Privacy Policy

Last updated: July 3, 2026

PawPrints Of Fame is owned and operated by Theta Pi Ltd, a company incorporated in Cyprus (“Theta Pi,” “we,” “our,” or “us”).

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use PawPrints Of Fame, including our website and related services.

Theta Pi Ltd is the data controller responsible for your personal data under applicable data protection laws, including the GDPR.

For questions or concerns, please contact us at:
Email: [email protected]
Address: Zinonos Kitieos 38, Larnaca, 6022, Cyprus

a. Account & Authentication Information

• Email address (mandatory).
• Encrypted password hash if you sign up with email and password. We do not store your plain-text password.
• Google authentication information if you sign in with Google, such as your Google account identifier and email address.
• From Google sign-in, we collect your email and authentication identifiers needed to log you in.
• We do not receive or store your Google password.
• Account status information, such as whether your account is confirmed, active, locked, or pending checkout.

b. Star & Pet Profile Information

• Pet name, pet type, breed, story, tagline, and other profile details.
• Pet profile photo and any other submitted pet-related content.
• Optional social or website links, such as Instagram, TikTok, YouTube, Facebook, or a personal webpage.

Published star pages are public and may be viewed by anyone who visits the website or has the star link.

c. Payment & Purchase Information

We use Stripe to process payments. We do not store or process full payment card details on our servers. Stripe handles payment card information securely.

We may store payment-related records needed to operate the service and meet legal, tax, accounting, audit, and customer-support obligations, including:

• Stripe checkout session IDs, payment intent IDs, and payment transaction references.
• Number of stars purchased, currency, amount paid, payment method summary, receipt number, invoice number, and payment status.
• Billing or transaction-related email address and related purchase timestamps.

d. Technical, Security & Usage Data

We collect technical data for security, fraud prevention, abuse prevention, service administration, troubleshooting, and basic site functionality. This may include:

• IP address or IP-derived information, user agent, browser/device information, request path, request method, and timestamps.
• Security events, such as blocked form submissions, suspicious requests, rate-limit events, and failed login activity.
• Basic usage events needed to operate the service, such as checkout activity, sign-up activity, and star view activity.
• First-party visitor behavior analytics, such as page paths, session timing, referrer source, search terms and result counts, and basic navigation activity, when cookies are accepted. We do not store full user-agent strings or full page query strings for visitor behavior analytics.
• Cookieless aggregate analytics when cookies are rejected, such as page path, star ID for star-profile pages, timestamp, referrer host, broad country code, and device category. This cookieless dataset does not store raw IP addresses, hashed IP addresses, full user-agent strings, visitor tokens, sessions, or individual visitor journeys.

For cookieless aggregate analytics, we may use the request IP address transiently to estimate a broad country code, but we do not store the IP address or an IP hash in that dataset.

For star view tracking, we may use a first-party viewer token cookie named star_viewer_token and limited IP-based signals to help identify repeat visits and reduce artificial or abusive views. See our Cookies Policy.

e. Communications & Support

If you contact us, respond to emails, request support, unsubscribe from optional emails, or otherwise communicate with us, we may process the information you provide and the related communication records.

• Create, confirm, secure, and manage user accounts.
• Provide star credits, pet profile creation, public star pages, and dashboard functionality.
• Process purchases, receipts, invoices, refunds where applicable, and payment-related support.
• Improve website performance, functionality, and security.
• Understand first-party visitor behavior when cookies are accepted, such as which public pages are visited, which pages visitors land on, which referrer sources send traffic, and which public Stars searches are performed.
• Understand aggregate page-view activity when cookies are rejected, without creating visitor sessions or tracking individual journeys.
• Store and display user-generated pet profile content.
• Track star views and reduce artificial or abusive view activity.
• Prevent fraud, spam, abuse, unauthorized access, and security incidents.
• Send service-related emails, such as confirmation, password, unlock, security, purchase, receipt, and account notices.
• Comply with legal obligations.

We do not engage in automated decision-making or profiling using your personal data.

We send service-related emails that are necessary for account, security, payment, and product functionality. These may include confirmation emails, password reset emails, unlock instructions, payment receipts, invoices, important account notices, and policy updates.

