🔒 Privacy Policy

Who we are

Warm Paws (this website, warmpaws.de5.net) is a personal, non-commercial pet & kindness corner. This policy covers everything you do on this site. It does not cover other sites you reach by leaving us.

What we collect

We only collect what the site needs to work. There is no profiling, no advertising and no data broker involved.

• Account: your email address and a password. Passwords are hashed by our auth provider — we never see or store the plain text.
• Profile: the nickname you choose (or the one Google shares), shown next to your posts.
• Your content: posts, comments, reactions and images you upload to the kindness wall.
• Your pet: the pet you draw, its levels, your food drawings and mood check-ins, so it looks the same on any device.
• Basic activity data: view counts and reaction counts on posts (used by the auto-hide rule below), and timestamps.

Why we use it

• To sign you in and keep your session on this device.
• To show your nickname, posts and comments to other visitors — posts on the kindness wall are public by design.
• To sync your pet, food drawings and mood records across your devices.
• To keep the place calm: one post per person per day, and posts that many people dislike are hidden automatically.
• To reply to you when you write to us.

Signing in with Google

Signing in with Google is optional — email sign-in works the same. If you choose it, this is exactly what happens:

• We request only the basic scopes email and profile (your email address, nickname and avatar).
• We do NOT request access to Gmail, Drive, Calendar, Contacts, Photos or any other Google service, and we cannot read them.
• The Google data we receive is used for one thing only: creating your account and showing your nickname. Nothing else.
• We never sell, rent or share Google user data with third parties, and we never use it for advertising, ad targeting or credit decisions.
• Google user data is stored with our hosting provider (Supabase) as part of your account record, protected by database row-level security.
• You can revoke access at any time at myaccount.google.com → Security → Third-party apps. Revoking only breaks the Google shortcut; your account and content stay.

Google Limited Use disclosure

Warm Paws' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely: Google user data is used only to provide and improve the sign-in and profile features you see; it is not transferred to others except as needed to run those features, not used for advertising, and not read by a human unless you ask us to, or we are required to for security or legal reasons.

Who processes the data

We do not run our own servers. Accounts, posts, comments and images live with Supabase (database, authentication and image storage). Images are served from Supabase Storage. There are no advertising networks, no tracking pixels and no social-media embeds on this site.

What stays on your device

Some things never leave your browser: your language, theme, nickname, the time-range and sorting you picked, an anonymous id used to count views once per day, and your sign-in session token. These live in your browser's local storage — clearing site data removes them. We do not use advertising cookies.

This site uses no cookies for tracking or advertising.

Sharing and public content

We do not sell or rent your data. Anything you post on the kindness wall, together with your nickname and avatar, is visible to anyone who visits this site. Admins can additionally see the list of registered emails for moderation; they cannot see passwords. We may disclose data if the law requires it.

Your choices and rights

• Change or remove your posts and comments yourself, any time.
• Change your nickname in the Me page.
• Delete your account yourself, any time, from the Settings page — it takes effect immediately and removes your profile, posts, comments, pet and uploaded images. You can also ask us to export your data — write to the address below.
• Revoke Google access from your Google account as described above.
• Use the site without an account: browsing and playing stay open, and nothing is sent to the cloud.

Children

This site is not directed at children under 13 (or the equivalent age in your country). If we learn that we hold an account created by a child below that age, we will delete the account and its data.

How we protect it

Traffic is encrypted with HTTPS. The database enforces row-level security, so only you can modify your own content, and the private keys of the project stay server-side. Passwords are hashed. No system is perfect, so please use a password you do not reuse elsewhere.

Changes to this policy

If the way we handle data changes, we will update this page and its date above. Continuing to use Warm Paws after an update means you accept the new version.

Contact

Questions, deletion requests or anything else: linyi0123456@outlook.com. We usually reply within a few days.

linyi0123456@outlook.com