Privacy
Updated September 8, 2026.
Your photo and kit request
When you choose a photo, we upload and save a resized copy in private storage. When you continue past a details step, we save the email address and dog’s name you provide. We also save valid details when you close the form. These can be retained even if you leave before completing the final step. We save your price-interest confirmation when you send your kit request.
We use this information to assess your kit request and contact you about it. A kit request does not place an order or take payment. We do not use your uploaded photo in advertising or make it publicly accessible. We remove embedded photo metadata, including location information.
Photos and request details are stored privately with Supabase. We use Resend to email our team your request details, photo and campaign information, including unfinished requests with contact details. Drafts and requests are deleted after 90 days without an update, through a daily cleanup. Removing a photo in the form deletes the saved copy for that draft. Emails and downloaded copies are retained separately in our team’s inbox and are not removed by the website’s automatic cleanup.
Site analytics
We use PostHog to understand visits, traffic sources, interactions and progress through the kit form. We collect IP addresses and approximate location, browser and device details, referring pages, campaign tags, page views, clicks, scrolling, page performance and browser errors. We create visitor profiles to connect activity across return visits. When you complete a kit request, we attach your submitted email to your profile; this email is provided by you and is not verified by a login. Photo troubleshooting events include format, size range, dimensions, processing stage and error codes.
Session recordings include visible page text and the details you type into the kit form, including your email address and dog’s name, even if you do not submit the request. We use click and scroll heatmaps, browser console logs and network request timings to understand where visitors get stuck. Uploaded photos and file inputs are excluded from recordings. We do not record network request bodies or headers, and we remove URL parameters other than supported campaign tags and advertising click IDs.
Analytics uses first-party cookies and local browser storage to recognize returning visitors. The cookie expires after 365 days; clearing browser data or switching browsers can create a new anonymous visitor until you complete a request with the same email again. This does not give access to your private photos or form records. We keep allowlisted campaign tags in this tab’s session storage so we can identify the campaign that brought you here, including advertising click identifiers when present. We respect browser Do Not Track and Global Privacy Control signals. Basic hosting and security logs may still be processed by Vercel to operate and protect the site.