Account: your email address, and your name if your sign-in provider (such as Google) shares it. Other users only ever see your display name.

Posts and reports: titles, descriptions, categories, photos, the place you pin and any note about where the item is.

Photos are resized and saved again on your device before upload, which removes their hidden data, including where they were taken. Our server refuses photos that still carry it.

Activity: your thank-yous, "Is this yours?" reports and their answers, reports about posts, and your notifications.

Tips: for each tip, the amount and currency paid, what reached the finder's Stripe account and Stripe's fee, its status and Stripe's payment ID; and the currency you choose for paying tips.

Receiving tips: your Stripe account ID, its country and currency, whether it can receive tips, and when you agreed to the "Receiving tips" page. Your card, bank, date of birth, address and ID documents go to Stripe, never to us.

Push notifications: if you turn them on, the push address of your device and which kinds you want, so we can send them. Turning them off on a device removes that device's push address.

Contact messages: the subject and message you send to the Lostalgia team, together with your account name and email address, so the team can respond.

API keys: if you make one, its name, a hash of the key (never the key itself), its plan and limits, how many requests it makes each day and when it was last used.

If you allow it, your device location is used to centre the map and to place a pin. We do not track you or store your location, except the spot you choose to post.

If you do not allow it, we estimate your city from your IP address only to choose where the map starts. That estimate is not stored.

People who are not signed in see items that were left in place at a rough location only.

Posts on the map, their photos and your display name are public in the app.

Posts on the map are also shared through the Lostalgia API, without your name (see "Sharing through the Lostalgia API").

"Is this yours?" photos, place and note are seen only by the person who sent them, the owner of the lost post and Lostalgia's admins, who may check them to deal with misuse (admins also see who sent them). If the owner answers "Not mine", they are shown on the Found map so the real owner can find the item.

Who reported a post is never shown to the person who posted it.

A tip's amount is seen by the person who sent it and the finder. The name on the finder's Stripe account can appear on the payer's bank statement.

Contact messages are read only by the Lostalgia team.

What is shared: for posts on the map only, the title, description, category and what the item is; photos for 7 days after posting (not while hidden after a report); the location, rounded to about 100 m for items left where they were found and otherwise the spot or area shown on the map; the place note; whether a found item was handed in; the dates; and a link to the post.

What is never shared: your name, email address or account ID, "Is this yours?" reports, thank-yous, tips, contact messages, and posts that are no longer on the map.

Who receives it: people with a Lostalgia account who make an API key (developers of other apps and websites), and the people who use those apps and websites.

Why: so that lost items can reach their owners through other apps and services too, the same purpose as posting on the map. API users must follow our Terms of Use: they may use the data only to help return lost items, never to contact, identify, track or profile people, and they must keep copies for no more than 24 hours and stop showing an item within 24 hours after it leaves the map.

When a post is picked up, expires, is edited, hidden or deleted, the API stops returning it (or returns the new version) straight away. We require API users to remove their copies within 24 hours and suspend keys that break the rules, but we cannot fully control services we do not run.

Photos: deleted from our servers 10 days after posting (shown in the app for 7 days). Browsers that already showed a photo may keep their copy for up to 5 minutes after it is hidden or deleted.

Posts: on the map for 7 days. Posts you delete are removed for good after 30 days.

Notifications: 90 days.

Contact messages: until you delete your account.

API key records and their daily request counts: until you delete your account.

Tip records: kept after you delete your account, without your name or account, for 5 years after the payment for accounting and to handle refunds and chargebacks. Stripe keeps its own records under its privacy policy.

Your account and everything linked to it: until you delete your account. Deleting it removes your profile, posts, photos, reports, thank-yous, notifications and contact messages straight away, apart from short-lived backups.

Supabase (database and sign-in), Cloudflare (website hosting and photo storage), OpenFreeMap and OpenStreetMap (map), Stripe (tips, and checking the identity of people who receive them), the push services of your browser or device (Apple, Google or Mozilla) if you turn on notifications, and Apple or Google if you sign in with them. They process data to run Lostalgia. Some of them store data outside your country.

Stripe handles tip payments and finders' Stripe accounts under its own privacy policy (stripe.com/privacy).

We do not sell your data and we do not use it for advertising.

You can edit or delete posts for 7 days after posting, and delete your account at any time from My activity.

You can ask us for a copy of your data or to correct it at privacy@lostalgia.app. You may also complain to your local privacy regulator.

Privacy questions: privacy@lostalgia.app.