Privacy Policy

1. Who we are

PetMerge ("we", "us") operates the pet record archiving service at petmerge.net. You can reach us at support@petmerge.net.

2. Data we collect

• Account data: your email address, display name, optional profile photo, gender, birth date, time zone and date format preferences.
• Archive data: the pet profile details and health records you enter manually, plus the source files you upload (PDF, JPG, PNG, HEIC). Files are stored exactly as uploaded and are never automatically read, modified or interpreted by our system.
• Security data: Cloudflare Turnstile processes your browser for bot checks during sign-in. We do not store Turnstile tokens beyond the verification request.
• Technical data: standard request logs (path, status, timing) kept by our Cloudflare Workers runtime. Logs never contain your files, message bodies or payment details.
• Billing data: payments are processed by Creem, the Merchant of Record. We receive and store only your plan, subscription status, period end date and Creem identifiers — never your card or bank details.

3. How we use your data

We use your data to operate the service: signing you in via email magic links, storing and showing your pet archive, generating PDF exports, sending sign-in and household invitation emails, preventing abuse (Turnstile, rate limits), and answering support requests.

We do not sell your data and do not use it for advertising or third-party analytics.

4. Where data is stored and who processes it

Your data is stored with Cloudflare (D1 database, R2 private object storage, Workers runtime and Email service). The staging environment runs in Cloudflare's APAC region; production uses the same provider.

Payments, tax and invoicing are processed by Creem as the Merchant of Record. Their processing of payment data is governed by Creem's own privacy policy, shown during checkout.

5. Cookies and local storage

We use a single 30-day session cookie (HttpOnly) to keep you signed in, and a locale cookie plus localStorage to remember your language and a pending invitation link. We use no advertising cookies and no cross-site tracking.

6. Retention and deletion

Your archive stays until you delete it. When you delete a document it is soft-deleted and permanently removed from storage after a 30-day grace period. Deleting a pet removes its records and files. Sessions expire after 30 days or when you sign out.

You can export your archive as a PDF at any time. For full account deletion, email support@petmerge.net and we will remove your account and data.

7. Sharing

Your archive is visible only to you and, on the Pro plan, to the household members you invite. Public sharing links are not part of the current product; if introduced, nothing is shared without your action.

8. Children

PetMerge is not directed at children under 13, and we do not knowingly collect their personal information.

9. Security

All traffic uses TLS encryption. Login is passwordless (email codes), so we never store passwords. Uploaded files are stored in a private bucket and are only downloadable through authenticated, household-scoped requests.

10. Changes to this policy

We may update this policy as the product evolves. Changes are published on this page with a new effective date. For material changes we will also notify registered users by email.