Privacy Policy (GDPR)

The controller is the Service Operator (operator serwisu Tulisko). For data-protection matters, contact the email in the site footer.

Account data (auth identifier, email, name) - to create and run the account and authenticate. Basis: performance of a contract (art. 6(1)(b)).

User content and media - to provide the service. Basis: contract and legitimate interest (art. 6(1)(b) and (f)).

Payment and billing data - to fulfil purchases and accounting duties. Basis: contract and legal obligation (art. 6(1)(b) and (c)).

Lost/found reports with approximate location - to run the feature; the location is deliberately rounded for privacy. Basis: consent or legitimate interest.

GPS walk tracks recorded at your request - solely to run the walk-recording feature; tracks are private by default (visible only to you) and can be deleted at any time. If you choose to publish a walk, the public version of the track is automatically trimmed by a privacy zone around its start and end (address protection), and you can unpublish at any time. Basis: performance of contract (art. 6(1)(b)).

Watched alert areas (manually chosen map cells) - to send lost-pet notifications for those areas; you pick the areas yourself and can remove them at any time. Basis: performance of contract (art. 6(1)(b)).

Your browser location, if you allow it in the browser prompt - only to work out which country the catalogues should open on. The coordinates are processed in memory for a single request and are never stored or logged; only the two-letter country code is remembered (the tulisko_country cookie). You can withdraw the permission in your browser settings at any time and clear the remembered country in the cookie settings. Basis: consent (art. 6(1)(a)).

Technical data (hashed IP, security logs) - for security and abuse prevention. Basis: legitimate interest (art. 6(1)(f)).

Optional consents (e.g. AI processing, email marketing) - only on separate consent (art. 6(1)(a)), which can be withdrawn.

Providers necessary to run the service: authentication provider, payment operator (Przelewy24/PayPro), transactional email provider, hosting infrastructure - under data-processing agreements.

If you use AI features, materials may be processed by a model provider in the EU region; see the AI processing document.

By default data is processed in the EU/EEA. Any transfer outside the EEA occurs only with appropriate safeguards (e.g. standard contractual clauses).

Account data - while the account exists; after deletion it is erased or anonymized, except data we must keep (e.g. accounting records under tax law).

Security logs and hashed IPs - for a limited period necessary for security.

Moderation report data - per the retention policy; the reporter is anonymized after closure and the retention window.

You have the right to: access, rectification, erasure ("right to be forgotten"), restriction, data portability, and objection.

For consents - you may withdraw at any time, without affecting the lawfulness of processing before withdrawal.

The Service provides a data export (machine-readable copy) and account deletion from settings.

You may lodge a complaint with the President of the Personal Data Protection Office (PUODO).

The Service uses cookies and similar technologies. Details and consent management are in the Cookie Policy.

We apply technical and organizational measures appropriate to the risk, including encryption of sensitive data and access control.

Providing account data (auth identifier, email) is a requirement necessary to enter into and perform the contract - without it you cannot create an account or use features that require signing in. Billing data is required if you want an invoice.

Optional data (e.g. content, approximate location in reports, AI/marketing consents) is voluntary; not providing it only means no access to that feature.

We do not make decisions about you based solely on automated processing (including profiling) that produce legal or similarly significant effects. Moderation and enforcement decisions (hiding/removing content, suspending accounts) are made by a human; automated tools may only pre-flag content for review.

Service and product rankings are based on aggregated community ratings, not on profiling of you as an individual.