Privacy policy
Last updated: November 6, 2026
1. Who we are and how to reach us
This policy explains how Wildomi ("we", "us") uses personal information when you visit our website, create an account, adopt animals or contact us. Wildomi is responsible for this information. To ask a question or make a privacy request, contact us through our Help Center and choose "Privacy request" as the topic.
2. Information we use and why
| Activity | Information and purpose | Legal basis for visitors in the EU |
|---|---|---|
| Visiting the website | Your browser sends your IP address and request information so our server can deliver the site. Short-lived request counters help prevent abuse. | Our legitimate interest in running a secure website, Article 6(1)(f) GDPR. |
| Creating and using an account | Your name, email address, securely hashed password, email confirmation status, account creation time and sign-in session records let us create your account and sign you in. | Providing the account you ask for, Article 6(1)(b) GDPR. |
| Choosing animals | The animals you add to your selection are stored in your browser so you can come back to them. Up to 50 opaque order references stop a repeated payment return from clearing a newer selection. Your selection does not store contact details or gift messages. | Providing the selection you ask for, with necessary browser storage. |
| Adopting animals | When checkout is available: your name, email address, the animals you chose, prices, order status, payment references, your checkout choices and the consent records needed to show what you agreed to. | Performing your contract, Article 6(1)(b) GDPR, and keeping records the law requires, Article 6(1)(c) GDPR. |
| Gifts | The recipient's name, your name as the sender and your personal message, so we can show them on the gift and certificate. We do not ask for the recipient's email address or postal address. | Performing your contract, Article 6(1)(b) GDPR, and our legitimate interest in delivering the gift you asked for, Article 6(1)(f) GDPR. |
| Thank-you plaque | The display name you choose for the plaque, if any. You can stay anonymous. | Performing your contract, Article 6(1)(b) GDPR. |
| Certificates | The animal, the names and dedication you add, the certificate date and its link to your order. | Performing your contract, Article 6(1)(b) GDPR. |
| Sharing with family | Invitation links you create, the animal you share and the accounts that choose to follow it. | Providing the sharing feature you ask for, Article 6(1)(b) GDPR. |
| Community posts | Your display name (your first name or a name you choose), the board, the topic tag, your text, the time you posted and the moderation status. Approved posts are public. We also keep moderation records: why a post was held, reports, decisions and the reasons we gave. | Providing the community you ask to use, Article 6(1)(b) GDPR; our legitimate interest in keeping the community safe and protecting wildlife, Article 6(1)(f) GDPR; and our legal duties for handling notices about illegal content, Article 6(1)(c) GDPR. |
| Reporting a post | The post, the reason you choose, the time and, if you are signed in, your account. We do not show the author who reported their post. | Our legitimate interest in keeping the community safe, Article 6(1)(f) GDPR, and our legal duties for notices about illegal content, Article 6(1)(c) GDPR. |
| Asking for help | Your name, email address, topic, message and the time you sent it, so we can record and answer your request. If you are signed in, the request is linked to your account. | Steps you ask for before or under a contract, or our legitimate interest in answering your question. |
| Customer reviews, if available | Your first name, rating, review text and publication date are public. We check privately that the order belongs to you and is paid. We do not publish your email address or order reference. | Providing the review service you ask for, Article 6(1)(b) GDPR, and our legitimate interest in verifying reviews, Article 6(1)(f) GDPR. |
| Optional product analytics | With your permission, selected page, animal, selection, checkout, payment and account steps are sent through our server to our PostHog analytics so we can see where the website helps people and where it needs work. | Consent, Article 6(1)(a) GDPR. |
| Optional advertising measurement | With your permission, selected page visits, animal views, selection changes, checkout starts, registrations and confirmed purchases are sent to Meta to measure our advertising. | Consent, Article 6(1)(a) GDPR. |
| Privacy requests | Your request and any reasonable identity check, so we can give you access, correct, export or delete your information. | Our legal obligations, Article 6(1)(c) GDPR. |
We do not collect postal addresses, because nothing is shipped. We do not ask for your precise location to show an animal's journey. Please do not put passwords, card details, health information or other sensitive details in a support message.
