Privacy Policy
Last updated: February 2025
1. Introduction
Lostopedia ("we," "our," or "the Platform") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and how we safeguard it when you use our campus-based lost and found service. By using Lostopedia, you agree to the practices described in this policy.
2. Information We Collect
We collect information you provide directly and information that is generated when you use the Platform.
Information you provide
- Account data: email address, display name, and password (stored securely and hashed)
- Profile data: optional profile information and avatar if you choose to add them
- Item listings: titles, descriptions, categories, locations (including optional map coordinates), dates, and photos you upload for lost or found items
- Messages: content of messages you send through the in-app messaging system
- Reports: if you flag content or report an issue, we store the reason and any description you provide
Information we collect automatically
- Usage data: how you use the Platform (e.g. pages visited, features used) to improve the service
- Device and browser information: such as IP address, browser type, and device type, for security and compatibility
- Cookies and similar technologies: we use session and preference cookies to keep you logged in and to remember your settings
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Platform (including search, matching, and messaging)
- Authenticate your account and manage your profile
- Display your item listings and messages to other users as intended (e.g. to potential finders or owners)
- Send you notifications (e.g. new messages, item expiry) if you have opted in
- Moderate content, investigate reports, and enforce our Terms of Service
- Protect against abuse, fraud, and security incidents
- Comply with legal obligations and respond to lawful requests
- Analyze usage in an aggregated, non-personally-identifying way to improve our service
4. How We Share Your Information
We do not sell your personal information. We may share information in these limited circumstances:
- With other users: your display name, item listings, and messages are visible to other users as part of the service (e.g. when you post an item or send a message)
- Service providers: we use third-party services (e.g. hosting, email, analytics) that process data on our behalf under strict agreements to protect your data
- Legal and safety: we may disclose information if required by law, to protect our rights or the safety of users, or to respond to valid legal process
- With your consent: we may share information for other purposes when you have given clear consent
5. Data Storage and Security
Your data is stored on secure servers with encryption at rest. We use industry-standard practices to protect your account and data from unauthorized access. Passwords are hashed and never stored in plain text. While we take reasonable measures to protect your information, no system is completely secure; you are responsible for keeping your password confidential.
6. Data Retention
We retain your account and profile data for as long as your account is active. Item listings may be automatically archived after recovery or after a set period (e.g. 90 days) as described in our product; extended retention may apply for moderation or legal purposes. Messages are retained to support the messaging feature and dispute resolution. When you delete your account, we delete or anonymize your personal data in accordance with our data lifecycle policy, except where we must retain data for legal or safety reasons.
7. Your Rights and Choices
Depending on your location, you may have the right to:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate or incomplete data (you can also update your profile and listings in the app)
- Deletion: request deletion of your personal data, including by deleting your account
- Object or restrict processing: object to certain uses of your data or request that we limit how we use it
- Data portability: request your data in a structured, machine-readable format where applicable
To exercise these rights, contact us at the email below. We will respond within a reasonable time and in accordance with applicable law. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.
8. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. You can control cookies through your browser settings; disabling certain cookies may affect your ability to use some features (e.g. staying logged in).
9. Children
Lostopedia is not intended for users under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.
10. International Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place so that your data remains protected in line with this policy and applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may provide additional notice (e.g. by email or a notice on the Platform). Your continued use of Lostopedia after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, to exercise your rights, or to report a concern, please contact us at lostopedia@gmail.com.