1. Who we are

The Dog Show is operated by Scheme Studio. "We", "us", and "our" mean Scheme Studio when used below. You can reach us at james@wearescheme.studio.

This policy describes how we handle personal data when you visit dogshow.lol, watch the show, register, upload a dog, or interact with us in any way.

2. What we collect, and why

Data you give us directly

• Email address. When you sign up, log in (via magic link), enter the email modal on the landing page, RSVP for a scheduled dog, or pay for a tier. Used to send you the magic-link login, transactional emails (welcome, your dog's certificate page, slot reminders), and very occasional product updates if you opt in.
• Username. The display name you pick for chat and the leaderboard. Optional.
• Dog name, breed, and photo. Provided when you pay for the "Enter Your Dog" tier. Displayed publicly on the show, the gallery at /dogs, and your dog's permanent certificate page at /d/{your-dog-slug}.
• Scheduled slot time (optional). If you book a specific slot for your dog. Used only to schedule and send slot-reminder emails.

Data we collect automatically

• Basic web logs. IP address, user agent, referring page, requested URL, timestamp. Used for diagnostics, abuse prevention, and rate-limiting.
• Local storage tokens. Your browser stores a session token, your tier, your username, and a "fan ID" in localStorage so you stay signed in across visits. These are first-party only and never sent to third parties.
• Analytics and advertising cookies. See section 4 below.
• Error reports. If something crashes, we collect a stack trace, the URL, and the user agent (via Sentry) so we can fix it. This may incidentally include your user ID if you are signed in.

Data we do not collect

We do not see or store your credit card or bank details. All payments are processed by Stripe; we receive only the email address you used at checkout, the SKU you bought, and Stripe's confirmation that payment succeeded. Stripe's own privacy practices are at stripe.com/privacy.

3. Who we share it with

We use a small number of third-party services to run the site. Each receives only the data needed to do its job.

Service	What it does	What we send
Stripe	Payments & refunds	Email, SKU, price
Resend	Transactional email delivery	Email, email contents
PartyKit (Cloudflare)	Real-time chat, live show infrastructure	Chat messages, bone reactions, uploaded dog images
Vercel	Website hosting	Web request metadata
Cloudflare AI	Verifying that uploaded photos are actually dogs	The uploaded image, briefly, for classification only
Sentry	Error tracking	Stack traces, URLs, user agent, user ID (if signed in)
Google Analytics 4	Site usage analytics	Page views, anonymised device info, GA cookie ID
Faurya Analytics	Site usage analytics	Page views, anonymised device info, Faurya visitor ID
Microsoft UET	Bing/Microsoft Ads conversion tracking	Page views, anonymised device info, UET cookie ID; on the email-modal and after a purchase we also send the event name and (for purchases) the amount

We don't sell your personal information. We don't share it with anyone outside the processors above, and we don't use it for "cross-context behavioural advertising" with anyone except Microsoft UET for the purpose of measuring and improving our advertising on Bing.

4. Cookies and similar technologies

We use a small number of cookies and similar storage. If you are in the UK, the EU/EEA, or Switzerland, the analytics and advertising ones below do not load until you accept them — we show a banner on your first visit and set none of them unless you choose "Accept all". Visitors elsewhere have these set by default, in line with local law. Either way, strictly-necessary storage (keeping you signed in, remembering your cookie choice, working out which region you're in) always works, and you can change or withdraw your choice at any time using Cookie settings or by clearing cookies in your browser.

Name / family	Type	Purpose
dogshow_token, dogshow_tier, dogshow_username, dogshow_fan_id (localStorage)	Strictly necessary	Keeps you signed in across visits.
dogshow_consent, dogshow_consent_at (localStorage)	Strictly necessary	Remembers your cookie choice so we don't ask again.
dogshow_geo	Strictly necessary	Records whether your request came from a region where we must ask for consent first (set by us from your approximate country; not shared).
faurya_visitor_id, faurya_session_id	Analytics	Distinguishes one visitor from another for site analytics.
_ga, _ga_*	Analytics	Google Analytics 4 — anonymised site usage.
MUID and related (set by bat.bing.net)	Advertising	Microsoft UET — measures the effectiveness of our Bing Ads.

For visitors in the UK, EU/EEA, or Switzerland the analytics and advertising rows above are only set after you accept them; reject, and none of them ever load. Error tracking (Sentry, see section 3) is the one exception we treat as strictly necessary: it monitors crashes and faults to keep the site stable and secure, sets no cookies or tracking identifiers in your browser, and runs on the legitimate-interest basis described above rather than on consent.

We do not currently use session recording or heatmaps. If we ever turn on Microsoft Clarity (currently scaffolded but disabled), we will update this policy and add a notice to the relevant pages.

5. How long we keep it

• Account and email: until you ask us to delete it, or until the account has been inactive for two years.
• Dog photo and certificate page: we will remove your dog's public-facing certificate page at your request, or take it down under our moderation rules. Under section 7.2 of our Terms of Service you grant us a perpetual licence to the photo, so we may retain copies for archival, backup, and marketing purposes after public removal.
• Payment records: seven years, as required by UK accounting rules.
• Analytics data: per the standard retention of each analytics provider (typically 14 months for Google Analytics).
• Web logs and error reports: 90 days.

6. Your rights

Depending on where you live, you may have the right to:

• Know what personal data we hold about you.
• Ask for a copy of it.
• Ask us to correct it.
• Ask us to delete it.
• Opt out of "sale" or "sharing" for cross-context advertising (we don't sell, and the only sharing for advertising is to Microsoft UET — see section 3).
• Withdraw consent for anything you previously agreed to.
• Lodge a complaint with your local data protection authority. In the UK that's the Information Commissioner's Office.

To exercise any of these rights, email james@wearescheme.studio. We will respond within 30 days.

7. Children

The Dog Show is not directed to children under 13. If you are under 13, please do not use the site or send us any personal information. If we learn we have collected information from a child under 13, we will delete it. If you are a parent and believe your child has provided personal information to us, please contact james@wearescheme.studio.

8. International transfers

Scheme Studio is based in the United Kingdom. Most of our processors are based in the United States or the European Union. When we transfer personal data outside the UK or EEA, we rely on standard contractual clauses or other lawful transfer mechanisms required by UK GDPR.

9. Security

We protect data in transit with HTTPS and at rest with the standard encryption provided by our infrastructure providers. Session tokens are 32-byte random values stored in your browser. Magic-link tokens expire after 60 minutes. Admin endpoints are protected by an admin key. No system is perfect; if you believe your account has been compromised, please email us.

10. Changes to this policy

If we make material changes we'll update the "Last updated" date at the top and, where appropriate, notify you by email or via a notice on the site. Continued use of dogshow.lol after a change means you accept the updated policy.

11. Contact

Questions, requests, complaints: james@wearescheme.studio.