Privacy Policy

Last updated: 10 May 2026

What we collect

Account data

  • Email and name (required to create an account).
  • Hashed password or OAuth identifier (never the plain-text password).
  • Optional avatar.

Collection data

  • Animal records, housing records, breeding records, sales records, activity logs (feedings, weighings, sheddings, medications), photos.
  • This is your data. We store it to provide the Service.

Usage data

  • Standard server logs (IP, user agent, timestamps).
  • Error reports and performance traces (no personally identifying details unless you opt in).

We do not collect:

  • Payment data — the Service does not collect any.
  • Your location beyond the IP-level metadata above.
  • Your browsing on other sites.

How we use it

  • To run the Service. Account data lets you log in; collection data is what the app shows you.
  • To improve the Service. Usage data and error reports tell us where the app is slow or broken.
  • To contact you. Service announcements, security notices, and (if you opt in) product updates.

We do not sell your data. We do not share your collection data with third parties for marketing.

Public profiles

Each animal you record has a public profile at /p/<your-space>/<animal-code>. Anyone with the URL — buyers, vets, inspectors — can view it. The public profile shows the animal's morph, lineage, and any welfare flags. It does not show buyer information, sale prices, internal notes, or husbandry logs.

Third parties

We use the following service providers, who process limited data on our behalf:

  • Hosting & database — Hetzner Online GmbH (servers in Germany / Finland, EU). Stores account data, animal and collection records, and server logs.
  • Image storage & CDN — Cloudflare, Inc. (R2 object storage; global edge CDN at media.herply.app). Stores user-uploaded images (avatars, gallery, documents).
  • Email delivery — Resend, Inc. (US). Sends transactional emails (verification, password reset, 2FA setup notifications).
  • Error monitoring — Sentry (Functional Software, Inc.), EU region (Frankfurt). Receives error reports with sensitive fields (cookies, auth headers, email addresses) stripped client-side before transmission.
  • Authentication — better-auth, an open-source library that runs on our hosting (no third-party processor). Optionally, Google LLC (US) — only if you sign in with Google.

Your rights

You can:

  • View your data — log in to the app at any time.
  • Export your data — self-service export is on the roadmap. Until then, email privacy@herply.app and we will send you a copy of your data.
  • Correct your data — edit any record from the animal/clutch/sale page.
  • Delete your data — close your account from the account settings; we remove your data within 30 days.

If you're in a jurisdiction with stricter rules (GDPR, LGPD, CCPA), you also have rights to data portability, restriction of processing, and withdrawal of consent. Contact us to exercise them.

Cookies

We use a minimal set of cookies:

  • Session cookie to keep you logged in.
  • Theme cookie to remember your light/dark preference.

We do not use marketing or analytics cookies that track you across sites. Because all our cookies are strictly necessary for the Service to function, we do not display a consent banner — under ePrivacy and GDPR, only non-essential cookies (analytics, marketing, fingerprinting) require prior consent.

Data retention

  • Active accounts: data is retained for as long as your account is active.
  • Closed accounts: data is removed within 30 days of account closure.
  • Server logs: retained for 30 days.
  • Backups: encrypted, retained for 90 days.

Changes to this policy

We may update this Policy. Material changes will be flagged in-app with at least 14 days' notice.

Contact

Herply is operated by Bruno Silva (Portugal). Privacy questions or data-rights requests? Email privacy@herply.app.