Privacy Policy
Last Updated: May 8, 2026 | Effective Date: May 8, 2026
OnlyCats (“we,” “us,” “our”) operates the website onlycats.vip (the “Service”). This Privacy Policy explains how we collect, use, and protect your personal information.
We are based in the Czech Republic (European Union) and serve users worldwide. This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), the UK Data Protection Act 2018, Brazil's LGPD, Canada's PIPEDA, and other applicable data protection laws.
1. Data Controller
OnlyCats
onlycats.vip
Czech Republic, European Union
Contact: onlycatssupport@gmail.com
2. Information We Collect
Information You Provide
When you create an account:
- Email address
- Display name (if provided)
- Profile photo (if using Google Sign-In)
Information Collected Automatically
When you browse the Service:
- Usage data: Content viewed, items favorited, scroll and click activity, time on page
- Device data: Browser type and version, operating system, screen resolution, device type
- Network data: IP address, approximate geographic location (city/country level), referring URL
- Cookies and similar technologies: See our Cookie Policy
Information from Third Parties
Google Sign-In: If you log in via Google, we receive your name, email, and profile photo as authorized by you during the Google consent flow.
3. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Operate and provide the Service | Contract performance (Art. 6(1)(b)) |
| Authenticate your account | Contract performance (Art. 6(1)(b)) |
| Personalize your feed | Legitimate interest (Art. 6(1)(f)) |
| Save and display your favorites | Contract performance (Art. 6(1)(b)) |
| Display advertisements via Google AdSense | Consent (Art. 6(1)(a)) |
| Analyze usage to improve the Service | Legitimate interest (Art. 6(1)(f)) |
| Detect and prevent abuse or fraud | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
We do NOT sell, rent, or trade your personal information to anyone.
4. Advertising
We use Google AdSense to display advertisements. Google may use cookies and similar technologies to serve ads based on your browsing activity.
- Opt out of personalized ads: adssettings.google.com
- Your Online Choices (EU): youronlinechoices.eu
- Digital Advertising Alliance (US): optout.aboutads.info
5. Who We Share Information With
We share information only with service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | US / EU |
| Vercel | Website hosting | US / Global |
| Cloudflare | DNS and security | US / Global |
| Advertising, authentication | US |
6. Cookies
We use cookies and similar technologies. For full details, see our Cookie Policy. You can manage preferences via the Cookie Settings link in our footer.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (email, name) | Until you delete your account |
| Usage data (views, interactions) | Retained as long as necessary to improve the Service, then deleted or anonymized |
| Favorites | Until removed or account deleted |
| Server logs (IP, access) | 90 days |
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), database-level access controls, row-level security policies, and secure authentication protocols.
9. International Data Transfers
We are based in the EU and use service providers globally. Transfers are protected by the EU-US Data Privacy Framework, EU Standard Contractual Clauses (SCCs), and UK International Data Transfer Addendum.
10. Your Rights
For All Users Worldwide
- Access your personal data
- Correct inaccurate data
- Delete your data
- Withdraw consent for optional processing at any time
EU/EEA/UK Residents (GDPR)
Data portability, restriction of processing, right to object, lodge a complaint with your national DPA. For Czech residents: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7.
California Residents (CCPA/CPRA)
Right to know, delete, opt out of sale/sharing (we do NOT sell), non-discrimination, correction, and limit use of sensitive personal information.
Categories sold or shared: None.
How to Exercise Your Rights
Email: onlycatssupport@gmail.com
11. Children's Privacy
The Service is not directed to children under 13 (US, per COPPA) or under 16 (EU, per GDPR). We do not knowingly collect personal information from children below these ages.
12. Global Privacy Control
We respect the Global Privacy Control (GPC) signal. If your browser transmits a GPC signal, we treat it as a valid opt-out of non-essential data processing.
13. Changes to This Policy
We may update this policy from time to time. Material changes will be posted on the Service with an updated “Last Updated” date.