Privacy Policy

1. Who we are

PetMerge ("we", "us") operates the pet record archiving service at petmerge.net. You can reach us at support@petmerge.net.

2. Data we collect

• Account data: your email address, display name, optional profile photo, gender, birth date, time zone and date format preferences.
• Archive data: the pet profile details and health records you enter manually, plus the source files you upload (PDF, JPG, PNG, HEIC). Files are stored exactly as uploaded and are never automatically read, modified or interpreted by our system.
• Security data: Cloudflare Turnstile processes your browser for bot checks during sign-in. We do not store Turnstile tokens beyond the verification request.
• Technical data: standard request logs (path, status, timing) kept by our Cloudflare Workers runtime. Logs never contain your files, message bodies or payment details.
• Anonymous growth data: on public free tools we record the event type (such as tool start or PDF download), page path, anonymous session ID, referring host and UTM campaign fields. We never send or store the form values you enter in a tool.
• Billing data: payments are processed by Creem, the Merchant of Record. We receive and store only your plan, subscription status, period end date and Creem identifiers — never your card or bank details.

3. How we use your data

We use your data to operate the service: signing you in via email magic links, storing and showing your pet archive, generating PDF exports, sending sign-in and household invitation emails, preventing abuse (Turnstile, rate limits), measuring anonymous free-tool completion and answering support requests.

We do not sell your data and do not use it for advertising or third-party analytics.

4. Where data is stored and who processes it

Your data is stored with Cloudflare (D1 database, R2 private object storage, Workers runtime and Email service). The staging environment runs in Cloudflare's APAC region; production uses the same provider.

Payments, tax and invoicing are processed by Creem as the Merchant of Record. Their processing of payment data is governed by Creem's own privacy policy, shown during checkout.

5. Cookies and local storage

We use a single 30-day session cookie (HttpOnly) to keep you signed in, a locale cookie plus localStorage to remember your language and a pending invitation link, and sessionStorage for a random anonymous free-tool session ID that disappears with the browser session. We use no advertising cookies and no cross-site tracking.

6. Retention and deletion

Your archive stays until you delete it. When you delete a document it is soft-deleted and permanently removed from storage after a 30-day grace period. Deleting a pet moves it to a 30-day recycle bin, after which it is permanently removed together with its records and files. Sessions expire after 30 days or when you sign out. Anonymous free-tool growth events are deleted after 180 days.

You can export your archive as a PDF at any time. You can also delete your entire account in Settings (household owner only), which permanently removes the household, pet records, files and active share links.

7. Sharing

Your archive is visible only to you and, on the Pro plan, to the household members you invite. On paid plans you can also create view-only share links with an expiry date and optional password that show only the sections you select. Nothing is shared without your action.

8. Children

PetMerge is not directed at children under 13, and we do not knowingly collect their personal information.

9. Security

All traffic uses TLS encryption. Login is passwordless (email codes), so we never store passwords. Uploaded files are stored in a private bucket and are only downloadable through authenticated, household-scoped requests.

10. Changes to this policy

We may update this policy as the product evolves. Changes are published on this page with a new effective date. For material changes we will also notify registered users by email.