• Contractual Necessity: To create and manage your account, provide star credits and pet profiles, process checkout, and operate the service you request.
• Legitimate Interests: To secure the service, prevent fraud and abuse, troubleshoot issues, improve functionality, maintain records, understand aggregate cookieless usage, and protect our rights and users.
• Consent: Where we ask for consent, such as for optional cookies or optional communications where required.
• Legal Obligations: To comply with tax, accounting, consumer protection, regulatory, legal process, and other legal requirements.

• Hosting, storage, infrastructure, email, security, and support providers that help us operate, secure, and maintain the service. These providers are expected to process data only as needed to provide services to us.
• Payment Processor (Stripe), which securely handles transactions on our behalf.
• Analytics or operational tools, if enabled, to understand usage and improve the service.
• Legal authorities, regulators, courts, or other parties where required by law, legal process, or to protect rights, property, safety, security, or prevent fraud and abuse.
• In the event of a business transfer (e.g., merger or acquisition), personal data may be transferred to new ownership, with notice provided.

We retain your data for as long as necessary to provide our services and fulfill the purposes outlined in this Policy, or as required by law.

• User Accounts & Pet Profiles:
  • Active Accounts: We store your account and associated pet profiles while your account remains active and you continue to use our services.
  • Unconfirmed Unpaid Accounts: Accounts that are not confirmed and have not completed payment may be deleted after 7 days.
  • Inactive Unpaid Checkout-Started Accounts: Accounts that started checkout but remain inactive and unpaid may be deleted after 14 days.
  • Inactive or Closed Accounts (Grace Period): If your account is closed or becomes inactive, your account data and pet profiles may be retained for a grace period of up to 30 days to allow potential reactivation or to resolve operational issues. After that period, we will delete or anonymize personal data, unless retention is required by law.
  • User-Initiated Deletion: You may request deletion of your account and pet profiles at any time, including during the grace period, by contacting us at [email protected].
• Purchase-Related Data: We retain information needed for tax, audit, and legal compliance (e.g., invoices and transaction records), even if your account is deleted or becomes inactive.
• Technical, Security & View Logs: We store technical logs, security events, star view records, first-party visitor behavior analytics, and cookieless aggregate analytics for as long as reasonably needed to operate the service, maintain integrity, troubleshoot issues, prevent abuse, and comply with legal obligations. Visitor behavior analytics and cookieless aggregate analytics are normally retained for up to 400 days. IP addresses used for view tracking may be removed or anonymized while preserving non-identifying view counts and related reporting.
• Backups: Residual copies of data may remain in backups for a limited period before being overwritten or deleted through normal backup rotation.

• Access: Request a copy of personal data we hold about you.
• Rectify: Ask us to correct inaccurate or incomplete data.
• Delete: Request deletion of your data, subject to legal exceptions.
• Withdraw Consent: Where we process data based on consent, you can withdraw it at any time.
• Object: Object to certain processing (e.g., direct marketing or if based on legitimate interest).
• Restrict Processing: Ask us to restrict how we process certain personal data.
• Data Portability: Receive your data in a structured, commonly used format.
• CCPA/CPRA (California Residents): You may have the right to request the categories of personal data we collect, delete your data, correct inaccurate data, or opt out of sharing. We do not sell your personal data. To exercise these rights, contact us directly at [email protected].

If you have further requests or cannot find what you need in your account settings, please email us at [email protected].

If you are in the EU/EEA and believe your personal data has been processed unlawfully, you may also have the right to lodge a complaint with your local data protection authority. For Cyprus, this is the Office of the Commissioner for Personal Data Protection.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us at [email protected] so we can take steps to remove such information and terminate the child’s account.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Address: Zinonos Kitieos 38, Larnaca, 6022, Cyprus

Your data may be stored or processed outside your jurisdiction, including outside the European Economic Area, depending on the service providers we use. Where required, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), data processing agreements, and other measures intended to protect your data in accordance with applicable data protection laws.

We use administrative, technical, and organizational safeguards designed to protect personal data, including encrypted passwords, access controls, secure payment processing through Stripe, rate limiting, security event monitoring, and other abuse-prevention controls. However, no system is 100% secure, and we cannot guarantee absolute data security.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any modifications will be posted here with an updated “Last updated” date. If changes are material, we may provide additional notice where appropriate.