Privacy policy

The short version

• We don't sell your personal information, and we don't show ads.
• Browsing the site needs no account.
• If you make an account, your Zoo Passport is private to you, and you can delete it all at any time.
• We use analytics to see which pages are useful. Google Analytics uses cookies; Vercel Analytics doesn't.

What we collect

If you create an account

Your email address and a password (stored only as a secure hash; we can't see it). We also store your Zoo Passport: the zoos you mark as visited (and the visit date, if you add one), the animals you tick off and where, and your saved zoos and animals. We use these only to show them back to you on any device you sign in on.

If you use the site without an account

Your Passport and saved list are kept in your own browser's storage, not sent to us. Clearing your browser data removes them. To count how many people have saved a zoo or animal, your browser makes a random ID; we store only a scrambled (hashed) version of it, which can't identify you.

If you sign up for the newsletter

Your email address and the page you signed up from.

If you contact us

Your name, email address and message, which are emailed to our team so we can reply.

If you leave a Feather or a Fang on a zoo

The name you give, your comment and visit date. Comments are reviewed before they appear, and the name you give is shown publicly with your comment.

When you browse

Like most websites, our host records basic technical information (such as your IP address and browser type) to run the site securely. We also use analytics:

• Vercel Web Analytics and Speed Insights count page views and measure page speed without cookies.
• Google Analytics 4 uses cookies to measure how people find and use the site. You can opt out with Google's browser add-on or by blocking cookies.

Who processes it

We use a small number of service providers, who handle data on our behalf:

• Vercel: hosts the website.
• Supabase: stores accounts, Passports, newsletter sign-ups and comments.
• Mailgun: sends our emails (account confirmations, password resets, replies).
• Google Analytics: website analytics.

Data is stored in the United States.

Emails we send

Account emails (confirming your address, resetting your password) are sent only when you ask for them. Newsletter emails go only to people who signed up, and every one explains how to unsubscribe.

Your choices and rights

• Delete your account from your account page. This permanently removes your account, Passport and saved list.
• Leave the newsletter by replying “unsubscribe” to any newsletter email.
• Ask for a copy, a correction or deletion of anything else we hold about you (such as a comment or a contact message) through our contact page. We'll respond within 30 days.

Children

Accounts are for people aged 13 and older. We don't knowingly collect personal information from children under 13. Kids are welcome to use the site, the printable checklists and the Passport on a device without an account. If you believe a child under 13 has created an account, contact us and we'll delete it.

Keeping it safe

Everything is sent over an encrypted connection. Account data is protected so each person can read and change only their own Passport. Passwords are never stored in a readable form.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and the date at the top.

Contact

Questions about privacy? Get in touch.