Demo account. Our demo account runs in your browser with sample adoptions. It needs no sign-in, does not create an account or an order and does not save what you do in it to our servers. If you have accepted optional analytics, we may record that the demo page was viewed, as with any other page.
3. Purchases, gifts, certificates and community posts
You can buy as a guest. After a confirmed payment, you can create an account or sign in with the email used for the purchase and save the order to it. An essential cookie, valid for 30 days, keeps the guest order private until then; our database stores only a hash of its value. If that cookie is lost before you save the order, contact us and we will help you recover it. When checkout is unavailable, your request is rejected before any order details are saved and nothing is charged.
Payments. When checkout is available we use Stripe Checkout. We send Stripe your email address, the animals and prices in your order and an internal order reference. Stripe collects your payment details directly. We never receive or store your full card number or security code. Stripe tells us whether the payment succeeded and gives us payment references. Stripe also processes information for its own purposes, such as fraud prevention; see its Privacy Policy and Data Processing Agreement.
Purchase records. We use RevenueCat, Inc. to link confirmed Stripe purchases to the Wildomi account that owns them. We send an internal account identifier and a Stripe checkout reference, and RevenueCat retrieves the transaction details (animals, prices, currency and payment status) from Stripe. We do not add names, email addresses or gift messages as RevenueCat customer attributes, and we do not load a RevenueCat browser SDK. RevenueCat acts on our behalf under its data processing terms, including safeguards for transfers to the United States; see its Privacy Policy.
Gifts. A gift link contains a one-time activation secret. We store it with the gift, the time it was activated and, once activated, the recipient's account. Anyone who has the link can activate the gift, so share it only with the recipient. We do not contact the recipient ourselves. Receiving a gift does not sign anyone up for marketing.
Plaque names. If you give a display name for the thank-you plaque, it is shown publicly on the plaque at the destination. The plaque never shows your email address, order details or where you live. If you stay anonymous, no name is shown for your adoption. We may decline a display name that includes contact details or other people's private information.
Certificates. The certificate editor keeps unfinished changes in the open page. Previewing or printing a draft does not save it on our server. Issuing a certificate for a paid order stores the animal, names, dedication, language, certificate date, the order it belongs to and when it was issued. The buyer and a gift recipient who has activated it can open the certificate.
Sharing with family. When you create an invitation, we store its link, the animal, your account and when it was created or revoked. When someone follows, we record their account and when they followed. Followers see the animal's name and species, not your certificate, gift message or order details. You can revoke an invitation at any time, and followers can unfollow.
Community posts. Approved posts are public: anyone can read them, including people who are not signed in, and search engines may index them. A post shows your display name, which is your first name or a display name you choose, never your email address. Posts are text only, and links appear as plain text. Your first 2 posts, posts our filter holds (links, email addresses, phone numbers or profanity) and posts reported by 3 people are reviewed by a moderator before they appear or reappear. The filter only holds a post for review; a person makes every decision to reject, remove or block. Our community guidelines explain the rules.
Marketing email needs a separate opt-in. It is never a condition of an account or a purchase, and you can withdraw at any time. Order confirmations and replies to your requests are not marketing.
4. Who can see your information
Account, order and support information is stored on servers under our control. Only authorized people who need it to run the service or meet legal duties can access it. We do not sell personal information for money and we do not give it to conservation partners for their own marketing.
Supabase provides sign-in and a database of account profiles and confirmed paid orders in its Frankfurt region. It processes account identifiers, names, email addresses, hashed credentials, verification and session records, and the order details needed to link purchases to their owner. See Supabase's Privacy Policy and Data Processing Addendum.
