This page summarises the draft Privacy Policy, version 2.4 (29 October 2026). The policy is a draft and not yet in force; where this summary and the policy differ, the policy prevails. This is not legal advice. Security, messages and the help assistant are on Privacy: security, messages and support; your rights and how long data is kept are on GDPR: your rights and retention.
Who is responsible #
The controller is BreedMap, [email protected]. BreedMap is not yet registered as a company. No data protection officer has been appointed, as the GDPR conditions for one are not met.
What is collected #
- Account and sign-in data (passwords are stored only as hashes) and your email address.
- Your name, required at sign-up and shown to others only if you choose.
- Your full birth date, never shown to other users. It is used to check the minimum age (15) and, for kid accounts, the guardian's age and the day the account becomes a normal one.
- For kid accounts, the guardian declaration (who, for which child, when, which text version).
- Profile photo and address, only if you add them.
- Your breeding and cultivation data, and gallery photos with their details (time, place, device). You choose which details may be shown when an item is public.
- Messages and messaging data: the text of messages you send and receive, links in them, sender, recipient, time and read state, your messaging settings, friends, contacts and blocks, the device token used for push, and reports.
- Technical data: IP address, browser and device data, and a country code.
Where it is kept and who else receives it #
On your own device and on BreedMap's own server in the EU. A small number of service providers help run the service: one relays the traffic and protects the service, one sends the service's emails, the push services of the device platforms deliver push notifications, and an external sign-in provider receives data only if you sign in with it. Some of them are outside the EU/EEA, with safeguards such as the EU-U.S. Data Privacy Framework or standard contractual clauses. The Privacy Policy names them.
Service emails may contain a technical means that tells the email provider whether an email was opened; this is not used for advertising or analytics. BreedMap does not use advertising, third-party analytics or crash reporting, and does not sell your data.
Photos and locations #
The exact location of a photo stays private in your own workspace. Anything shown to others uses a location rounded to about 1 km. When you add a photo, "Shared photo details" lets you untick details that must stay private. You can also blur parts of a photo ("Blur parts…"). Uploaded photos may be scanned automatically, including with artificial intelligence, for the purposes of the service, such as species identification and content checks. See Photos, videos and documents.
Shared analytics #
Once enough data has accumulated, BreedMap intends to analyse breeding lines and breeding efficiency from all users' data in anonymised or aggregated form, so that no individual can be identified. You can object to this. There is no automated decision-making or profiling with legal or similarly significant effects.
Cookies #
The service itself sets no cookies. It uses only needed storage: the keychain or session storage to keep you signed in, local storage for interface preferences such as the theme, and, in the browser, an encrypted local copy of your data. The service that relays traffic sets security cookies to protect it. This website stores only your theme choice in your browser.
Kid accounts #
A person under 15 can only have a kid account, added by a guardian aged 18 or over. The guardian exercises the child's data protection rights until the child turns 15; the account then becomes a normal account after a notice 30 days before. See Kid accounts and guardians.