Privacy Policy

This Privacy Policy explains how PocketFetch (“PocketFetch,” “we,” “us,” or “our”) collects, uses, and discloses information about you when you visit this website, use the public HTTP APIs on this domain, or contact us through the Site (together, the “Site”). It also describes the privacy rights available to California residents and residents of certain other U.S. states, and how to exercise them.

You do not need an account to browse the marketing pages of the Site. Our iOS applications are distributed through Apple’s App Store and display additional privacy details there. When those apps talk to our servers, we process a limited amount of additional information, described in If you use our mobile apps below.

1. Information we collect

Information you provide to us

When you send a message through the Site’s contact form, we collect the information you submit: your name, email address, an optional subject, and the contents of your message. We also record the IP address from which the message was sent. We use this information to respond to and manage your inquiry, to keep a business record of it, and to help detect spam, abuse, and security issues. We do not add contact-form addresses to a marketing list.

Please do not include sensitive personal information (for example, a Social Security number, financial-account password, or health information) in a message. We do not need it to reply.

Information collected automatically

When you visit the Site, we record an activity-log entry for the request. That record typically includes:

• your IP address;
• the date and time, HTTP method, response status, route name, and page URL (the path only — not the query string);
• browser, operating system, and device type derived from your user-agent string, and the user-agent string itself.

We do not store the body of your requests in the activity log (so passwords and form contents are not copied there). For a successful contact-form submission we store a short identity line in the log — name, email, and subject only, not the message body — so we can match the visit to the inquiry.

We use this information to operate, secure, and improve the Site; to understand which pages are visited; to detect bots and crawlers; to rate-limit abusive traffic; and, where necessary, to block an IP address that is scraping, attacking, or otherwise harming the Site or our APIs.

Cookies

We use a small number of strictly necessary first-party cookies to operate the Site, protect forms, and remember your cookie preferences. We do not currently use analytics, advertising, or other non-essential cookies, pixels, or similar tracking technologies, and we do not currently use local storage for tracking. If that changes, we will update this policy and request your consent where required. For details, see our Cookie Policy.

If you use our mobile apps

Our iOS apps may call servers on this domain to sign in, list or download content, register an install, and verify purchases. In that case we may also process:

• Account information you use to sign in, such as your email address (passwords are stored only as one-way hashes);
• App-install identifiers the app registers with us;
• Purchase and entitlement records needed to unlock content you buy through Apple In-App Purchase (we do not receive your full payment-card number; Apple processes the payment);
• Content-access records, such as which items you are entitled to download;
• Technical request data such as IP address, used for authentication, rate limiting, and security.

Each app also presents privacy details in the App Store. This policy covers our processing on our servers; it does not replace Apple’s policies or an app’s App Store privacy label.

2. How we use your information

• To respond to your inquiries and keep a record of them;
• To operate, maintain, secure, and improve the Site and our APIs;
• To detect, prevent, and address fraud, abuse, spam, security incidents, scraping, and technical issues, including by rate-limiting or blocking IP addresses;
• To understand aggregate use of the Site (for example, which pages are visited);
• If you use our mobile apps, to authenticate you, deliver entitled content, and record purchases;
• To comply with legal obligations and enforce our Terms of Use.

We do not use your personal information for targeted advertising, we do not send marketing emails based on contact-form submissions, and we do not engage in automated decision-making or profiling that produces legal or similarly significant effects about you. Classifying a request as a bot or crawler, or blocking an IP address for abuse, is a security measure, not a legal or similarly significant decision about you as an individual.

3. Categories of personal information (CCPA notice at collection)

For purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), in the preceding 12 months we may have collected the following categories of personal information. We collect this information directly from you, automatically from your device, and, for in-app purchases, from Apple. We use it for the business purposes described in this policy. We do not collect Social Security numbers, financial-account numbers, precise geolocation, biometric information, or other “sensitive personal information” through the Site, and we do not use or disclose sensitive personal information for purposes that would require a right to limit.

4. How we disclose information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding 12 months, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not disclose personal information to third parties for their own direct marketing (California’s “Shine the Light” law, Civil Code section 1798.83).

