TEST MODE - no real payments. Checkout uses Stripe test mode: pay with card 4242 4242 4242 4242, any future date, any CVC and ZIP. Nothing is charged and no stickers ship.
⚠ DRAFT – needs lawyer review. Not final and not legal advice.

Privacy Policy

Version 2026-10-24-draft1

What we collect from business customers Name, email, business name and category, shipping address for printed packs, and payment status (card details are handled by our payment processor, Stripe, and never reach our servers).

What we collect when someone scans a code - The code scanned and the time. - Approximate location derived by our network provider (Cloudflare) from the connection: country, region, city, and coordinates rounded to about 1 km. - Device type, operating system and browser family derived from the user-agent. - Whether the request looks like an automated bot. - A daily-rotating, salted one-way hash of the IP address used only to estimate unique visitors per day. The raw IP address is never stored, and the daily salt is deleted after about two days, after which the hash cannot be linked back to an IP address.

Opt-in pages If you choose to enter your email on a business's opt-in page, we store your email, which sticker you came from, and a record of the consent text you agreed to, on behalf of that business. Your email is not linked to your scan analytics.

Sub-processors Cloudflare (hosting, edge network), Supabase (database and authentication), Stripe (payments), Resend (email delivery).

Retention and your rights [Retention periods, data subject rights, contact details and jurisdiction-specific sections (e.g. CCPA/GDPR) to be drafted by counsel.]