Privacy
Lostoo collects the minimum data needed for the service: an email and password for your account, the child's first name or nickname on a label, messages exchanged in the private chat with a finder, and, if you order printed products, your name, postal address and email.
Data collected
- Account: email, password (hashed), preferred language.
- Label: item, child's first name or nickname, message, visual style.
- Finder chat: exchanged messages, location shared if the finder agrees to it.
- Security: the finder's IP address, never stored in plain text (hashed with a secret unique to Lostoo), used only to limit abuse.
- Printed product order: name and delivery address, email, order content (needed to make, ship and invoice the order).
Cookies
Lostoo only uses strictly necessary cookies: the parent's login session, and a conversation identifier for the finder. No advertising cookies or third-party trackers.
Subprocessors
Payments are processed by Stripe, a payment subprocessor, which only receives the information needed for the transaction. Printed product orders are shipped by La Poste, which receives your name and delivery address. Print artwork (the QR code and the child's first name only, never your address or email) is sent to our printing partners to manufacture the batches. Lostoo never shares your contact details with the finder.
Retention and deletion
You can delete your account at any time from "My account". Deletion immediately and permanently erases your labels, your conversations and your personal data. Printed order data (name, address, content) is kept for as long as needed to manufacture, ship and cover the legal warranty, then for as long as our accounting obligations require, before deletion.
Your rights
Under GDPR, you have the right to access, rectify, erase and port your data. To exercise it, write to contact@lostoo.com. You can also file a complaint with the CNIL (www.cnil.fr).