Privacy

PawLabel is run by its individual owner — an autónomo (self-employed sole proprietor) established in Spain — who is the data controller for the personal data described on this page. Processing is governed by Spanish law and the EU General Data Protection Regulation (Regulation (EU) 2016/679). The contact form is the direct route for any privacy request or question — it reaches the operator, not a support queue. If you believe your data-protection rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD — www.aepd.es).

You can use every reference feature of PawLabel — search, drug, food, toxic-substance and recall lookups — without an account and without telling us who you are. A free account is optional: signing in by magic link (a one-time link sent to your email) lets you sync your pets, logs and saved items across devices and manage recall alerts. Creating one is entirely your choice, and you can delete it at any time.

If you create an account, we store the data you choose to keep in it on our servers so it syncs across your devices: your email address (used to sign you in by magic link and, only if you opt in, to send care reminders and recall alerts); the pet profiles you add (name, species, breed, birth date, and the allergens you ask us to watch for); your feeding log; your care-calendar events; the records you save (bookmarks); and your reaction reports. The legal basis for this processing is performance of our contract with you (GDPR Art. 6(1)(b)) — we process it to provide the account features you asked for. We do not use it to advertise to you, and we never share it with advertising networks.

Reaction reports — the symptoms you note after a feeding — are health-adjacent information about your animal, not about you, so they are not “special category” personal data under GDPR Art. 9. We nevertheless handle them as sensitive: they are stored only in your account, used only to build your own feeding and reaction timeline, never shown to other users, and never shared with advertising networks or data brokers. You can delete any individual report, export all of them, or erase your whole account at any time.

Signing in also creates a session record for the device you used: when it was created and when it expires, the IP address the sign-in request came from, and your browser’s user-agent string. Keeping you signed in is part of providing the account (Art. 6(1)(b)); the IP address and user-agent are recorded to secure the account and detect abuse of the sign-in system, which is our legitimate interest (Art. 6(1)(f)). A session record lasts at most 30 days — signing out ends it, and deleting your account removes it along with everything else. It is included in your data export (the session token itself never is, because it would let anyone holding the file into your account), and we never use it for advertising.

Signed-in account holders can grant two separate, entirely optional permissions in the account Privacy Center. Each is a distinct purpose with its own legal basis — your consent (GDPR Art. 6(1)(a)) — and each is OFF by default, unbundled from sign-up and from our terms, and independently switchable (in line with EDPB Opinion 28/2024). (a) Model improvement and training: allow us to use your account data to develop and improve the models behind PawLabel’s features. (b) Aggregated insights: allow us to include your data in anonymized, aggregated insights — large-group cohorts only, never row-level, with small groups suppressed — that we may license to third parties such as veterinary or manufacturer partners.

Neither permission is required to use any feature of PawLabel, and turning either off changes nothing about how the free app works for you. You can withdraw either consent at any time in the account Privacy Center, as easily as you gave it (GDPR Art. 7(3)); withdrawal does not affect processing already carried out on the earlier basis. We never sell personal data, and no health-related data is ever shared with advertising networks.

The pet profiles, feeding log, care calendar and reaction notes you create in “My pets” without signing in are stored only in your own browser (localStorage). Without an account they are never uploaded to our servers, and we cannot see them. Clearing your browser data deletes them permanently. If you sign in and import them into an account, a copy is then stored on our servers so it syncs across your devices — see “Your account data” above — and the copy on this device is kept exactly as it was: importing never deletes it, and it stays in your browser until you clear it yourself.

If you subscribe to recall alerts, we store your email address, your optional species filter, your interface language, the page you subscribed from, and an unsubscribe token. We use them for exactly one thing: sending you recall alert emails. Every email contains a one-click unsubscribe link; unsubscribing deactivates your address immediately.

Messages sent through the contact form are delivered to us as email (with your address as the reply-to) so we can answer you. They are not added to any marketing list.

Anything beyond strictly-necessary storage is opt-in. A consent banner lets you accept all, reject all non-essential, or pick categories: essential (always on — theme, locally-stored pets, the consent choice itself), analytics, and advertising (reserved; no ad scripts exist on the site today). Your choice is stored in a small cookie plus a localStorage mirror for up to 180 days; clearing your browser’s site data (cookies and local storage together) resets it and re-opens the banner.

We honor the Global Privacy Control (GPC) browser signal: when your browser sends it, we treat it as “reject non-essential” automatically.

The site can run Google Analytics 4 to understand aggregate usage — but only after you opt in via the consent banner; without consent the GA script is never loaded. We do not send GA any health-related data, any “My pets” data, or your search terms (custom events carry at most a query's character count), and we do not use analytics data for advertising.

