Privacy & GDPR notice

Last updated 10 June 2026

myturtle.cc is a private record keeper for turtle owners. This notice explains what personal data we collect, why, how we protect it, and the rights you have under the EU General Data Protection Regulation (GDPR). We aim to collect as little as possible and to keep it only for as long as it is useful to you.

1. Who is responsible for your data

The operator of myturtle.cc is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact us at privacy@myturtle.cc.

2. What we collect

Account data

• Username and email address — to identify your account and for sign-in, recovery and security notices.
• Password — stored only as a salted one-way hash; we never see or store the plain text.
• Passkeys — public-key credentials for password-free sign-in. We store the public key and a label you choose; the private key never leaves your device.
• Sign-in metadata — last-login time, and limited security logs (IP address and timestamps of sign-in/registration attempts) kept to prevent abuse.

Content you add

• Animal records — the turtles you register and their care timeline (notes, vet visits, medication, weights, breeding records, etc.).
• Photos — images you upload, including any date/EXIF information contained in the file.
• Documents — details used to generate printable vet letters.

We do not use tracking or advertising cookies. The only cookie set is a strictly necessary session cookie that keeps you signed in.

3. Why we use it (lawful bases)

• Performance of a contract — to provide the service: your account, your records and photos.
• Consent — for optional content you choose to add, such as photos. You may withdraw consent at any time by deleting that content.
• Legitimate interests — to keep the service secure and prevent abuse (e.g. rate-limiting and security logs).

4. Where your data is stored

Your data is hosted on servers located in the European Union. Your records and photos are scoped to your account and are not visible to other users. We do not sell your data and do not share it with third parties for their own purposes.

We use a limited number of processors strictly to run the service — for example a transactional email provider to send you account and confirmation messages. Any AI-assisted features (such as turning a typed note into structured care entries) send only the text you submit for that feature and are used solely to return the result to you.

5. How long we keep it

We keep your account and content for as long as your account is active. When you delete a photo, record or your whole account, the corresponding data is removed from our database and the underlying image files are deleted from disk. Security logs are short-lived and rotated. Backups, if any, are overwritten on a rolling basis.

6. Your rights under the GDPR

You have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (you can edit most of it directly in Settings and the app).
• Erasure — delete your data or your entire account ("right to be forgotten").
• Restriction and objection — limit or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these, email privacy@myturtle.cc. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority.

7. Security

We protect your data with industry-standard measures: encrypted connections (HTTPS), hashed passwords, passkey support, per-account data isolation, and uploaded files served only through access-controlled endpoints. No system is perfectly secure, but we work to keep your records safe.

8. Children

myturtle.cc is intended for adult pet owners and is not directed at children. We do not knowingly collect data from children.

9. Changes to this notice

We may update this notice from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to you.

Questions about your data? Email privacy@myturtle.cc — we're happy to help you access, correct or delete your information.