KennelPort

Privacy policy

Effective 5 November 2026. Last updated 5 November 2026.

1. Who we are, and what this covers

KennelOS ("KennelOS", "we", "us") runs KennelPort. This policy covers what KennelPort itself holds: the Site Manager (manage.kennelport.com) and the breeders and editors who sign in to it, the breeder websites we host, the link from KennelOS (api.kennelport.com), and the puppy portal. Each breeder's site also has its own privacy page for its visitors. KennelOS's apps have their own privacy policy.

A breeder decides what goes on their site, and what they keep about the families and visitors who contact them. For those details the breeder is responsible (in data-protection terms, the controller); we store and send them only to run the breeder's site, and never use them for anything of our own. For breeders' and editors' own accounts, and for this website, we are responsible.

2. The short version

• Breeders and editors sign in with an email code. We keep a scrambled (keyed-hash) form of your address, not the address.
• Reading a breeder's site collects nothing about you: no accounts, no advertising, no tracking cookies.
• What you send through a breeder's site (a message, an application, a review) goes to that breeder's inbox, and messages are deleted after 90 days.
• In a puppy portal, family email addresses are the one readable personal detail we keep, encrypted, because the portal emails families months later. A family can erase their account from Account at any time.
• We never sell anything about anyone, never use it for advertising, and never use it to train AI models.

3. Breeders and editors

• Your sign-in: a keyed hash of your email (never the address), which sites you manage and your role, and for each signed-in browser or installed Site Manager a session, kept as a hash of its token. Sign-in codes are kept hashed and expire. When we invite you, the invitation email is sent once and the address isn't kept.
• Your site: everything you put on it (pages, dogs, litters, puppies, prices, albums, photos, videos and posts you embed, your contact details) and the published versions Undo publish can go back to. A removed photo's files are deleted a day after nothing kept uses them.
• Notifications, if you turn them on: the push address your browser gives us for that device, tied to its sign-in so signing out silences it. Each notification carries no text; your device asks us what to show. We keep a line per event (what kind, and the sender's first name, never what they wrote) for 8 days.
• Usage: how many emails we sent each day by kind, and how much storage your site uses. Counts only.
• The KennelOS link, if you use it: link codes (kept as a keyed hash, a quarter of an hour, used once), each linked device's label and key (kept as a hash), when it last sent, and what it sent, which becomes your site's content, as section 9a of KennelOS's privacy policy describes. For a portal, KennelOS also sends each family with a signed contract (section 5).

4. Visitors to a breeder's site

• Reading the site: no accounts, advertising or tracking cookies. Cloudflare, which delivers every page, sees your device's internet address, used only to deliver the page and keep the site safe.
• Embedded videos and posts, and some product logos, load from the company that hosts them (YouTube's privacy-enhanced player, Vimeo, TikTok, Instagram or Facebook, or a brand's own site), under that company's policy.
• The contact and application forms: your name, email, phone if you give it, and what you write go to the breeder's inbox. Never emailed anywhere. Deleted after 90 days. Cloudflare Turnstile may check that you're not a bot.
• Reviews: your name, your words and any photo, held privately until the breeder approves them, and shown only with the consent you tick.
• A waitlist the breeder keeps by hand: your name, email and phone if you gave them, and what you're hoping for. The site shows only your first name and last initial, what you want and when you were added. Removed 90 days after the breeder marks you done.

5. Families in a puppy portal

A portal is switched on for a breeder's site by us. It holds:

• Your account: your family name; your email addresses, each stored encrypted beside a keyed hash used to find it, never logged; sign-in codes and sessions (hashed); when you last used the portal.
• Your puppy's records, as the breeder keeps them: the puppy's name, go-home and pickup times, microchip and registration number, vaccinations, preventatives and vet visits, your contract and vet-visit proof, the extras you bought, and an extended stay's weekly updates and photos.
• What you do there: your checklist and timeline ticks, your messages with the breeder, the photos and notes you add, and clicks on the breeder's recommended products and your status in each (so they know who to remind). A history of changes to these records, with when and by whom.
• Emails: a log of each one sent to you and whether it was delivered, as the breeder's evidence (for example, of vet-visit reminders). Resend tells us delivered or bounced; we don't keep the address it reports.

Erasing your account (Account, in the portal): your addresses, sign-in, messages, ticks and what you added are deleted at once. The breeder keeps their sale records (placement, health records, contract, vet proof and the reminder log) with your name only, because they may need them for a health guarantee. A breeder can also delete a family, undoable for 30 days.

6. Emails we send

Sign-in codes, invitations, and the portal's emails to families (sign-in links, reminders, a stay's updates). Plain text, with no tracking pixels. We never send marketing email.

7. Who else is involved

• Cloudflare: runs KennelPort, stores its database and files (encrypted at rest), and Turnstile on forms.
• Resend: sends our emails; it handles each recipient's address and the email.
• Apple, Google and Mozilla: deliver notifications to breeders' devices that turn them on; each carries no text.
• The companies whose content a breeder embeds (section 4).

We'd disclose information only if the law required us to, and we'd tell the person concerned unless we were forbidden to.

8. How long we keep things

• Site messages and applications: 90 days. A hand-kept waitlist's finished families: 90 days after.
• Notification lines: 8 days. Sign-in codes: until they expire. Request counts used against abuse (per hashed address and hashed internet address): a week.
• Litters that left a site: 30 days, unless the breeder keeps them.
• Portal accounts: until the family erases theirs, or the breeder deletes the family (final 30 days later). The breeder's sale records: until the breeder deletes them.
• Everything on a site: until the site is closed (section 9).
• Our database provider keeps its own recovery copy for up to 30 days, so anything deleted is fully gone within 30 days.

9. Closing a site

A breeder can close their site from the Site Manager. Everything on it is deleted at once: pages, dogs, litters, photos, files, messages, sign-ins, link keys and portal records. The address keeps only a closed notice, and is never given to anyone else unless the breeder asks. Emails already sent stay in the inboxes they reached.

10. Security

Everything travels over HTTPS and is stored encrypted at rest. Email addresses are kept as keyed hashes, apart from portal families' addresses, which are encrypted. We never log an email address, a code, a token or a message. No system is perfectly secure; if a breach affected your information, we'd tell you and the authorities as the law requires.

11. Your choices and rights

• Breeders: change anything in the Site Manager, download a copy of your site, or close it.
• Families: erase your portal account from Account, or ask the breeder.
• Anyone who contacted a breeder: ask the breeder first; they decide what they keep.
• Anyone can email us to see, correct or delete what we hold about them, or to complain; we answer within 30 days, and you can also complain to your local data-protection authority. Where a law asks for a legal basis, ours is running the service the breeder asked for, and keeping it secure and free of abuse.

12. Where your data is processed

Our providers run worldwide networks, so information may be processed in the United States and other countries with different data-protection laws from yours. We rely on each provider's own data-protection commitments for those transfers.

13. Children

KennelPort is for adults. We don't knowingly collect information from anyone under 16; if you think a child has sent us something, email us and we'll delete it.

14. Changes to this policy

If what we hold or how we use it changes, we update this page first and change the dates at the top, and tell breeders in the Site Manager (and families in the portal) when it matters to them.

15. Contact us

Email admin.kennelos@gmail.com.