Privacy Policy

Who handles your information

FeetList operates from Delaware, United States. Contact FeetList about personal information through the Contact page. You can use the Content Removal form for a privacy concern without creating an account.

The public catalogue

The catalogue contains editorially reviewed names, photographs and any verified profile facts. Private import records document the publication basis. Publication eligibility and permission are reviewed before an image becomes public.

Member accounts and contributions

Accounts use a private email address, display name, password hash and essential session cookies. Email verification and password reset links are time limited. We do not publish member emails or passwords. Cloudflare Turnstile processes browser and network signals to protect registration and uploads; keyed account and network counters limit abuse.

Submitted images, captions, credits, permissions confirmations and moderation decisions are stored privately. Only the contributor and authorized administrators can see unpublished submissions. Approved images and their chosen public aliases or captions may appear publicly. Embedded location and other image metadata is removed before review. Review records identify the reviewer and decision time.

Unfinished uploads expire after 15 minutes. Unprocessed upload files are removed after about one day. Rejected image files are retained for 30 days for review questions, then deleted; submission status and minimal moderation records may remain to prevent abuse. Account records are kept while the account is used, or as needed to address a dispute or deletion request. Contact us to request account or image removal.

Data used for support

Removal requests contain your contact email, relationship to the subject or rights holder, affected identifiers, explanation, and optional name and evidence links. These records are private and are used to assess and respond to your request.

Your email is needed so we can respond. An optional name and evidence links help us assess a concern. Send only what is necessary; do not include passwords, identity documents or unrelated sensitive information in the form.

How we use information

We use information to operate the editorial catalogue, review corrections and removal requests, respond to enquiries and protect the service against abuse. We may also keep information necessary to handle a dispute or meet an applicable legal obligation.

Service providers and logs

The service uses Vercel for application delivery, Supabase for PostgreSQL, Cloudflare for public image delivery, private storage and email delivery. Infrastructure logs can contain network information. Logs are limited and redacted where configurable.

Private requests are accessible only to authorized operators and the providers needed to store and deliver them. We do not sell requester information. Provider processing may occur in the United States and other countries where these providers process information.

Optional Google Analytics

With your permission, FeetList uses Google Analytics to understand page visits and improve the website. Analytics can process a cookie identifier, page paths, device and browser information, and approximate location derived by Google from your network connection. Google processes this information as our analytics provider. Analytics scripts are blocked until you choose Allow analytics; declining does not affect browsing.

We exclude URL queries, fragments and support-form contents from our page-view events. Advertising features and Google signals are disabled. You can change or withdraw your choice using Cookie settings at the bottom of any page. Your choice and analytics cookies expire after at most 180 days. Withdrawal stops further collection in that browser and removes FeetList analytics cookies; it does not automatically erase information Google has already received.

Learn more about Google's processing of information from partner sites. FeetList does not use advertising scripts or public member directories. Support anti-abuse controls use a short-lived keyed network identifier, normally retained for at most 24 hours.

How long information is kept

We delete or anonymize support records 90 days after resolution, unless an active dispute requires longer. Expiring encrypted backups can retain earlier copies within their retention window, which is no longer than three months.

Restores apply the current removal history before content is exposed. Minimal withdrawn-content identifiers may be retained to prevent removed material from being republished. The 90-day support period is our operational retention period, not a claim that the law requires every request to be kept for 90 days.

Your privacy rights

Subject to applicable law, you can request access, correction, erasure or restriction of your personal information, object to processing, and request data portability where that right applies. Contact the operator through the support channel. We may request proportionate information to verify a request and respond within the legally required time limits.

Depending on your location and the law that applies, you may also be able to raise a concern with a state privacy regulator or another competent authority. This policy does not limit rights available under applicable law.