Privacy notice

LAST UPDATED 2 OCTOBER 2026

This notice explains what information this website collects, why, and what we do with it.

Who we are

[set SHOP_BUSINESS_NAME], [set SHOP_BUSINESS_ADDRESS], is the controller of your personal data. Contact us about privacy at our contact form.

What we collect and why

Photos you submit for verdict

When you submit a photo, your browser shrinks it and sends it to our server. Our server passes it to Google’s Gemini AI service, which writes the verdict. We don’t keep your photo after the verdict is done. Google processes it under its terms for paid API customers, which don’t allow it to be used to train Google’s models. We do this because you asked us to (our legitimate interest in providing the service). Please don’t submit photos of people who haven’t agreed to it.

Shared cards

If you press “Share the verdict”, we save your verdict card (which includes your photo), a preview image and the verdict text on our server, and publish them at a link. Anyone with the link can see them. We keep shared cards until you ask us to delete one. Email our contact form with the link.

Hotbeds of Feline Malice

If you choose to add your cat to the map, we publish its shared card (see above) on the public map at /map, grouped under your postcode area (the letters at the start of your postcode, e.g. “GU · Guildford”). We store the first half of the postcode you type (e.g. “GU7”) but only ever show the area, never the district, and we never ask for or keep your full postcode or address. We do this because you asked us to. We keep the entry until you ask us to remove it. Email our contact form with the card’s link and we’ll take it off the map (and delete the card, if you like).

“Notify me” emails

While the gift shop isn’t taking orders, you can leave your email address on a product to hear when it can be ordered. We store the address, the product and the date, and use them only to send you that one message (with your consent, which you can withdraw at any time). We don’t add you to any mailing list or pass your address on. We delete the list once we’ve sent the message, or sooner if you ask: email our contact form.

Messages you send us

If you use the contact form, we keep your name (if you give it), email address, the topic, any order number or link you include, and your message, so we can reply and deal with your request (our legitimate interest in answering you). We delete messages once they’re dealt with, and in any case within 12 months, unless they relate to an order, in which case we keep them with the order records.

Orders from the gift shop

When you buy something, we collect your name, delivery address and email address (and phone number, if you give it), together with your order and the artwork made from your photo. We need these to take payment, make and deliver your order, and deal with any problems (performing our contract with you). We keep order records for six years for tax and accounting. We delete the print file 12 months after your order, so we can reprint anything faulty until then.

Technical information and visit counts

To stop misuse, our server briefly holds your IP address in memory to limit how many requests one connection can make. It is discarded within an hour. Our hosting provider may also keep standard server logs.

We count how the site is used (for example, how many verdicts were made each day, how many cards were shared and which products were looked at) as simple daily totals. We also count, as daily totals, where visits come from (the referring site or app, or a campaign tag in the link), whether a phone or computer was used, and your device’s timezone (e.g. “Europe/London”) as a rough guide to which country visitors are in. We don’t look up your location from your IP address. To count unique visitors without cookies, we combine your IP address and browser type with a random value that changes every day and keep only a scrambled fingerprint of the result. That random value and the fingerprints are deleted when the day ends, so visits can’t be linked across days or traced back to you. We do this in our legitimate interest in understanding how the site is used. We use no third-party analytics.

Tip jar and affiliate links

The results page may show a “Fund the Tribunal” tip link and products or insurance offers marked as ads. These are affiliate links: if you buy, we may earn a commission at no extra cost to you. When you click one, we count the click (as a daily total) and send you to the other company’s site, which has its own privacy policy and may use cookies to record that you came from us. Any tip is taken by the tip service, not by us directly.

Where shared cards are seen

When a card’s link or picture is loaded by another app or website (for example a messaging app building a link preview, or a forum showing the picture), we count it by the name of that platform or website, as a daily total. We don’t record who viewed it.

The register of the Pardoned

If you choose to buy your cat an Indulgence with a tip, you give us the email address you’ll use on Ko-fi, and we publish your cat’s charge sheet (as with sharing), a small square copy of its photo, its name and its Indulgence on the public register of the Pardoned. Ko-fi tells us about each tip: the amount, the name you gave Ko-fi and your email address. We use the email only to match the tip to your cat. We don’t store it as written: we keep a one-way code made from it, which is deleted after 24 hours (for your Indulgence request) or 7 days (for a tip we couldn’t match). We keep the name and amount of an unmatched tip for those 7 days so we can sort it out by hand if you contact us. To paint your cat’s Official Portrait, we also keep a copy of your full photo privately and send it to an AI image service, OpenAI or Google’s Gemini, which may also check the likeness. We keep the painting with the Indulgence, and the full photo only for repainting it; neither is used for anything else. The Indulgence itself shows your cat, never you. To have an Indulgence removed, use the contact form.

Who we share it with

• Google (Gemini API) analyses photos to write the verdict. Our pages also load fonts from Google Fonts, so Google receives your IP address when you visit.
• Stripe takes payment and sends your receipt. Stripe handles your card details; we never see them.
• Prodigi and its print labs and couriers make and deliver your order. They receive your name, address, contact details and the artwork.
• OpenStreetMap supplies the background map on the Hotbeds of Feline Malice map page, so it receives your IP address when you view that page.
• Our hosting provider stores the website, shared cards, map entries, “notify me” emails, contact messages and order records.

Some of these companies process data outside the UK, for example in the US or wherever your order is printed. When they do, the transfer is protected by UK adequacy regulations or approved contract clauses.

We don’t sell your data, and we don’t use it for marketing.

Cookies

This site doesn’t use cookies or third-party analytics. Stripe’s checkout page uses its own cookies to process payment and prevent fraud.

Your rights

You can ask us for a copy of your data, or ask us to correct it, delete it, restrict how we use it or object to our use of it. Email our contact form. We’ll reply within one month. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Age

You must be 18 or over to place an order.