Privacy policy

Last updated: 2026-06-13

MVP draft requiring human review before public cutover. This text is not legal approval.

Atopa is built to help lost items get home while keeping owner personal details off public found pages.

Data we collect

Owners provide account details and tag information. Finders may submit a name, contact method, and recovery message when they choose to help return an item.

No public owner personal details

Public found pages do not show owner email, phone, address, private tag label, internal IDs, or account links.

Finder contact use

Finder contact details are used to deliver the recovery message to the owner and to support moderation or abuse review when needed.

Cookies and sessions

Atopa uses essential session cookies for account and form security, including CSRF protection. Public found pages do not require a finder account.

Backups and retention

Production backups are planned as encrypted PostgreSQL dumps with limited retention and restore rehearsal before launch.