Privacy Policy

1. Information We Collect

ShareMyHorse collects information needed to operate the owner-and-rider service, review paid-advertising applications, and manage approved placements:

• Account Credentials: Full display name, email address, cryptographic password hash, marketplace role preference (Horse Owner, Rider / Carer, or Both), and optional equestrian background summary.
• Listing & Equine Information: Horse breed, age, height in hands (hh), gender, temperament, training level, disciplines, photos, videos, and general geographic region (county or province).
• Private Location Data: Facility names, street addresses and directions provided by horse owners are kept separately from public listings and protected by database access controls. The owner can access them; authorized platform administrators may access them for support and safety operations. A specific rider can see only the fields the owner chooses to share when accepting that rider's inquiry. We do not collect GPS coordinates for listings.
• Platform Messaging: In-app direct messages between authenticated members are transmitted over encrypted HTTPS connections to coordinate arrangements. Messages between members are stored on our servers so you can read them later. Our administrators may review messages connected to a report or a safety concern.
• Security Telemetry: Bot-prevention signals processed by Cloudflare Turnstile help protect registration and public forms from automated abuse.
• Advertiser Applications: We receive the business representative's name and contact details, proposed ad copy and destination link, preferred billing period, and application notes. Administrators use these details and internal review notes to decide whether to offer a placement and to maintain review records. Public ads show only approved business and ad details; application contact details and review notes are not part of the public card. We no longer accept insurance advertising applications.
• Paid Placements: Stripe handles Checkout and payment credentials. ShareMyHorse receives payment and subscription identifiers, price and billing-period details, and payment status needed to activate or stop a placement. We do not receive full card numbers through Checkout.

2. Progressive Location Privacy Architecture

ShareMyHorse limits the location detail shown on public listings. Additional details can be shared by an owner during an inquiry:

3. Cookies, Local Storage & "Remember Me" Device Sessions

ShareMyHorse uses browser storage and session cookies for authentication and site preferences. Google Analytics and third-party advertising trackers are disabled. We count first-party sponsor views and clicks without setting advertising cookies:

• Essential Session Storage: We use local browser storage (such as sharemyhorse_user) to maintain your active login state and preserve interface preferences across page transitions.
• "Remember Me" Functionality: When you check "Remember my email" on the sign-in page, your email address is saved in local storage (sharemyhorse_remembered_email) and prefilled on future visits from that browser. This feature does not save your password.
• Advertising cookies: ShareMyHorse does not currently place third-party advertising tracking cookies or pixels.

4. Equine Activity Risks and Local Law

Equine interactions, riding, exercising, and horsemanship involve physical risks. Legal duties, available defences, and required notices vary by state or province. A statement on this website does not replace any notice, agreement, or insurance coverage required for a particular activity or location.

Platform role: ShareMyHorse helps horse owners and riders find and contact one another. We do not arrange rides, manage stables, provide insurance, or assess whether a horse or rider is suitable. Members decide whether to meet and what arrangements to make. Responsibilities and legal rights depend on the circumstances and applicable law. Consider a written agreement and discuss insurance for the specific activity with a licensed provider (see our insurance resources).

5. United States Privacy Requests

Privacy rights differ by state and by whether a law applies to this service. You can contact us about the information associated with your account. We will respond to requests as required by applicable law.

• Access: Ask for information about the personal data associated with your account.
• Correction: Update profile details in the Profile Editor, or contact us about other records.
• Deletion: Delete your account in the Profile Editor or contact us about other records. Some information may be retained where law or a legitimate operational need permits.
• Advertising use: We do not currently sell personal data or share it for cross-context behavioral advertising.

6. Canadian Privacy Rights (PIPEDA & Quebec Law 25)

Canadian privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, may give members additional rights. Contact us to exercise rights that apply to you:

• Accountability & Consent: We ask for consent during registration and use account information to operate the service. Contact us with questions about how your information is used.
• Service Providers: We use Cloudflare and Supabase to operate the site, authentication, and data storage, and Stripe for Checkout and subscription payments. These providers may process information outside your province or country; contact us for details about current processing locations.
• Quebec privacy requests: Quebec residents may contact our privacy officer about access, correction, or withdrawal of consent where applicable.

7. Infrastructure Security & Edge Protection

ShareMyHorse uses the following technical safeguards:

• Encrypted Connections: HTTPS protects traffic between your browser and the site. Cloudflare security controls and database access policies help restrict access to private data.
• Bot protection: Cloudflare Turnstile helps detect automated abuse during registration and form submission.
• Server credentials: Database credentials and operational tokens are stored outside the public website code.

8. Data Retention & Account Deletion

You can modify your public profile name, role, and location in the Profile Editor. You can also request account deletion there. Advertiser applications and payment records are separate from a member profile and may be retained for review, billing, dispute resolution, or legal and accounting obligations. Contact the privacy officer below to ask about access, correction, or deletion of those records; some records may need to be kept.

9. Privacy Inquiries & Contact

If you have questions about this Privacy Policy, wish to make a privacy request, or need assistance managing your credentials, please contact our privacy team: