Postfinder privacy & data

PostFinder (postfinder.io) is a directory of post offices, parcel lockers and post boxes.

your IP address, the page you asked for including anything in its address such as a search or a postcode, your browser's user agent and the time

The contact form asks for your name, email address and message.

An account keeps your email address, the handle you choose, and a hash of your password made with Argon2, never the password itself.

The position is rounded to about 100 metres before it leaves your device, and is only used to find what is nearby.

A reviewer cookie, pf_reviewer , holds a random token for one year, so your next review carries the same name

We use them to keep the site running and to deal with abuse, and for nothing else.

is only used to find what is nearby

To stop one address sending hundreds of reviews, we keep a hash of your IP address rather than the address itself

Turnstile, the check that a person rather than a script is sending a form

These go into server logs, which are kept for at most 30 days and then deleted.

Your account and photos: until you delete the account.

Reviews, and the daily hash kept with them: for as long as the place's page exists.

An email given with a fix or a new place: until it is decided.

Contact form messages: as long as it takes to deal with them.

DigitalOcean runs our servers, database and photo storage, in Sydney.

Some of these process data outside Australia, including in the United States.

Who else is involved These services handle data for the site, each for one job:

Delete it yourself from /account/delete . That deletes your email address, password, passkeys, photos and every session straight away.

you can ask us for a copy of what we hold about you

to correct it

to delete it

to stop using it, and object to how we use it

If you are in the United Kingdom or the European Union, you can also complain to your data protection authority.

We never sell or share what we keep for anyone else's use.