PawLabel currently serves no third-party advertising. The layout contains clearly-labeled, reserved ad placements that are switched off by default. If we enable an advertising partner, its scripts will load only with your advertising consent, this page will be updated first, and health-related data will never be shared with ad networks.

Product pages may show clearly-disclosed “Where to buy” retailer links that route through /go/ redirects. No affiliate partnerships are active today. When they are, a disclosure line always accompanies the buttons, and the redirect passes no personal or health data — only the link's identifier.

PawLabel’s business model is built on aggregated, anonymized insights and a data API over public reference data — never on selling personal information. We do not sell personal data. The only way your account data can ever enter an aggregated, anonymized insight is if you have switched on the optional “aggregated insights” consent in your account, and even then only as a large-group cohort, never as your individual records. No personal data is shared with ad networks.

• “My pets” data (localStorage — not uploaded unless you import it into an account, and kept on your device even then)
• Your light/dark theme choice (localStorage)
• Whether you dismissed the language suggestion banner (localStorage)
• Google Analytics cookies — only after you grant analytics consent
• Your consent choice (cookie + localStorage mirror, up to 180 days)
• Your sign-in session (a secure cookie) — only while you are signed in to an account

Because the operator is established in Spain, the EU General Data Protection Regulation governs all of the processing described here, whatever country you visit from. We rely on three legal bases. Performance of a contract (Art. 6(1)(b)) covers providing the optional account and its features — syncing your pets, feeding and care logs, reaction reports, saved items and settings. Consent (Art. 6(1)(a)) covers analytics, any future advertising storage, recall-alert and care-reminder emails, and — separately and optionally — using your account data to improve or train models and to build anonymized aggregated insights; you can withdraw any of these at any time, as easily as you gave it (see “Your rights” below). Legitimate interest (Art. 6(1)(f)) covers operating and securing the site — including short-lived server and anti-abuse logs that may contain your IP address, and the IP address and browser user-agent recorded on each account sign-in session for up to 30 days — and answering the messages you send us.

Your consent choice for cookies is kept for up to 180 days (cookie plus a localStorage mirror you control). If you create an account, the data in it — profile, pets, feeding and care logs, reaction reports, saved items and your consent history — is kept until you delete those items or delete your account; account deletion erases them immediately and irreversibly. A sign-in session record — including the IP address and browser user-agent it was created from — is kept for the life of the session, at most 30 days. A recall-alert subscription is kept until you unsubscribe; an unsubscribed address stays as a deactivated do-not-email record until you ask us to erase it. Contact-form messages are kept as ordinary email correspondence only as long as needed to handle them. Everything in “My pets” used without an account lives in your browser for as long as you choose to keep it.

We rely on a small number of service providers (processors) that act on our instructions: DigitalOcean (United States) for hosting and for the account database, Mailgun (United States) for the transactional sign-in, welcome, care-reminder and recall-alert emails, and — only if you consent to analytics — Google Analytics (United States). Using them means the personal data described above (your account data, subscription email, contact messages, and technical data such as your IP address) is transferred to and processed in the United States, which the EU does not by default consider to offer an equivalent level of data protection. These transfers are made under the European Commission’s Standard Contractual Clauses built into each provider’s data-processing agreement and, where a provider is certified under the EU–US Data Privacy Framework (as Google is), under that framework. You can request more detail, or a copy of the safeguards, through the contact form.

You have the right to access the personal data we hold about you, to have it rectified, to have it erased, to restrict or object to its processing, and to receive it in a portable form. If you have an account, you can exercise two of these rights yourself, at any time, from the account Privacy Center: download a full copy of your account data as a JSON file (access and portability, Art. 15/20), and permanently delete your account (erasure, Art. 17) — deletion immediately and irreversibly removes your profile, pets, feeding and care logs, reaction reports, saved items and consent history, and deactivates any linked recall-alert subscription or API key first. Where we rely on consent, you can withdraw it at any time — the two account data opt-ins and analytics in their respective controls, and recall or care emails via the one-click unsubscribe link in every message — without affecting processing already carried out. For any right we do not yet offer as a self-service control, use the contact form and we will handle it directly. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or your local supervisory authority. “My pets” data used without an account stays under your own control: clearing your browser’s site data removes it.

PawLabel is a general-audience reference and is not directed at children. Under Spain’s data-protection law (LOPDGDD), 14 is the minimum age to consent on one’s own to the processing of personal data by an online service; we do not knowingly collect personal data from anyone under 14. The only personal data the site can receive is an email address or a contact message — if a child under that age has submitted one, contact us and we will delete it.

When our data practices change we update this page before the change goes live. This version reflects the launch of optional free accounts and the in-account privacy controls: data export, account deletion, and the two separate, default-off data opt-ins.