Resend delivers account confirmation and password reset emails. It receives your email address, the message (including a single-use link) and delivery status. Open and click tracking are switched off for these emails. See Resend's Privacy Policy.
Satellite maps. Journey maps and satellite views load public satellite imagery directly from NASA's Global Imagery Browse Services (Blue Marble) and the Terrascope service (ESA WorldCover). When a map loads, your browser sends these services your IP address and standard request information, such as the map tile requested. We do not send them your account or order details.
We may disclose information to public authorities when the law requires it, or to professional advisers when needed to establish, exercise or defend legal claims. Any provider that hosts or operates part of the service receives only the information it needs for that role. Provider support and subprocessors may involve processing outside the hosting region under contractual safeguards.
Optional PostHog product analytics
If you accept analytics in Cookie preferences, we use PostHog, open-source analytics software that we run on our own cloud servers, to understand how people use the website: selected pages, animals, selection changes, checkout and payment steps, account confirmation and use of digital features. We send selected product identifiers, quantities, amounts and currency, event times and random browser identifiers. If you are signed in, events can be linked to an internal account identifier so we can connect the steps before and after sign-in. These identifiers are pseudonymous, not anonymous.
Events pass through our server using a fixed list of names and properties. We do not send names, email addresses, passwords, sign-in links, gift links, dedications, gift messages or plaque names. We do not forward your IP address or browser user agent to our analytics server, and IP-based location is switched off. We do not load the PostHog browser SDK, record sessions, capture form text or collect full page URLs.
Analytics consent is separate from advertising consent. An earlier advertising-only choice does not turn on analytics. We do not replay anything collected before you consented. Withdrawing stops new events and cancels unsent ones when the request reaches our server; it does not recall events our analytics server already received. Global Privacy Control and Do Not Track keep optional measurement off. The analytics server runs in the United States with a cloud hosting provider that processes the data only on our behalf. PostHog, Inc. does not receive these events.
Optional Meta advertising measurement
With your permission, we use the Meta Pixel, provided by Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland, to measure selected actions and the performance of our Facebook and Instagram ads. The Pixel does not load before you accept advertising measurement in Cookie preferences. Saying no does not stop you adopting or using an account.
We send page views, animal views, additions to your selection, successful registrations and, after a payment page is created, checkout starts. Product events contain catalog identifiers, quantities and the catalog value and currency; they do not mean a payment happened. With your permission, confirmed payments may also be sent from our server as Purchase events, with the amount and currency, product identifiers, a deduplication identifier, permitted browser and click identifiers, IP address and browser user agent. We send a Purchase only after Stripe confirms payment.
Our event parameters do not contain your name, email address, gift message, certificate text or plaque name. Automatic event setup, automatic advanced matching and event tracking without code are switched off. Requests to Meta still reveal network and browser information, the page address and eligible ad click or browser identifiers. Meta handles this information under its Privacy Policy and Business Tools Terms. Under those terms, Meta acts as our processor for matching and measurement, and as joint controller for collecting and sending data for ad targeting and delivery under the Controller Addendum. You can exercise your rights with Meta or with us, and we forward relevant requests to Meta.
Unsent Purchase events wait in a restricted queue. Their identifying details are removed after delivery, after you withdraw, or after seven days. Withdrawing cannot recall an event already sent. We honor your choice for up to 180 days and then ask again. Withdrawing turns off the Pixel, removes its script, stops our events and clears accessible Meta cookies; it does not delete what Meta already received. Meta may process information in the United States; its Data Privacy Framework disclosure explains the safeguards for Meta Business Tools data, including Pixel data.
Fonts are hosted with the website and do not load from Google Fonts. If you follow a link to another website, that website's own privacy practices apply.
5. How long we keep information
We keep information for as long as we need it for the purpose we collected it, taking into account whether your account or request is still active, whether a dispute is open and whether the law requires us to keep a record.
