Privacy Policy
Last updated: 30 June 2026
This Privacy Policy explains what personal data LostGet collects, why, how we use and share it, and the choices and rights you have. It applies to the LostGet website and apps.
1. Who we are
LostGet (“we”) operates this Service and is the controller of your personal data. For privacy questions or to exercise your rights, contact privacy@lostget.com.
2. Data we collect
Account data: your email address, display name, optional phone number, a securely hashed password (or a provider ID if you sign in with Google or Facebook), and an optional profile photo.
Content you create: your Lost, Found, and Gift posts, photos, and proof-of-ownership details. Private proof-of-ownership answers are encrypted at rest.
Location: when you add a location we store the precise point privately and only ever show a fuzzed area — an approximate neighborhood or radius — publicly.
Messages: the content of conversations with other users and any contact details you choose to share in them.
Technical and usage data: IP address, device and browser information, basic diagnostics, and push-notification device tokens if you enable push.
3. Data from third parties
If you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider, as permitted by the consent you grant there. We do not post to your social accounts.
4. How we use your data
We use your data to:
- create and run your account and show your listings;
- operate core features — claims, proof-of-ownership, messaging, search, subscriptions, and matching Lost with Found items;
- send service messages and, with your consent, push notifications and email alerts;
- keep the Service safe through moderation, fraud and abuse prevention, and policy enforcement;
- comply with legal obligations and respond to lawful requests.
5. Legal bases
Where data-protection law such as the GDPR applies, we rely on: performance of our contract with you (to provide the Service); your consent (for advertising, analytics, and push notifications, which you can withdraw at any time); our legitimate interests (to keep the Service secure and prevent abuse); and compliance with legal obligations.
6. How we share data
We share data:
- with other users — only what you choose to make public in a listing, plus any contact details you opt to share in a conversation;
- with service providers who process data on our behalf under contract: cloud hosting and database (Amazon Web Services, MongoDB Atlas, Salesforce/Heroku), transactional email (Amazon SES), and push delivery (Google Firebase Cloud Messaging);
- with authorities when we receive a valid legal request — see our Law Enforcement Requests page.
- We never sell your personal data.
7. Cookies and advertising
We use essential cookies to run the Service and, with your consent, analytics and advertising cookies including Google AdSense. See our Cookie Policy and manage your choices from the cookie banner or “Cookie settings” at any time.
8. International transfers
Our providers process data on servers located in the United States. Where required, such transfers rely on appropriate safeguards, such as the providers’ standard contractual clauses.
9. How long we keep data
We keep your account data while your account is active. When you delete your account, your account, posts, messages, and photos are permanently removed. We may retain limited records for a short period where necessary for security, dispute resolution, or legal compliance.
10. Security
We protect data with encryption in transit (HTTPS), encryption of private proof-of-ownership answers at rest, hashed passwords, and access controls. No system is perfectly secure, but we work to protect your data and to address issues promptly.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. You can edit your profile and delete your account in-app, or contact privacy@lostget.com. You also have the right to complain to your local data-protection authority.
12. Children
LostGet is not directed to children under 16, or the age of digital consent in your country. We do not knowingly collect their data; if you believe a child has provided us data, contact us and we will remove it.
13. Location privacy
Exact coordinates are never shown publicly. Public pages display only a fuzzed area, so an item’s location cannot be pinpointed.
14. Changes
We may update this Policy; the date at the top shows the latest revision, and we will notify you of material changes.
15. Contact
Privacy questions or requests: privacy@lostget.com.