Privacy at Little Window
A clear view of how information is cared for.
This notice explains how personal information is used when dog owners receive care updates, open private or public journal pages, leave a moderated Little Note, or use a Little Reaction.
- Version
- 0.2
- Effective date
- 20 September 2026
01Who we are
Data controller: Feixuan Yang
Privacy contact: 2580005663a@gmail.com
Little Window is a small pet-care journal. Rover remains the separate booking, payment and messaging platform; Little Window does not replace it.
02Information we use
- Owner and booking information handled outside Little Window: details needed to arrange and deliver care through the booking or messaging service.
- Dog and care information in Little Window: dog name, photograph, breed or age where supplied, care dates and type, care updates, Little Things and an administrator-only internal reference.
- Photographs and journal material: photographs, captions, summaries and observations selected for the owner's journal. A photograph may incidentally contain a person or identifying background detail, so it is reviewed before publication.
- Little Notes information: the note text, its moderation state and submission time. A short-lived server-secret hash derived from limited request information is used privately to slow spam and detect rapid duplicates; the raw network address is not placed in a Little Note row or shown publicly.
- Technical and security information: request and security records needed to operate, protect and troubleshoot the service.
- Little Reactions information: a random browser identifier, its server-secret HMAC, the canonical content target, Like or fixed emoji code, and aggregate counts.
Little Window is not intended to hold owner addresses, emergency contacts, veterinary or medical records, medication, payment data, or Rover conversations.
03Why we use information
- To arrange, provide and document pet-care services.
- To give an owner a reassuring journal of photographs and ordinary moments.
- To receive and moderate optional anonymous Little Notes on eligible public dog profiles.
- To preserve required care records and respond to legal or regulatory requests.
- To keep private links, administrator access, backups and the service secure.
- To show aggregate affection on eligible content when Little Reactions is enabled.
- To handle privacy requests, complaints and service support.
04Lawful bases
The basis depends on the purpose. Information necessary to arrange and deliver requested care is generally handled for a contract or steps requested before a contract. Records required by applicable licensing or other law are handled for legal obligation. Proportionate service security, continuity, fraud prevention, private-link delivery and low-impact aggregate reactions may rely on legitimate interests after the controller documents necessity and balances those interests against people's rights.
Optional publication is agreed separately with the owner for each purpose and can be changed later. A Public administrator setting is never treated as evidence of permission, and one publication choice is not a blanket agreement to another. Privacy information and consent are different: reading this notice is not consent, and Little Window does not use a global “I agree” checkbox.
05Private pages and random links
A Private Link uses a long random URL and is excluded from public discovery. Anyone who receives or forwards that link may be able to open it, so owners should treat it like a private invitation rather than a password. Hidden content is unavailable publicly. Dog and care pages ask search engines not to index them, but a robots instruction is not an access-control guarantee.
06Public content
Public dog profiles or care material can be visible without a private link and may be shared or copied by visitors. Little Window publishes only content selected for that purpose and never displays the administrator-only internal reference.
Public Profile, Previously with us, Public Little Things, Current Guest display, Little Reactions and social-media use are separate choices. Public Profile permission alone does not permit any of the others. Current Guest is off unless specifically chosen and never reveals an owner's absence reason, address, identity or private care schedule. Social media is separate from the website and is off unless specifically chosen.
Owners can use a personal Privacy Choices link supplied by Little Window, or contact the controller, to grant, decline or withdraw an optional use. Withdrawal stops the relevant Little Window public display while required care or licensing records may still be kept privately. For external social-media material, withdrawal creates a manual removal review; Little Window does not claim another platform can be erased automatically.
07Little Notes
A visitor may leave a short plain-text note on an eligible public dog profile. Notes are labelled as anonymous, accept no links or formatting, and remain private while pending. The administrator may approve, reject, hide or move them to Trash; only approved notes are shown publicly.
Visitors should not include names, contact details or other personal information. Little Window does not publish a sender identity, email address or network address. Limited request information is converted immediately into a server-secret hash for rate limiting and duplicate detection, retained for about 24 hours, and never used as general administrator authentication.
To ask for an approved note to be removed, contact the privacy address above and identify the dog and wording without sending unnecessary personal information.
