Privacy Policy
Last updated: May 2026
Pet a Day Inc. ("Pet a Day", "we", "us"), a company incorporated in the United States, runs the website at petaday.com. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have. Read it alongside our Cookie Policy and Terms of Service.
1. Information we collect
Account information. When you register we collect your email address, display name, and a hashed password. If you sign in with Google OAuth we receive your name, email, and profile picture from Google.
Creator information. Creators provide pet details, biographies, social links, profile photos, and the content they upload.
Business listing information. Businesses that claim or register a listing provide a name, address, category, contact details, and optional photos.
Payment information. Payments are processed by Stripe. We receive a tokenized reference and high-level transaction metadata (amount, currency, last four digits). We do not store full payment card numbers.
Usage data. Pages you visit, actions you take, approximate location (derived from IP), browser type, and device type. This is used to run the service, measure aggregate traffic, and detect fraud or abuse.
2. How we use information
We use your information to:
- Operate the platform and provide the services you requested.
- Process payments, payouts, and refunds.
- Communicate with you about your account, purchases, or changes to the service.
- Measure traffic and improve the product.
- Prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
3. Service providers we share data with
We do not sell your personal information. We share limited data with the following processors so we can run Pet a Day:
- Stripe — payment processing, subscriptions, stock purchases, creator payouts. Stripe receives payment details directly from your browser; we receive tokenized references.
- Google LLC — Analytics (GA4) — measures aggregate site traffic and engagement via Google Tag Manager. Only loaded if you grant analytics consent.
- Google LLC — AdSense — displays ads on parts of the site. Only loaded if you grant advertising consent.
- Google LLC — OAuth sign-in — optional sign-in method. If you use it, Google shares your name, email, and avatar with us.
- Google LLC — Places API — used server-side to populate our business directory. Your browser does not talk to Places directly.
- Google LLC — Gemini API — used server-side by administrators to generate stock imagery. It does not receive end-user personal data.
- Tawk.to — optional live chat support widget. If you open the chat, Tawk.to sets functional cookies to maintain the session.
- Email provider — delivers transactional emails (sign-up confirmations, password resets, receipts).
- Amazon S3-compatible storage — hosts uploaded images and media.
- Law enforcement — when required by a lawful request (subpoena, court order).
4. Cookies and tracking
Pet a Day uses essential cookies for authentication, session management, and security. With your consent we also use Google Analytics 4 (via Google Tag Manager) and Google AdSense. We implement Google Consent Mode v2 — before you make a choice, analytics and ad signals default to denied. Full details are in our Cookie Policy, and you can change your preferences at any time from the footer.
5. Data security
We use HTTPS across the site, bcrypt-hashed passwords, short-lived OAuth tokens, signed upload URLs, and strict server-side authorization checks on every request. No system is perfect; if we become aware of a breach affecting your data we will notify you in accordance with applicable law.
6. Data retention
We keep account data for as long as your account is active. Financial and tax records are kept for the periods required by law (typically seven years in the United States). Analytics data collected by Google Analytics 4 is retained for fourteen months and then aggregated. Server access logs are retained for up to ninety days for security and debugging.
7. Your rights
Depending on where you live you have some or all of the following rights:
- Access — request a copy of the personal data we hold about you.
- Correction — update or correct inaccurate data.
- Deletion — delete your account and associated personal data.
- Portability — export your data in a machine-readable format.
- Objection / restriction — object to certain processing (GDPR / UK GDPR).
- Opt-out of sale / sharing — applicable under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Pet a Day does not sell personal information, but you may still exercise this right.
- Withdraw consent — revoke analytics or ad consent at any time using the Cookie Settings link in the footer.
To exercise any of these rights, email privacy@petaday.com. We respond within thirty days. If you are in the EU / UK and believe we have not addressed your request, you may lodge a complaint with your local data protection authority.
8. International transfers
Pet a Day is operated from the United States. If you access the site from outside the US, your data is transferred to and processed in the US. Our Google service providers process data under Standard Contractual Clauses where required.
9. Children
Pet a Day is not intended for users under eighteen. We do not knowingly collect personal information from minors. If you believe a child has created an account, contact us and we will delete it.
10. Changes
We may update this policy as the product changes. Material changes will be communicated by email or a prominent notice on the site.
11. Contact
Privacy questions? Email privacy@petaday.com or write to: Pet a Day Inc., United States.