an account’s status: role, suspension and its reason, subscription and weekly-email setting. They never see your email address or your password.

• Account, profile, predictions, favourites — until you delete your account. Deletion removes all of it, including your files.
• Uploaded proof videos — the file is deleted 7 days after the match. The verified result stays on the animal’s record.
• Photos — a photo you replace is deleted when a moderator approves the new one; a refused photo is deleted at once.
• Reports — deleted once a moderator has handled them.
• Notification addresses — until you turn the bell off or your browser retires the address.
• Technical logs at our hosts — kept for a short period set by each provider. Sign-in security logs (date, IP address, email, event) kept by our authentication provider are deleted automatically after 12 months, and as soon as you delete your account.
• Payment and invoicing records — 10 years, as French accounting law requires, kept by Stripe and in our accounts.
• Emails you send us — as long as needed to handle your request, 3 years at most.

Under the GDPR you can ask to access your data, correct it, delete it, receive a copy in a reusable format, restrict or object to a processing based on our legitimate interest, and withdraw a consent at any time. You can also leave instructions about your data after your death.

• Delete your account — from your settings page, or by email to contact@pawpredict.com.
• Get a copy of your data — by email to contact@pawpredict.com, from the address of your account.
• Report a profile, a video or any content — with the “Report this profile” link on the page, or by email to contact@pawpredict.com.
• Anything else — same address. We answer within one month.

If you believe we got something wrong, you can complain to your data protection authority — in France, the CNIL.

You must be at least 16 to create an account, and at least 18 to buy a subscription. We do not knowingly collect data from anyone under 16: if we learn that an account belongs to a younger person, we close it and delete its data. Parents can write to contact@pawpredict.com.

Connections are encrypted, passwords are hashed, and database rules ensure a member can only read and change their own private data. No system is perfect: if a breach ever affected your data, we would tell you and the CNIL as the law requires.

When this policy changes, we update this page and its date. For a significant change we tell members on the site before it applies. The Terms and the legal notice complete this page.