Privacy

The short version

• Your email address and phone number are never shown on public pages.
• Your horse’s records are private unless you mark them public. Microchip numbers and vet history start private.
• Private documents never get a public link, ever.
• We do not sell your data and we do not sell your horses’ records.
• You can export what you have put in, and you can delete your account.

What we collect

What you give us

• Your name, email address, and optionally a phone number and a photo.
• Where you are, roughly — usually a town and state, so distance search works.
• Everything you put in a horse’s record: identity, breeding, health, training, competition results, ownership, photographs and documents.
• Listings, messages, transport requests, business profiles and posts.

What happens automatically

• A session cookie so you stay signed in. It holds a random token, not your identity.
• Basic request information — the page, the time, and a hashed form of your IP address used for rate limiting so nobody can hammer the sign-in form.
• An audit record of significant changes to a horse: what changed, who changed it, when.

We do not run advertising trackers, and we do not build a profile of you for anybody else’s benefit.

What other people can see

Always public: your display name and photo if you set one, and anything you have deliberately marked public — a published listing, a public ReinPass, a published business profile, a public post.

Never public: your email address, your phone number, your exact address, your password, anything you marked private, and any document that is not set to public.

Shared: things you have specifically granted somebody access to — a buyer you sent vet records to, for instance. That access is recorded and you can revoke it.

Documents in particular

Documents are not served from a guessable public address. Every request goes through a check of who you are and whether you are allowed. A request that is not allowed gets the same “not found” as a document that does not exist, so nobody can probe for what you have. Access to your documents by anybody other than you is logged.

Ownership transfer

When you transfer a horse, the new owner receives the horse’s history and the documents included in the transfer. They do not get your account details, your other horses, or documents you did not include. You are shown exactly what is being handed over before you confirm.

Your name stays in that horse’s ownership history with the dates you owned it. See the terms for why.

Social promotion

We only share a listing on Lope On’s social accounts if you tick the consent box, and only using content that is already public on the listing. Nothing posts automatically and you can withdraw consent at any time.

AI features

Where AI is used — for example to read a scanned document — you are shown what it extracted and asked to confirm each field before anything is saved. A guess never becomes a stored fact without you agreeing to it. AI features are switched off in this environment, so nothing is sent anywhere.

Who else sees your data

We use a small number of service providers to run Lope On:

• hosting and the database;
• file storage for photos and documents;
• email delivery, for confirmations and notifications;
• geocoding, to turn a town name into a point on a map.

They process data on our instructions and for no other purpose. We may also disclose data where the law requires it, or where it is necessary to investigate fraud or protect somebody’s safety.

How long we keep things

• Your account and its content: until you delete it.
• Ownership history entries: permanently, as described above.
• Messages: kept so both sides have a record of what was agreed.
• Audit and moderation records: kept, so a dispute can be looked into properly.
• Rate-limiting records: a short window, then discarded.

Your choices

• See it: everything you have entered is visible in your dashboard.
• Correct it: edit anything, any time.
• Export it: from settings.
• Delete it: also from settings. Listings come down and your profile goes.
• Turn off email: notification preferences are in settings.

Security

Passwords are hashed with a slow algorithm and never stored in a form we could read. Session tokens are stored only as a hash, so a copy of the database does not let somebody sign in as you. Cookies are HTTP-only. Every request for a private document is authorised on the server before a single byte is sent.

No system is perfect. If you find a security problem, please tell us at security@lopeon.com before telling anybody else.

Children

Lope On is not for people under 18. If you believe a child has created an account, tell us and we will remove it.

Changes

If we change something that matters, we will tell you rather than quietly editing this page.

Contact

Privacy questions: privacy@lopeon.com. Anything else: help.