08Little Reactions
Eligible photographs, Little Things, daily notes, care summaries and meaningful care moments may accept one heart Like and one active fixed emoji from each browser. Choosing another emoji replaces the previous one; choosing the active emoji removes it. The public service shows aggregate counts and the current browser's own selection only.
No name, avatar, email, free-text comment, people list, reaction timestamp or public identity is shown. The identifier is pseudonymous rather than guaranteed anonymous: the browser holds a random first-party value and the database stores a server-secret HMAC. Counts do not affect search, homepage order, Featured status, eligibility or rankings.
The dog owner's permission for reactions and a visitor's permission to use browser storage are separate. While the storage assessment requires consent, the first reaction attempt opens a just-in-time choice. No reaction identifier is created and no reaction is submitted unless the visitor chooses Allow and react.
Clearing browser data removes the browser's remembered identity but does not immediately subtract its old aggregate reaction. A later reaction may therefore be treated as coming from a new browser identity.
You can also withdraw the browser-storage choice on this device with the control below. It removes the first-party identifier from this browser; existing aggregate counts are not immediately recalculated.
11International transfers
The production provider review must identify where every processor stores or accesses information. If personal information is transferred outside the UK, the controller will use an applicable adequacy regulation, UK International Data Transfer Agreement or Addendum, or another lawful safeguard, and will complete any required transfer-risk assessment. No transfer mechanism is claimed here until that provider and safeguard review is complete.
12How long information is kept
| Record | Working retention rule |
|---|---|
| Care and licensing records | At least 3 years where England home-boarding licensing rules apply; otherwise reviewed after 3 years. England home-boarding licence records must be kept for at least 3 years where that rule applies. |
| Journal photographs, notes and Little Things | At least 3 years where England home-boarding licensing rules apply; otherwise reviewed after 3 years, then reviewed for deletion or a justified longer record. |
| Little Notes | Pending and moderated notes are kept for moderation and removal history until reviewed; short-lived hashed anti-abuse counters expire after about 24 hours. |
| Little Reactions identifier and rows | Browser identifier about 12 months; interaction rows reviewed around 12 months after the last activity, subject to deletion and aggregate-integrity procedures. |
| Security and audit records | 90 days, unless needed longer to investigate a security event. |
| Trash | 30 days before reviewed permanent deletion. Soft-deleted records are private while recovery is possible. |
| Backups | 90-day rotating backup window. Rotation is administrator-reviewed rather than automatic, and deletions may remain in protected backups until rotation completes. |
13Your Little Window choices
- Use the personal Privacy Choices link supplied by Little Window to answer Yes or No separately for a personal care journal shared through a private link, Public Profile, Previously with us, Public Little Things, Current Guest display, Little Reactions and social media. Nothing is preselected.
- Ask for a fresh management link whenever you want to grant, decline or withdraw a choice; submitted links are read-only and cannot be replayed to edit choices.
- Ask for a photograph, caption, profile detail or care summary to be corrected or removed from public view.
- A personal-link journal is not listed publicly, but anyone who receives a valid link may potentially view it. Do not forward the link, or ask for the page to be Hidden if it has travelled further than intended.
- Use the active Like or emoji again to remove that browser's selection. Clearing browser data stops the browser remembering it but may not immediately alter the stored aggregate.
14Your data-protection rights
Depending on the circumstances, UK data-protection law may give you rights to be informed, access your personal information, correct it, erase it, restrict its use, object, and receive portable information. Some rights are limited where information must be kept by law or is needed for legal claims. You can also withdraw consent where consent is the basis, without affecting earlier lawful use.
To make a request, email 2580005663a@gmail.com. The controller may need enough information to verify the request without exposing another person's private journal.
15Questions and complaints
Please raise a concern with the controller first so it can be investigated. You can also complain to the UK Information Commissioner's Office. Visit the ICO complaint service for current routes and guidance.
16Changes to this notice
The version and effective date at the top change when this notice materially changes. A prominent message will be used where a change would reasonably surprise owners. Historic versions should be retained internally for accountability.
Current version: 0.2. Effective date: 20 September 2026.