Privacy policy
Last updated 18 October 2026
Who we are
Find My Discs (findmydiscs.com and fmd.fyi) is run by Corella Creations (ABN 66 361 275 501) ("we", "us"). We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). You can contact us about privacy at hello@findmydiscs.com.
What we collect
Your account
- Your email address and the display name you choose. If you sign up with an email and password, your password is handled by our sign-in provider (Amazon Cognito) and we never see it.
- If you continue with Google, Google shares your name, email address and Google account ID with us. Your display name defaults to your first name and last initial, and you can change it.
- Your home course (optional), points, achievements and notification settings.
Things you post
- Lost and found posts: disc details, photos, the date, a description, any reward, how you'd like it handed back, and a map pin with how precise it is.
- Discs you register, and the codes and QR tags linked to them.
- Bounty claims and notes.
Messages
- Messages you send and receive, including any location you choose to share in a conversation.
- If you message someone without an account, the name you give, your message, and your email address if you choose to leave one for replies.
Location
"Use my location" only reads your device's location to place a pin while you're on the page. We store the pin you post or share, not your device's location. We don't track where you are.
Technical information
- If you turn on push notifications, a push subscription from your browser so we can deliver them.
- Standard server logs (such as IP address, browser type and the pages or API requests made), used to keep the service running and secure. These are kept for a limited time and then deleted automatically.
How we use it
- To run Find My Discs: show posts, connect finders and owners, deliver messages, and look up disc codes.
- To suggest possible matches between nearby lost and found posts.
- To send the notifications you've asked for, by email and push. You can turn these off in your profile.
- To award points and achievements, and to show the leaderboard.
- To keep the service safe, including investigating misuse.
We don't sell personal information, use it for advertising, or send marketing email.
Who can see what
| Information | Who can see it |
|---|---|
| Display name, home course, points, achievements | Anyone (your public profile and the leaderboard) |
| Lost and found posts, including photos and map pins | Anyone |
| A registered disc's details and your display name | Anyone who scans its QR tag or enters its code |
| Messages and shared locations | Only the people in that conversation |
| Your email address | No other players. We use it for sign-in and notifications only. |
Think about what you put in photos and descriptions (for example, a phone number written on a disc) before posting.
Service providers and overseas storage
We use a small number of providers to run the service. They only get what they need to do their job:
- Amazon Web Services hosts our database, files, sign-in and email, in Sydney, Australia. The website itself is delivered through Amazon's worldwide network (CloudFront), so pages may be served from a location near you.
- Google handles "Continue with Google" sign-in, if you use it, under Google's own privacy policy.
- OpenStreetMap provides map images and place search. Your browser requests these directly, so the OpenStreetMap Foundation (based in the UK) receives your IP address and the area of the map you're viewing.
- Push services run by your browser's maker (such as Apple, Google or Mozilla) deliver push notifications if you turn them on.
Because of this, some information may be processed outside Australia, including in the United States, the United Kingdom and the European Union. We may also disclose information if required by law.
Storage on your device
We don't use cookies. We do store a few things in your browser so the site works, such as your sign-in session and settings. See our cookie policy for the full list.
How long we keep it
- Your account and posts are kept until you delete them or your account.
- Conversations started without an account are deleted about six months after their last message.
- Server logs are deleted automatically after a limited period.
Your choices and rights
- Access and correction: you can view and edit your profile, posts and discs at any time. Email us if you'd like a copy of the information we hold about you.
- Deletion: delete individual posts and discs, or your whole account from your profile. Deleting your account removes your profile, points, posts, registered discs and their codes, and your sign-in. Messages you've already sent stay visible to the person you sent them to.
- Notifications: turn email or push notifications off in your profile.
Children
Find My Discs is for people aged 13 and over. If you're under 18, please make sure a parent or guardian is happy for you to use it, and don't share personal details like your phone number or address in posts or messages.
Security
Data is encrypted in transit and stored with Amazon Web Services. No system is perfectly secure, but we take reasonable steps to protect your information. If a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by law.
Questions and complaints
Email hello@findmydiscs.com and we'll respond within 30 days. If you're not happy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We'll update this policy when the service changes, and change the date at the top. If a change significantly affects how we use your information, we'll let you know by email or on the site.
Questions about this page? Email hello@findmydiscs.com.