Operator: Pawcare. This is the operator name supplied for this service; no company registration or legal jurisdiction is represented here.
The public /support form accepts support and privacy requests even after account closure, without sign-in. Keep its secret receipt for replies; private account data is not disclosed without independent identity verification. Domain support email is not active yet.
We review access, correction and erasure requests individually and explain any records retained and the reason. The operational review target is 30 days, not a guarantee of automatic deletion. Permanent pet identifiers, QR links, recovery history, identity tombstones and necessary audit records are preserved. Retained records and offline backups have no automatic erasure schedule today. Any approved manual erasure must also consider media references and offline backups.
The configured service uses Render for hosting, Supabase for PostgreSQL, Cloudflare R2 for media, Mapbox for maps and geocoding, and Telegram for authentication and messaging. Each receives only the data needed for its function; provider logs and retention are managed separately. No payment provider is activated.
Support and privacy requestsPawca stores account identities and pet, Lost, Found and Entity submissions to operate this service. Pet and Entity images and public report details, including approximate locations, may be visible to anyone.
Finder phone numbers and private Telegram contacts are withheld from public pages. Authorized owners after a confirmed match, and administrators where permitted, can access the private contact action. Pawca does not sell private finder contact information.
Essential session cookies keep you signed in. Contextual city sponsorship can appear when an approved campaign is active. Placements may use page and broad city context, with aggregate impressions and clicks rather than cross-site tracking or device fingerprinting.
For abuse prevention, limited request counters use a secret HMAC of the configured client address. Raw addresses are not stored in these counters. Infrastructure providers may operate their own access logs; operators must configure their retention separately.
When map or geocoding services are enabled, your submitted location and search text are sent to the configured provider. Sighting evidence photos require authorized account access. Closing an account retains private contact and location records, recovery history and the legal acceptance audit. These retained records currently have no automatic erasure schedule. Pawca does not promise complete erasure through account closure.
Signed acquisition links can store a random first-party session cookie for up to 30 minutes. After account creation, Pawca retains first-source attribution and evidence of first pet registration, owner-confirmed QR preparation and verified returns on days 7 and 30 to evaluate partner campaigns. QR confirmation does not prove a physical scan. Partners see only suppressed and rounded aggregate results; they receive no account identity lists, Telegram identifiers, private locations or individual behavior history. Authorized administrators can review commercial evidence and suspicious activity. Commercial scoring never changes recovery access or priority. Acquisition and scoring history is retained after account closure and currently has no automatic erasure schedule.
PawCircle relationships and private recovery alert areas are not public directories. Watcher participation and nearby recovery alerts require separate opt-in. You can stop participation or revoke alerts in settings. Location permission alone does not grant alert consent.
Closing your account permanently stops account access and recovery participation. Pet identities, QR codes, recovery history and the provider identity binding remain. Account closure is not complete erasure of stored records. Public records remain subject to their visibility rules.
Pawca serves its fonts from this site. Font loading does not send your visit to an external font service.
Updated November 10, 2026 · version 2026-11-10.1
Telegram sign-in processes the provider account identifier, display name, username and information returned by the integration. Using features may add your public profile, optional avatar and links, pet details and images, QR identities, Lost/Found reports, sightings, user-supplied contact details, entity offers, alert areas, invitations, service events and security records. Pawca does not request your Telegram password or require your phone number as part of the current integration sign-in.
Public profiles when enabled, pet and entity photos, reports, links and offers you publish may be seen and shared by visitors or archived outside Pawca. Even city-level or approximate locations can reveal information about you. Do not place an exact home address, phone number or sensitive location in public text or images. Private PawCircle relationships and your private alert area are not exposed as public directories.
We use data to operate accounts, pet identity and QR services, recovery reporting and matching, communications, settings, fraud prevention and security. Nearby recovery notifications, Watcher participation and PawCircle relationship alerts use separate controls and consent; accepting these documents does not activate them. Processing must rely on a basis permitted by applicable law, with express consent sought wherever required.
You may provide country, city or coordinates to support discovery and recovery. Public map points, borders and distances can be approximate or inaccurate and must not be treated as definitive. Enabled Mapbox geocoding or map services may receive necessary coordinates or search text and process them outside your country. Device location permission alone is not recovery-alert consent.
Depending on configured features, Render hosts the app, Supabase stores database records, Cloudflare R2 hosts media, Telegram handles sign-in and messaging, and Mapbox provides map and location services. These providers may process technical or functional information outside your country under their own service arrangements. Applicable cross-border safeguards and obligations still apply. We do not sell private finder contacts or give advertisers user identity lists or private locations.
The platform records limited activity, visit, invitation, attribution and security events for service measurement, abuse prevention and campaign evidence. Entity partners receive aggregate reporting subject to system safeguards. General city advertisements and ad charging are not active in this release; activation would require review and updated disclosure. We do not represent individual private data as an advertising product.
Closing an account stops access and some participation; it does not automatically erase all provider identity bindings, pet and QR identities, reports, matching or audit records, media or backups. Some retained records currently lack an automatic deletion schedule. This is not a waiver of any lawful deletion or restriction right. Requests are reviewed individually; retention without sufficient legal grounds must be remedied.
You can request access, correction, erasure, objection or withdrawal of optional consent through Account → Privacy or the public /support form, including after account closure. Keep the secret receipt for public requests. We may need to verify identity before disclosing or erasing private records. Our operational 30-day review target does not extend mandatory statutory response deadlines.
The service applies session, authorization, abuse-prevention and media-access controls, but no online service is risk-free. Do not post children’s or others’ private information without appropriate authority; Pawca is not an emergency service or a service intended for unsupervised children. Material changes receive a new policy version and renewed acknowledgment where needed. Report privacy concerns through /support.