Privacy Policy

1. What We Collect

Pet Data Station is designed to minimize data collection. We collect the following:

• IP address — for rate limiting (tiered 30–60 req/min) and abuse detection. Stored in access logs with a 30-day retention window.
• User-Agent string — for distinguishing AI crawlers (GPTBot, ClaudeBot, CCBot, etc.) from browsers. Not linked to any user identity.
• Request path and timestamp — for rate-limit counters and analytics. No request bodies are logged.
• Honeypot trigger events — when a client requests blocked endpoints (/api/v1/all, /api/v1/dump, /admin), we log the IP and User-Agent. These logs are retained for 90 days to identify abusive scrapers.
• Voluntary feedback submissions — if you (or your AI agent) POST to /api/v1/feedback or call the MCP submit_feedback tool, we store the submitted message body, optional topic/source references, declared agent name, IP and User-Agent, so maintainers can review the request. Never publicly rendered, never shared, never auto-ingested into published data; retained until the request is resolved.

We do NOT collect: names, email addresses, account credentials (there is no account system), cookies for tracking, third-party analytics (no Google Analytics, no Plausible, no Sentry), or any personal data beyond IP. Request bodies are never logged — except voluntary submissions to the feedback mailbox described above.

2. Why We Collect It

• Service operation — rate limiting prevents abuse; honeypot blocking protects the dataset from bulk extraction.
• Abuse detection — IP and User-Agent logs let us identify and block scrapers attempting to dump the entire database.
• Aggregate statistics — total request count, popular endpoints, geographic distribution (city-level via IP geolocation, never name/address).

We never sell, rent, or share data with third parties. There is no advertising network integration.

3. Cookies

We do not use cookies. The site is fully functional without cookies. No session cookies, no analytics cookies, no advertising cookies.

4. Third-Party Services

The site is hosted on a Seoul-based VPS (Tencent Cloud lightweight server, 43.128.146.212). The hosting provider may have their own logging policies; we recommend consulting Tencent Cloud's privacy policy for hosting-layer data handling. We do not embed third-party scripts, fonts, or analytics.

5. Data Retention

• Access logs (IP, User-Agent, path, timestamp): 30 days, then deleted.
• Honeypot trigger logs: 90 days for abuse investigation, then deleted.
• Rate-limit counters: held in memory only, not persisted.
• Backups: none. Logs are not backed up to a second location.

6. Your Rights (GDPR / CCPA / PIPL)

Since we only store IP addresses (which under GDPR are personal data), you have the right to:

• Access — request a copy of any logs we hold that contain your IP.
• Deletion — request deletion of your IP from active logs.
• Objection — object to processing. We will honor opt-out requests for legitimate users; abusive scrapers may be blocked without notice.

To exercise any of these rights, contact contact@petforai.com. We respond within 14 days.

7. Children's Privacy

Pet Data Station is not directed at children under 13. We do not knowingly collect data from children. The data (pet food regulatory standards) is not of interest to children and our access logs do not distinguish age.

8. International Transfers

The site is hosted in Seoul, South Korea. If you access from the EU, China, or California, your IP will be transmitted to and processed in South Korea. We rely on standard contractual protections; no special categories of personal data are processed.

9. Changes to This Policy

Material changes will be reflected by updating the "Last updated" date at the top. Continued use after changes constitutes acceptance. For significant changes, we may announce via the llm.txt file or the site changelog.

10. Contact

For privacy questions, contact contact@petforai.com.