Information you enter
Registration stores your email address, display name and a password hash. We do not store the original password as readable text. A private cat profile stores the details you submit, such as name, birth date, breed, weight and notes. Dated observations can include appetite, drinking, litter use, energy, vomiting count and measured weight.
Enter information you are entitled to store. Avoid including another person's contact details or unnecessary sensitive documents in free-text notes. Public care pages do not show your private records.
Sessions and service operation
A necessary session cookie supports sign-in and form protection. The application records login attempts for security and administrative changes for accountability. Hosting and Cloudflare process network requests to deliver and protect the website. Public pages use traffic analytics as described below.
Some public tools calculate in the browser without saving their inputs to an account. Account observation forms save data when submitted. A temporary tool result or checkbox is not automatically a private record.
Access, exports and deletion
You can view and edit your own cat profiles and observations, export observations to CSV and print a recent visit summary. Save exported files somewhere appropriate; a downloaded copy is outside the application's access controls.
Deleting a cat profile removes its associated observations in the active database. Contact [email protected] from the account email for an account-deletion request or other privacy question. We need to verify your authority before changing account data. Do not include a password in the request.
Storage and backups
Records persist until edited, deleted or removed through an account request; there is no automatic user-record expiry feature. Security and administrative logs support operation. Backups are maintained for recovery, so deleting an active record does not imply instant removal from every backup. This policy does not promise a specific backup-erasure date or log-retention period that has not been established.
Contact and policy changes
Use contact to identify the account and the request without sending unnecessary personal data. If processing or account features change, this description should be updated to match actual behavior.
PurrAtlas is responsible for this website and its account service. Send privacy requests to [email protected]. Describe the account and action you need, so we can verify authority and respond about the records concerned.
Google sign-in
Google sign-in is optional. If you choose it, Google provides your account identifier, verified email address and basic profile information such as your name so PurrAtlas can create or recognize your account. We store the Google account identifier linked to your PurrAtlas profile. We do not request access to your Gmail messages, contacts, Drive files or calendars, and do not store Google access or refresh tokens.
Google handles the account-selection and sign-in experience under its own privacy policy. Your PurrAtlas cat records remain in your private profile; signing in does not send those records to Google. Existing accounts may need their current password before linking. You can contact [email protected] about removal of your PurrAtlas account and its linked sign-in identifier.
Email verification
Email registration and password sign-in require a one-time code. We use Gmail SMTP to send this message to the email address you provide. Google processes the recipient address and verification message to deliver it. The code expires after ten minutes. We store a keyed hash of the code, request times and limited verification attempts to check the code and prevent repeated requests; expired challenge records are removed during later code requests. Pending registration details are kept in your server-side session until verification or expiration. Google sign-in verifies your email through Google and does not require another PurrAtlas email code.
Traffic statistics
Public pages use 51LA to understand website visits. The service may process page addresses, referring pages, network information and device/browser information. We do not load analytics on sign-in, registration, account, administration, search, or pages with query parameters. We do not send private cat records, passwords, verification codes or form contents as analytics events.
We also use a dedicated Google Analytics 4 property for PurrAtlas public-page traffic statistics. Google may process device/browser information, page addresses and network information and use analytics cookies. We do not enable Google signals or advertising personalization in our website tag, and automatic enhanced measurement is disabled. Analytics do not load on the excluded pages described above; we do not send private cat observations or form contents as events.