How Fresh Haven handles account and browsing data.

When you register, we store the email address, its normalized form, account status, creation time, and recent sign-in time. The email remains unverified and the account must not be used for sensitive information, payments, or administrative access.

A dog profile stores a name, optional published breed ID, size, life stage, energy level, chewing strength, default play goal, default use case, and which dog is the default. We deliberately do not provide fields for health conditions, diseases, medications, precise location, or free-text medical history.

Signed-in accounts may also store product IDs for saved products and the two product IDs in a recent comparison. Product facts stay in our reviewed catalog and are not copied into your account records.

Before sign-in, versioned local browser storage can retain up to five dog profiles, 100 saved products, and 20 recent comparisons. It is not an advertising cookie and remains on that browser unless you clear it or browser storage is removed.

After sign-in, Fresh Haven attempts an idempotent sync. Saved products are combined, duplicate comparisons and dog client keys are removed, and account limits are applied. Server data is retained first when a limit is reached; any item that could not sync stays in that browser with a notice.

Account personalization remains until you remove individual items, use Clear personalization, or delete the account through an available account-deletion process. Clear personalization deletes dog profiles, saved product IDs, and comparison history from the account and this browser without deleting the account. Database relationships are configured to remove personalization rows when an account is deleted.

We never store the password itself. We store a salted, versioned scrypt password hash, the password update time, hashed verification answers, hashed network and browser-binding values, and hashed rate-limit keys. Failed authentication events are retained temporarily for abuse prevention.

Session tokens are stored only as hashes. Sessions expire after 30 days unless they are signed out earlier. Changing a password revokes older sessions and creates a fresh session for the browser completing the change.

Necessary cookies support verification and sign-in. A separate cookie remembers that you accepted the cookie notice. Fresh Haven does not currently use advertising or analytics cookies, and this update does not add an analytics service.

Standard security and reliability logs may include request time, browser information, and network information. Logs must not contain passwords, password hashes, verification answers, session tokens, authentication secrets, or full email addresses.

Official source and manufacturer links lead to third-party websites with their own privacy practices. Review those policies before sharing information with them.