We may disclose information to:

• Service providers that process information on our behalf under contract, such as our web hosting platform, file-storage provider (for images and other assets), and email delivery provider;
• Apple, when you use In-App Purchase in one of our apps (Apple processes the payment);
• Legal and safety recipients, when we believe in good faith that disclosure is necessary to comply with the law, respond to legal process, or protect the rights, property, or safety of PocketFetch, our users, or others;
• Successors, in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

5. “Do Not Track” and Global Privacy Control

Some browsers offer a “Do Not Track” (DNT) setting. Because there is no common industry standard for interpreting DNT signals, we do not respond to them. However, we honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information and of non-essential cookies. Because we do not sell or share personal information and we currently use only strictly necessary cookies, a GPC signal results in only strictly necessary cookies being used during your visit. We treat it the same way as choosing “Reject non-essential” on our cookie banner.

6. Your California privacy rights

If you are a California resident, you have the following rights under the CCPA, subject to legal exceptions:

• Right to know / access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients, and to receive a portable copy of that information;
• Right to delete personal information we collected from you;
• Right to correct inaccurate personal information;
• Right to opt out of the sale or sharing of personal information (we do not sell or share);
• Right to limit the use of sensitive personal information (we do not collect it through the Site);
• Right to non-discrimination for exercising your privacy rights.

We do not offer financial incentives in exchange for personal information.

To exercise any of these rights, email us at info@pocketfetch.com. We will take reasonable steps to verify your identity before responding (for example, by matching information you provide with information we already hold), and we will respond within the time required by law (generally 45 days, with the possibility of a permitted extension). You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may still need to verify your identity.

If we decline a request, you may appeal by replying to our decision and explaining why you believe we should reconsider. We will respond to an appeal within the time required by applicable law.

7. Residents of other U.S. states

Residents of certain other U.S. states (including, where those laws apply, states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) may have similar rights to access, correct, delete, obtain a copy of, or opt out of certain processing of their personal information. To make such a request, contact us using the details below. We will honor the rights that apply to you. If a state law gives you a right to appeal a refused request, you may appeal as described above.

8. International visitors

The Site is operated from the United States. If you access it from outside the United States, you understand that your information will be processed in the United States, which may have data-protection laws different from those of your country, including by our hosting and storage providers.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your information to operate and secure the Site (our legitimate interests), to respond to inquiries you send us (steps at your request / our legitimate interests), to provide app services you request (performance of a contract), and, where required, based on consent for any non-essential cookies. You may have rights of access, correction, deletion, restriction, objection, and portability, and a right to lodge a complaint with a supervisory authority. Contact us to exercise those rights. We do not currently use non-essential cookies, so there is no cookie consent to withdraw unless we introduce them later.

9. Children’s privacy

The Site is intended for a general audience and is not directed to children under 13. Consistent with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Data retention

We keep information only as long as we need it for the purposes described in this policy, unless a longer period is required by law:

• Contact-form submissions (including the associated IP address) — for as long as needed to respond and to maintain reasonable business and security records, after which we delete or de-identify them;
• Activity logs — for a limited operational period for security, abuse prevention, and understanding use of the Site, and until we no longer need a given record for those purposes (logs may also be cleared as a whole from our admin tools);
• Blocked IP addresses — until we remove the block;
• Session and security cookies — about two hours of inactivity; the cookie-consent cookie for 180 days; see the Cookie Policy;
• Mobile-app account, entitlement, and purchase records — for as long as the account is active and as needed for the app service, security, and financial recordkeeping, then for a limited additional period as required by law.

11. Data security

We use reasonable administrative and technical measures designed to protect the information we hold, including encrypted transport (HTTPS) and access controls on our admin tools. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Third-party links

The Site may link to third-party websites and services, such as app stores and social media platforms, that we do not control. This policy does not apply to those services, and we encourage you to review their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Site after an update becomes effective constitutes acceptance of the revised policy.

14. Contact us

If you have questions about this Privacy Policy, want to exercise a privacy right, or have a privacy complaint, contact us at info@pocketfetch.com.