Privacy Policy
CaughtMyEye is a trading name of ThIncFirst Ltd.
1.Introduction
This Privacy Policy explains how CaughtMyEye (“the Platform”, “we”, “us”) collects, uses, stores, and protects information. The Platform is intentionally designed to operate with minimal data collection, no behavioural tracking, and ephemeral content storage. By using the Platform, the User (“you”) accepts this Privacy Policy.
2.Data Minimisation & Privacy-First Design
The Platform is built to comply with GDPR principles of:
- Data minimisation
- Purpose limitation
- Storage limitation
- Privacy by design
We avoid collecting personal data unless strictly necessary for technical operation or legal compliance.
3.Information We Collect
3.1No Account Creation
The Platform does not require or support user accounts. We do not store names, emails, phone numbers, or other personal identifiers.
3.2Post Content
Posts submitted by Users may contain descriptive text. This content is:
- Stored only for the duration of its publication window
- Automatically deleted after expiry
- Not linked to any persistent user identity
3.3Technical Data (Minimal & Ephemeral)
We may temporarily process:
- Basic server logs (IP address, timestamp) for security and anti-abuse
- Device/browser metadata necessary for rendering the service
These logs are short-lived and purged regularly.
3.4Payment Information
Payments are processed by third-party providers. We do not store:
- Full card numbers
- Billing addresses
- Payment credentials
We receive only the minimal transaction metadata required to confirm payment.
5.How We Use Information
We use minimal technical data solely to:
- Deliver the service
- Prevent abuse
- Ensure security
- Process payments
- Comply with legal obligations
We do not use data for marketing, profiling, or advertising.
6.Data Retention
- Posts are stored only for their active publication period.
- Technical logs are retained briefly for security.
- No long-term user profiles or histories are maintained.
- Deleted posts cannot be restored.
7.GDPR Rights
Because we do not store identifiable personal data, certain GDPR rights (access, rectification, erasure, portability) may not be technically feasible.
Users may still contact us regarding:
- Questions about data handling
- Requests related to security or compliance
However, we may not be able to identify or authenticate Users due to our privacy-first design.
8.Data Security
We implement reasonable technical and organisational measures to protect the Platform. However, no system is completely secure, and Users submit content at their own risk.
9.Third-Party Services
Payment processors and hosting providers may handle limited data necessary for their functions. These providers operate under their own privacy policies.
10.Changes to This Policy
We may update this Privacy Policy at any time. Continued use of the Platform constitutes acceptance of the updated policy.
11.Contact
For privacy-related enquiries, Users may contact the Platform through the designated support channel.