Privacy policy
Version 2026-09-13. Applies to esapass.com and the services provided through it ("we", "us").
The short version
- We collect your name, email, city and state, and your pet's name, species, breed, color, birthday and photo. We ask no health questions and hold no health data of any kind.
- Stripe processes payment and, for Complete Kits, collects your mailing address. We never see your card number.
- The public verification page shows your pet's name, species, breed, your city and state, the registration date and listing status. Never your name, email or address.
- We don't sell personal data and don't run advertising pixels. You can ask us to correct or delete your data at support@esapass.com.
1. What we collect
- You give us: your full name, email, optional city, state; your pet's name, species, optional breed, color and birthday, and an optional photo.
- Stripe collects for us: payment details (held by Stripe), and a shipping address for printed kits, which Stripe passes to us so we can mail your kit.
- We generate: a registration number, your certificate and card PDFs, a private kit link, and order records.
- Automatically: IP address and browser for security and fraud prevention, and a log of verification lookups (IP, time, result) so you and we can see when a number was checked. Server logs are kept up to 90 days.
- Cookies: none for tracking. Administrators use a session cookie to log in. If product analytics is enabled, it masks all text and form content.
2. How we use it
To create and deliver your kit, run the verification page, mail printed kits, send order emails (receipt, delivery, shipping, and a reminder before your 12-month listing ends), handle refunds, and prevent fraud. Marketing email only if you opt in.
3. Who we share with
Stripe (payments), Vercel (hosting), Neon (database, encrypted at rest), Resend (transactional email), and a print vendor or postal carrier for printed kits (name and address only). Each receives only what its job requires. We disclose to authorities only when the law requires it. We do not sell or share personal information for cross-context behavioral advertising.
4. Retention
Order and registration records are kept while your listing is active and for seven years after for tax and dispute purposes. You can ask us to delete your photo or your whole registration earlier; we'll keep only what the law requires and tell you what remains.
5. Your rights
Access, correction, deletion, portability and opting out of marketing, wherever you live. California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other state residents have these rights by statute and the right not to be discriminated against for using them. Email support@esapass.com from your order email; we respond within 45 days.
6. Children
The service is for adults 18 and older.
7. Changes and contact
We'll post changes here with a new version date and email you about material ones. Contact: support@esapass.com.