Privacy Policy
Last updated 21 September 2026
This policy explains what personal data Blepper collects, why, who else processes it, and the rights you have. It covers the Blepper mobile app and this website. Blepper is being built for the Netherlands and is designed around a simple idea: the app should know as little about you and about where you go as possible.
Who we are
The data controller is Marked Labs B.V., registered with the Dutch Chamber of Commerce (KvK) under number 66657830. Our registered address can be looked up through the public KvK register using that number.
For any privacy question or to exercise your rights, contact privacy@blepper.app.
Privacy by design
- A scan never stores where you were. When you save a scan, your phone sends where you are. Before anything is saved, our server reduces that position to an approximate area of about 100 metres across. We store only that approximate area and the name of the neighbourhood — never your precise coordinates, and we never write them to our logs.
- Photos are stripped of hidden metadata. When you upload a photo, we re-process it on our server to remove embedded information such as GPS location before it is stored. We keep one detail from it: the day the photo was taken, never the time or the place.
- Your phone checks the photo. Your phone checks whether a photo shows a cat and suggests a coat colour. The photo goes to no other service for this.
- A cat never shows an address. To anyone but you, a cat shows a neighbourhood, a number of scans and the most recent month — never a map, never an area, and never the date of a scan.
- No third-party tracking. This website uses no cookies, no analytics, and no third-party trackers. The app shows no advertising and contains no advertising identifiers. It does count which screens you open and which steps you finish, on our own server and never attached to a cat or a place — and Settings turns that off.
What other people can see
Blepper is shared. A cat is one record that everybody who meets it contributes to, so some of what you add is visible to other people. This is the part worth reading twice.
- Your username is public. It appears with your points on the national leaderboard, and on your profile, which anyone signed in to Blepper can open. To everybody, your profile shows your username, your points and rank, your number of friends and your town. If you choose a town, it also puts you on that town's leaderboard. You choose the username yourself, and we never derive it from your email address.
- Your photos, notes and comments carry your username. Anyone signed in to Blepper can open a cat or a scan and see them. A like shows as a number to everybody, and by name only to the person who made the scan.
- What you say about a cat is counted, not named. The name you use for a cat, the coat colour and coat type you see, and your star rating go into the totals on the cat's page. Nobody else sees which of them are yours.
- A cat you claim shows you as its keeper. If you claim a cat as your own, your username appears on its page, with the details you add about the cat.
- Friends see more. When you and another person accept each other as friends, they see your number of scans and cats, the friends you have in common, and the milestones you reached, each with its day. They also see your own cats, the cats you know with their neighbourhood, and your scans: newest first, but with no date or place on them.
- A scan you spot together goes to each friend in it. If you add friends to a scan, each of them gets that scan too: the photo, the time, the approximate area, the neighbourhood and the points. The names of the group show on the scan to the people in it and to their friends. A friend can add you to a scan in the same way; that scan is then yours, and you can delete it.
- Where you were stays with you. Nobody sees the approximate area of your scans, except the friends you add to a scan. The map in the app marks approximate areas near other people where a cat they have not met was seen recently. A mark carries no cat, no name and no date.
What we collect and why
| Data | Why we need it | Legal basis | Kept for |
|---|---|---|---|
| Email address | To create your account and send your sign-in code | Performance of a contract | Until you delete your account |
| Sign-in session | To keep you signed in. We store no IP address and no details of your phone with it. | Performance of a contract | Expires after 30 days |
| Age confirmation (16 or over) | To record that you passed the age check | Legal obligation | Until you delete your account |
| Your age group and your answers about yourself | To know roughly who uses Blepper, and to suit the app to you. Nobody else sees them. | Legitimate interest | Until you delete your account |
| Username | Shown on the leaderboard, on your profile and with what you contribute | Performance of a contract | Until you delete your account |
| Town | Shown on your profile and on your town's leaderboard, and used to count the cats known in your town | Performance of a contract | Until you remove it or delete your account |
| Photos of cats, with the day each one was taken | Photos are the point of the app. The day lets us check that the three photos behind a claim on your own cat come from three different days. | Performance of a contract | Until you delete them or your account |
| What your phone found in a photo | Worked out on your phone: whether the photo shows a cat and where, its coat colours and its light, which app version did the check, and how the app used the result. We use it to frame the cat on a card and to improve the coat suggestion. Other people see only the frame. | Performance of a contract | As long as the photo |
| Approximate area (about 100 m) | To tag a scan to a neighbourhood | Performance of a contract | Until you delete the scan or your account |
| Neighbourhood name | To show where a scan was | Performance of a contract | Until you delete the scan or your account |
| What you say about a cat | The name you use for it, its coat colour and coat type, and your star rating, counted on the cat's page | Performance of a contract | Until you delete your account |
| Text you write | Notes on your scans, comments, and the text about a cat you keep. All of it is public, under your username. | Performance of a contract | Until you delete the text, the scan or your account. We may remove text that breaks our terms. |
| Likes | A number to everybody, and a name to the person who made the scan | Performance of a contract | Until you undo the like, the scan is deleted, or you delete your account |
| Friends and your invite link | To show which cats you and your friends both know, to show your friends' scans, and to add friends to a scan | Performance of a contract | Until one of you ends the friendship, or you delete your account |
| Scans a friend adds you to | A friend who scanned a cat with you can save the same scan for you. It is yours from then on. | Performance of a contract | Until you delete it, your friend undoes the save, or you delete your account |
| Notifications | Your inbox in the app: likes, comments, friend requests, scans a friend added you to, and our decisions on claims and reports | Performance of a contract | 90 days at most |
| Blocks | To hide a person from you and to stop them reaching you. The blocked person is never told. | Performance of a contract | Until you unblock them, or one of the two accounts is deleted |
| Milestones | Your progress in the app. Friends see the milestones you reached, with the day. | Performance of a contract | Until you delete your account |
| Claims on your own cat | The claim, the three photos that prove it, and the details you add about your cat | Performance of a contract | Until you release the claim or delete your account. When you release it, the three scans stay yours. |
| Points | To rank the leaderboard, and to check a total that looks wrong | Performance of a contract | Until you delete your account |
| Crash diagnostics | To find and fix problems that make the app fail: the error, your phone's model, the system and app versions, and your account ID | Legitimate interest | 30 days |
| How you use the app | Which screens you open and which steps you finish, so we can see where the app gets in the way. Never a cat, a photo or a place. You can turn it off in Settings | Legitimate interest | 90 days, then only counts that name nobody |
What we deliberately do not collect: your precise location when you scan a cat, the precise location of any cat, your date of birth (only your age group and a yes/no answer to being 16 or over), device identifiers, your contacts, background location, any advertising identifier, or a cat's chip number.
A note on the cats you photograph
Repeatedly photographing the same outdoor cat in the same place could, in theory, point to where that cat's owner lives. The approximate-area design above exists specifically to prevent that. Please also be considerate: avoid photographing people, house numbers, or licence plates where you can, and only photograph cats in places you are allowed to be.
If your cat is on Blepper and you want it removed, email privacy@blepper.app. You do not need an account to ask.
Who else processes your data
We use a small number of service providers to run Blepper. Each one receives only what it needs.
| Provider | What they do | Where |
|---|---|---|
| Hetzner Online GmbH | Hosts the app's servers and stores all data at rest | Germany |
| Finds the town you type when you choose your town. It receives only what you type, never a position of yours. | United States | |
| Resend | Delivers your sign-in codes, and the feedback you send from the app. It receives your email address, and with feedback what you wrote, your username, your phone's model and the last screens you opened. | United States (email sent from the EU) |
| Cloudflare | Forwards email sent to privacy@blepper.app and to our feedback address to our mailbox. It keeps no copy. | United States |
| Sentry | Collects crash diagnostics so we can fix failures. It receives no location, no email address and no username. | EU data region |
| OpenFreeMap | Supplies the map images in the app. Your phone fetches them directly, so it receives your IP address and the part of the map you look at. | Hungary, delivered through Cloudflare |
Where a provider is based outside the European Economic Area, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- receive your data in a portable format;
- restrict or object to certain processing;
- lodge a complaint with a supervisory authority.
You can export or permanently delete all of your data from inside the app, at any time. You can also email privacy@blepper.app and we will help. If you believe we have handled your data improperly, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Age
Blepper is for people aged 16 and over, in line with the Netherlands' age of digital consent. We ask you to confirm your age when you first use the app. We store that confirmation and the age group you chose, never your date of birth.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top. Significant changes will be highlighted in the app.
Contact
Marked Labs B.V. — privacy@blepper.app.