Effective July 15, 2026
We do not offer public member accounts. We collect only the data needed to publish photos, prevent abuse, measure use, and answer requests.
Information we collect
When you browse or react
Our servers receive standard request data such as IP address, browser type, requested page, referring page, and time of access. Security and access logs may retain this data for a limited period. The application issues a signed anonymous visitor identifier and stores keyed hashes rather than a raw IP address for likes, uploads, and abuse controls.
When you upload
We collect the image, optional title, keyed visitor hash, file hash, moderation result, and upload time. You must confirm the upload terms before the request is accepted. We decode and re-encode accepted images, which removes EXIF data including GPS location and camera identifiers from the published copy. A sanitized 720-pixel classifier copy is processed by Cloudflare Workers AI to check the expected animal species and screen for sexual content, graphic violence, and animal abuse. We store the resulting flags and short safety summary, not a biometric profile.
When you contact us
Contact requests include your email address, subject, and message. Removal requests include your email address, the photo URL, claim type, details, and good-faith confirmation. We also store a keyed requester hash to limit abuse.
How we use information
- Provide the photo wall, downloads, likes, shares, and sorting
- Review uploads and respond to safety, privacy, and rights concerns
- Detect duplicate files, spam, automated activity, and security threats
- Maintain reliable services and understand aggregate usage
- Meet legal obligations and enforce our terms
Service providers
We may use hosting, object storage, content delivery, security, CAPTCHA, moderation, email, analytics, and advertising providers. Cloudflare Turnstile may process browser and network signals to distinguish people from abusive automation. When enabled, Google AdSense may use cookies or similar technology to deliver, limit, and measure advertising according to Google’s own privacy controls.
Retention
Published images and their moderation records remain until removed. Rejected uploads stay private and are retained for no more than 30 days so we can operate the moderation and cleanup process; after that, the raw upload, every sanitized media copy, visitor and file hashes, title, dimensions, safety result, and associated interaction records are permanently erased. When a published photo is deleted, its live objects and sanitized media archive are removed immediately, its anonymous likes and interaction events are erased, and the remaining database row is reduced to a non-identifying operational tombstone. That tombstone is permanently deleted after 90 days. Encrypted database backups can retain an earlier copy for no longer than 90 days and are used only for restricted disaster recovery. Contact requests are normally retained for up to two years. Copyright, takedown, and other legal records are stored separately and may be retained longer when necessary to document compliance or meet legal obligations.
Your choices
You can block non-essential cookies in your browser, withdraw a like, or ask us to review personal information in a photo. Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. Send requests to contact@picturesofcat.com.
Children and changes
The service is not directed to children under 13. If you believe a child submitted personal information, contact us so we can remove it. We will update the effective date when this notice materially changes.