Privacy Policy & Security Disclosures

1. Information We Collect

ShareMyHorse collects only the minimum personal information required to facilitate authentic, safe community introductions between horse owners and local riders:

• Account Credentials: Full display name, email address, cryptographic password hash, marketplace role preference (Horse Owner, Rider / Carer, or Both), and optional equestrian background summary.
• Listing & Equine Information: Horse breed, age, height in hands (hh), gender, temperament, training level, disciplines, photos, videos, and general geographic region (county or province).
• Private Location Data: Exact facility names, street addresses, and GPS coordinates provided by horse owners are stored in isolated encrypted database fields and never published to the public web.
• Platform Messaging: In-app direct messages between authenticated members are transmitted securely over TLS 1.3 to coordinate arrangements.
• Security Telemetry: Anonymized bot-prevention data processed via Cloudflare Turnstile to protect member accounts from brute-force intrusions and automated scraping.

2. Progressive Location Privacy Architecture

Standard equine classified websites broadcast sensitive barn addresses, horse values, and equipment locations to the entire internet. ShareMyHorse protects members through a 3-tier progressive security model:

3. Cookies, Local Storage & "Remember Me" Device Sessions

ShareMyHorse utilizes essential local browser storage and session cookies strictly to maintain user authentication and deliver a responsive experience:

• Essential Session Storage: We use local browser storage (such as sharemyhorse_user) to maintain your active login state and preserve interface preferences across page transitions.
• "Remember Me" Functionality: When you check the "Remember me on this device" box on the sign-in page, your email identifier is securely cached in local storage (sharemyhorse_remembered_email) so your account credentials are automatically pre-populated on future visits from that personal browser.
• Zero Third-Party Advertising Cookies: We do not place advertising tracking cookies, behavioral tracking pixels, cross-site beacons, or social network surveillance tags on your device.

4. Statutory Equine Activity Liability & Inherent Risk Disclosures

Equine interactions, riding, exercising, and horsemanship involve significant, inherent physical risks. In recognition of these unavoidable natural risks, forty-eight (48) U.S. states and Canadian common law jurisdictions have codified Equine Activity Liability Acts (EALAs):

Introductory Matchmaking Platform Role: ShareMyHorse provides the communication contact introduction between local horse owners and riders looking for horses. We are not a horse broker, leasing agency, stable manager, or party to any arrangement. Any agreement, riding schedule, trial ride, or safety protocol made after initial contact is strictly and exclusively between the horse owner and rider. ShareMyHorse does not provide insurance, guarantee horse suitability, or assume liability for in-person equine activities. Members are strongly advised to execute written contracts and verify equine liability insurance coverage (see our Equine Insurance Directory).

5. United States Privacy Rights (CCPA, CPRA, VCDPA, CPA, CTDPA)

Residents of California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive consumer privacy statutes enjoy specific statutory rights:

• Right to Know & Access: You may request disclosure of the specific personal information we hold regarding your account.
• Right to Correction: You may correct inaccurate or incomplete profile data directly via the Profile Editor.
• Right to Deletion: You may request complete erasure of your account, listings, and messages.
• No Sale or Cross-Context Sharing: ShareMyHorse does not sell personal data or share data with third parties for cross-context behavioral advertising. We do not maintain a "Do Not Sell My Personal Information" opt-out because no personal data is ever sold.
• Non-Discrimination: We will never discriminate against you, alter service pricing, or degrade features for exercising statutory privacy rights.

6. Canadian Privacy Compliance (PIPEDA & Quebec Law 25)

For members located in Canada, personal information is managed in compliance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta PIPA, British Columbia PIPA, and Quebec's Law 25 (Act to Modernize Legislative Provisions as Regards the Protection of Personal Information):

• Accountability & Consent: We collect and process personal data exclusively based on your explicit affirmative consent provided upon registration.
• Cross-Border Transfer Disclosure: Cloudflare edge infrastructure and PostgreSQL databases reside securely in North American facilities subject to bank-grade TLS encryption and strict access isolation.
• Quebec Privacy Rights: Quebec residents maintain the right to access, rectify, and withdraw consent for data processing at any time by contacting our designated privacy officer.

7. Infrastructure Security & Edge Protection

ShareMyHorse employs state-of-the-art security practices across our cloud architecture:

• End-to-End Encryption: All traffic is encrypted in transit using TLS 1.3 with Cloudflare Pro edge firewalls, DDoS mitigation, and OWASP Core Ruleset protections.
• Bot & Credential Defense: Cloudflare Turnstile validates human interaction during account registration and ad submission without intrusive tracking cookies.
• Isolated Secret Storage: Database credentials and operational tokens are maintained securely within encrypted edge secrets and isolated server environments.

8. Data Retention & Right to Be Forgotten

You retain complete control over your data. You can modify your public profile name, role, and location at any time in the Profile Editor. Upon request for account deletion, all public listings, photos, and personal contact associations are immediately purged from active indices within 24 hours.

9. Privacy Inquiries & Data Protection Officer

If you have questions regarding this Privacy Policy, wish to exercise statutory data rights, or need assistance managing your credentials, please contact our Data Protection Officer: