This privacy policy explains what information Meow Scout collects, why, and which third-party services we share data with. We do not sell or rent your personal information.
What we collect
- Account data (when you sign up): email, display name, locale, optional location city/state.
- Saved preferences: favorites, follows, RSVPs.
- Search activity (only when you grant Product Analytics consent): the query text, locale, result count.
- Server logs: IP address, user-agent, request paths — retained 30 days for security + abuse prevention.
Processors we use
To run Meow Scout we share certain data with these third-party services. Each entry covers data shared, purpose, retention, and jurisdiction.
- Supabase (United States) — primary database, authentication, file storage. Stores entity records, user accounts, photos, search queries. Retention: until account deletion + the 14-day grace period.
- Netlify (United States) — hosting + CDN. Sees every request URL + IP for the duration of the connection. Access logs retained 30 days.
- Sentry (United States) — error monitoring. Captures error stack traces and a small slice of request context. Functional cookie; runs regardless of analytics consent so the site stays observable.
- PostHog US (United States) — product analytics. Fires page views + click events only after you grant Product Analytics consent.
- Google Analytics 4 (United States) — analytics. Same Product Analytics consent toggle gates GA4 and PostHog together.
- Beehiiv (United States, via n8n.camaliagroup.com webhook router) — receives your email address only when you grant Marketing consent on the newsletter form. We can unsubscribe you any time on request.
- Cloudflare Turnstile (global) — spam protection on forms. The bot-detection token has no cross-site tracking.
- Anthropic Claude (United States) — AI translation of entity descriptions for Spanish locale. Receives entity name + description text only; no user-attributable data.
- n8n.camaliagroup.com (self-hosted, Hostinger DE / Camalia Group) — workflow router that forwards newsletter signups to Beehiiv. Phase 4 will add a NetHunt-CRM consumer for café-owner outreach.
- Google Maps Platform (United States) — maps, and place ratings and photos on directory and listing pages, load from Google in your browser. Google receives your IP address and the page you're viewing. See the Google Privacy Policy.
- YouTube (United States) — live cat cam videos are embedded from YouTube, and we use YouTube API Services to check which cams are live. YouTube receives your IP address when a video player loads. See the Google Privacy Policy.
Processors added in later phases (disclosure will update before they go live):
- Resend (transactional email — Phase 4 alongside the dashboard auth flows)
- AWS Rekognition + PhotoDNA (image moderation — Phase 4, mandatory before any user-uploaded photo surface)
- NetHunt CRM (Phase 4 — café-owner outreach + claim flow)
We do not share user data with advertising networks. We do not run programmatic ads.
Your rights (GDPR + CCPA)
You can:
- Access your data at any time: email hello@meowscout.com.
- Delete your account via
/account/delete(ships Phase 4) — 14-day grace period before cascade. - Export your data via
/account/export(ships Phase 4) — ZIP with JSON + photo files. - Withdraw consent for Marketing or Product Analytics from the cookie banner (re-opens on every visit until you choose).
- Object to processing for any specific processor by emailing hello@meowscout.com.
For EU residents: Meow Scout (operated by Camalia Group) is the data controller. We do not have an EU representative because we are not currently established in the EU.
Cookies
- Functional cookies (always on): session, locale preference, Turnstile token.
- Analytics cookies (consent-gated): PostHog + GA4 distinct-id.
- Marketing cookies (consent-gated): Beehiiv subscription state.
Children
Meow Scout is intended for adults. We do not knowingly collect data from children under 13.
Contact
Email hello@meowscout.com for any privacy question or rights request.