Privacy policy

What we collect

We collect your account email, display name, securely hashed password, verification records, report text and photos, approximate location, private ownership clues, chat content, reports of abuse, saved items and searches, in-app activity notifications, and contribution records. We use short-lived rate-limit records derived from a keyed hash of your network address. Hosting providers may separately retain operational access logs.

What other people see

Public listings display the item information, approximate area and rounded map coordinates, date, images, and email-verification status. They do not expose your email address, account name, user identifier, or private ownership clue. Only approximate coordinates are stored for listings. Photograph backgrounds and written descriptions can still reveal a location: review them carefully.

Public discovery

Public category pages can appear in search engines. Individual report pages are excluded from indexing by default; the operator can enable report indexing after privacy review, except for documents and medical items. Noindex is a search-engine request, not access control. People may copy public descriptions and photos. Removed reports become unavailable, but external copies or search caches may persist.

Private conversations and consent

Only the participants can normally read a conversation. Choosing “Share my email” explicitly reveals your email to that participant and creates a consent record. You can also choose what to disclose in your messages. Once disclosed, the recipient may retain or copy it; it cannot be made unseen. Reported conversations may be accessed by authorised moderators for abuse investigation. Messages and ownership clues are encrypted in server storage; chat is not end-to-end encrypted.

Photos and automated screening

The service re-encodes accepted photos to remove embedded metadata. Before publication, report text and photos may be sent to OpenAI for safety and relevance screening. We do not include your account email, private ownership clue, or chat history in that listing-screening request. Provider processing and international transfers are governed by the provider's current terms and the operator's configuration. Automated screening is fallible; human review is available.

Maps, email, and contributions

Opening a map requests tiles from the configured map provider, which may receive your IP address and the viewed map area. Place searches are relayed through our server to the configured geocoder. We request device location only after you choose that action. Verification and reset emails are processed by our email provider. Stripe hosts contribution checkout and handles card information; Reunite does not receive or store your full card number. Third-party services have their own privacy notices.

Cookies and tracking

We use an essential session cookie to keep you signed in and protect requests. Analytics and advertising are off by default. If enabled by the operator, optional Google Analytics/Tag Manager and AdSense tools can process network/device information on anonymous public pages after the relevant privacy choice. They are not loaded on signed-in, authentication, messaging, reporting or admin screens. Review the operator’s cookie notice and configured provider policies. Privacy preferences are kept locally for up to six months and can be changed through Privacy choices. Saved searches, bookmarks and activity notifications are stored in your account. Notifications contain status updates and internal links; private message contents are not copied into notification previews. Device location is not used for background tracking.

Retention and your choices

Account settings let you export your account data, remove listings, and delete your account. Deletion removes your public reports, uploaded images and your stored messages, anonymises the account, and invalidates access. Limited fraud, security, report and payment records may remain where reasonably necessary or legally required. Scheduled maintenance removes expired tokens, orphaned uploads, and old inactive report content under the operator's retention settings; the default is 365 days. Private conversations are removed 365 days after their last activity by default. Backups follow the operator's documented backup retention.

Contact and requests

Use Contact & support for privacy requests, corrections, access concerns, complaints, or appeals. You may also have rights under local law. Service is intended for adults, and is not designed to collect information about children. Do not upload images of children or identify vulnerable people in listings.

Account security and abuse review

We store encrypted authenticator setup secrets, hashed single-use recovery codes, session records with approximate browser labels, and security events with hashed network/account identifiers. These support account protection, sign-in notices and abuse investigation. Scheduled maintenance removes security events after 30 days and expired session history after 30 days. Appeals contain your explanation and the moderator decision. Safety records may contain similarity hashes and screening flags. Do not submit sensitive documents or passwords in appeals. When enabled, Cloudflare Turnstile receives challenge tokens and network information on protected account forms. Public listing text and photos may be sent to the configured AI screening service; private ownership clues and chat messages are excluded from that AI screening. Backups and external providers may have separate retention periods.

Policy version: 27 October 2026