- Accounts: kept while you use the account or until you delete it. Deleting your account removes its sign-in sessions and linked support requests, unless an order record must be kept for legal reasons. If that applies, your account settings point you to the Help Center instead of reporting a deletion that has not happened.
- Sign-in sessions: expire after seven days. Signing out ends the current session, and changing or resetting your password ends your other sessions. Expired session records are removed regularly.
- Your selection: stays in your browser until you remove it or clear your browser storage.
- Orders and accounting records: kept for the period the law requires. Deleting your account does not override that duty, and access to these records is limited to that purpose.
- Gifts, certificates and plaque names: kept with the order they belong to. Deleting a recipient's account disconnects it from the gift; it does not reopen the gift or delete the buyer's certificate. Ask us through the Help Center if you want a plaque name removed or changed.
- Family sharing: invitations and follows stay until revoked, unfollowed or the account is deleted.
- Reviews: stay public until you remove them or they are lawfully removed.
- Community posts: approved posts stay public until they are removed or you delete your account. Ask us through the Help Center if you want a post removed. When you delete your account, your posts are deleted or anonymized, which removes your display name and the link to your account. Rejected and removed posts, reports and moderation decisions are kept only as long as needed to handle appeals, deal with repeated abuse and meet legal duties.
- Support requests: kept while your request is open and for as long as needed for follow-up or an unresolved claim. A message sent while signed out is not linked to an account; you can ask us to delete it.
- Product analytics: your choice is honored for up to 180 days. The analytics cookie expires after 180 days and is removed when you withdraw. Unsent events are removed after delivery, withdrawal or at most four days. Our analytics server keeps received events according to our retention settings and any deletion request.
- Advertising measurement: your choice is honored for up to 180 days. Meta lists a 90-day lifetime for its
_fbpand_fbccookies. Meta's Business Tools Terms allow it to keep Event Data for up to two years. We have not set up Custom Audiences. - Security information: request counters expire after their abuse-prevention window. Information needed to investigate a real security incident may be kept for that investigation.
- Public website cache: the web app may store public files and map imagery in your browser. Clear them in your browser's site-data settings.
6. Your rights
You can download your account data, including your community posts, and delete your account in account settings. For anything else, contact us through the Help Center. Deleting an account is not the same as asking for a refund.
Wherever you live, you can ask us to tell you what personal information we hold about you, give you a copy, correct it or delete it. We may ask for reasonable information to confirm your identity. We usually respond within one month and will tell you within that month if we need longer. Requests are normally free.
Visitors in the EU also have the rights to restrict processing, to data portability and to object to processing based on legitimate interests or to direct marketing. Withdrawing consent does not affect processing that happened before. You can complain to the data protection authority in the EU country where you live, work or believe an infringement happened. You do not have to contact us first.
US residents. Depending on your state, you may have the right to know, access, correct, delete and get a copy of your personal information, and to opt out of targeted advertising. Optional advertising measurement runs only if you opt in, and you can withdraw at any time in Cookie preferences. We treat Global Privacy Control as an opt-out of optional measurement. We do not sell personal information for money. If we decline a request, you can ask us to reconsider by replying to our answer.
7. Security, children and automated decisions
We protect accounts with password hashing, server-side sessions and access restrictions. No online service can guarantee perfect security. Contact us if you think someone has accessed your account.
Wildomi accounts and purchases are for adults. Our website is not directed to children, and we do not knowingly collect personal information from children under 13. Adults can buy gifts for children; a parent or guardian should activate a child's gift in their own account. If you believe a child has given us personal information, contact us and we will delete it.
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Our community filter can hold a post automatically, but a person reviews it and makes any decision to reject, remove or block.
8. Changes to this policy
We update this policy when the way we use personal information changes, and we tell you about important changes in an appropriate way. Continuing to browse does not give consent to a new purpose that needs it. Our cookies and local storage notice explains the browser storage the website uses.