TopPaws is built around pet content, not personal data farming. This page explains exactly what we collect, why we collect it, who can see it, and how to delete it. No legalese — just the truth.

What we collect

When you create an account, sign in with Google, and use the platform, we collect:

Account info: your email address, display name, and profile photo from Google
Profile content: your username, bio, pet name(s), and any custom avatar you upload
Your creations: photos you upload, videos you upload, memes you make, AI photos and AI videos you generate, ratings you give, comments you write
Subscription details: if you subscribe, Stripe handles your card. We never see or store your full card number — we only get a customer ID and the basic plan info from Stripe
Usage data: which pages you visit, what you click, when you sign in, what device you're on. Standard server logs.

What we DON'T collect

Your password (we use Google Sign-In — Google handles authentication)
Your full credit card details
Your contacts
Your location beyond what Google sends with your sign-in
Anything from sensors or microphones

How we use what we collect

To run the platform: showing you your creations, processing AI generations, recommending the community feed, etc.
To bill you: if you're on a paid plan
To moderate content: automatically, via OpenAI's free moderation API, plus admin review when something gets reported
To improve TopPaws: aggregate stats only — like "X people created memes today" — never sold, never tied to you personally in marketing material
To contact you: only about your account (e.g. payment receipts, account warnings). We don't do marketing email blasts.

Who else sees your data

We use a small set of third-party services to power TopPaws. Each one only sees the data they need to do their job:

Supabase — stores your account, your profile, your memes, and your AI photos. They host the database and storage.
Mux — receives your uploaded videos and AI-generated videos for transcoding and streaming.
Fal.ai — receives the source photo when you generate an AI photo or AI video. The image is processed and returned. Fal.ai may temporarily store input images per their own policy.
Stripe — handles all payments and stores your card information per their own privacy policy. Stripe is PCI-compliant.
OpenAI — receives the text of your comments to check for harassment, hate speech, or other violations. Comment text is not used to train OpenAI models per their API terms.
Vercel — hosts the website and serves it to your browser.
Google — handles sign-in and gives us your email and avatar.

We do notsell your data to advertisers, brokers, marketing networks, or anyone. We don't share data with third parties beyond what's technically required to make the platform work.

What other users see

Your username, display name, profile photo, bio, and pet name appear on your public profile page at toppaws.com/u/yourname.
Content you mark as public appears on the community gallery, your public profile, and the homepage Top Paws section.
Content you keep private only appears in your own My Creations page. Nobody else sees it — not even other logged-in users.
Comments you write are visible to anyone who can see the content you commented on.
Paw ratings you give are anonymous to other users — only the average score and total count are shown publicly.

Cookies

We use cookies for one thing: keeping you signed in. There's a session cookie issued by Supabase when you log in with Google. We don't use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie banner popup needed because we're not doing anything intrusive.

How long we keep your data

Account data: as long as your account exists
Your creations: as long as you keep them
Deleted content: removed from the database immediately and from storage within a few days
Server logs: 90 days, then auto-deleted
Stripe billing records: kept as long as legally required (typically 7 years for tax purposes)

Your rights

You can:

See your data — most of it is visible in your profile and My Creations. Email us if you want a structured export.
Edit your profile — anytime from your Profile page.
Delete content — use the trash icon on any of your creations.
Cancel your subscription — from your profile, via the "Manage" button.
Delete your entire account — email us. We'll wipe your profile, content, comments, ratings, and account permanently within 7 days.

If you live in California (CCPA), the EU (GDPR), or somewhere with similar privacy laws, those laws apply to you and you have additional rights, including the right to data portability and the right to object to processing. Just email us and we'll honor whatever your local law requires.

Children

TopPaws is not for children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we'll delete the account.

Security

We follow standard security practices: HTTPS everywhere, encrypted database, hashed credentials via Google, role-based access control on admin functions, audit logs for sensitive admin actions, and rate limiting on AI generation. No system is 100% secure, but we work hard to make sure your data is treated carefully.

Changes to this policy

If we update this Privacy Policy, we'll post the new version here with an updated date. Big changes will be announced site-wide.

Contact

Privacy questions? Reach out via the contact info on the homepage. We'll get back to you within a few business days.

This Privacy Policy is written in plain English to be easy to understand. It's not a substitute for personalized legal advice. Specific privacy laws may apply to your situation depending on where you live.