You decide what to share.
Anonymous use stays available. An account, durable profile, alerts, notifications, demand research, and outcome reports are separate choices.
SASHA Trust Center
How SASHA earns your trust.
SASHA asks only for what a useful, welfare-first decision needs. You choose what to share, uncertainty stays visible, and a click never becomes a claim that an animal or family is safe.
Product commitments · last updatedUnknown stays unknown.
Source records, caregiver observations, user reports, and partner verification remain distinct. SASHA does not turn missing evidence into compatibility.
An action is not an outcome.
Views, saves, and contact clicks diagnose whether the product is usable. Only an explicit report—and partner confirmation where available—can describe what happened.
Privacy
Privacy begins with choice.
SASHA is designed to work before it knows who you are.
Use SASHA without an account
Life and Foster Profile drafts stay in this browser. A submitted Life Profile is sent to the server to calculate current matches, but the matching route does not save it to SASHA's application database.
Save only when you mean to
ChatGPT sign-in supplies identity; SASHA does not create another password. A Life or Foster Profile becomes durable only when you explicitly save it. Favorites, support bookmarks, foster journeys, alerts, match choices, notifications, and reports remain independently controllable.
Email is a notice, not access
A shelter team invitation is sent only to its named recipient and contains no access token. The exact invited address must still sign in and accept; a current organization manager can cancel the invitation.
Measure utility without histories
Product measurement accepts one of fourteen fixed action names and stores only a daily count. It rejects account, IP, email, ZIP, profile, query, animal or resource identifiers, referrers, user agents, and free text.
Protect public writes without raw addresses
Anonymous-write limits use a short-lived HMAC digest of the network address, scope, and time window. The raw address is never stored in D1, and an unavailable measurement system never blocks matching or direct contact.
Safety and welfare
Helpful without pretending to know too much.
SASHA supports decisions; it does not replace the person, shelter, rescue, program, or veterinarian responsible for them.
Known household, housing, schedule, distance, and care conflicts close the gate before any score or welfare priority is considered.
No paid placement, breeders, affiliate ranking, or engagement objective can change who appears first.
Keep My Pet never posts an animal to strangers. Rehoming paths must lead to a recently verified, program-mediated service.
SASHA does not diagnose, prescribe, dose medication, or launch health navigation without clinical, regulatory, and adversarial safety review.
Source truth
Every public claim needs a way back to evidence.
A polished profile is never permission to hide where a fact came from.
Freshness
Public animal inventory leaves matching after 72 hours without source verification. Support resources carry their own reviewed freshness and availability state.
Geography
A five-digit ZIP resolves to a source-attributed postal centroid. SASHA never needs an exact home address and labels distance as approximate rather than road travel.
Provenance
Structured source fields, shelter observations, caregiver evidence, bounded inference, and unknown values stay distinguishable. Human-reviewed narratives preserve the caregiver's wording.
External decisions
Organizations control availability, fees, applications, foster approval, and placement. SASHA links to their public source and asks people to confirm current details directly.
Accessibility
Access is part of whether SASHA works.
The product is built for keyboard, touch, screen-reader, reduced-motion, and high-contrast use, while staying honest about what has and has not been audited.
- A keyboard skip link bypasses repeated navigation, while the full route menu remains available on phones and tablets.
- Visible keyboard focus and reduced-motion behavior are enforced in the shared interface.
- Every public route is automatically scanned for machine-testable WCAG 2.2 AA issues at phone, tablet, and desktop sizes.
- Forms use labels, fieldsets, legends, validation messages, and live status regions.
- Meaningful images carry alternative text, while decorative images stay out of the reading order.
Current boundary: SASHA does not claim formal accessibility conformance until an independent audit and a public accessibility-feedback channel are complete.
Your controls
Your data should not become a scavenger hunt.
Clear anonymous drafts on this browser here. In My SASHA, signed-in people can download their consumer data, reverse remembered match choices, turn off demand research and notifications, or delete their consumer data—including Foster Profiles and journeys.
Private-launch boundary
SASHA will not call unfinished operations “launched.”
Before broad public access, SASHA still needs observed live data and recurring schedules, real partner and support-program validation, an independent accessibility review, and a named public privacy and accessibility contact. Those are launch gates, not details hidden behind this page.