Privacy
Location for one check.
Your browser asks for location only after you sign in and press a nearby or stamp button. Coordinates are sent to the server for that request. The application does not store your real coordinates, IP address, device ID or a coordinate-based travel history.
What your collection stores.
An account stores a username, language and date preference, session hashes and stamp records linking the account to a store, UTC acquisition times and status. Passkeys store the credential ID, public key and minimum verification metadata, never a private key or password. A recovery code is displayed only when issued, stored as a hash and invalidated after recovery or replacement. No email address is collected.
Signed-in devices.
To help you recognize browser logins, we keep only estimated OS and browser types with login and expiry times. These types come from information provided by the browser and do not identify a physical device. Full browser identification strings, versions, IP addresses, locations and device identifiers are not stored.
Minimal failure history.
A sample of failed claims may store the target store, server UTC time and a fixed reason code for administrators. Repeated failures may be omitted. User IDs, coordinates, IP addresses, credentials and request bodies are not included. Entries are kept for up to 30 days, with at most the newest 1,000 retained. Browser and network failures are not guaranteed to be recorded.
Sharing is your choice.
Sharing starts disabled. If you create a link, it reveals your username and latest collected stamps, with visit dates limited to the month in each store’s time zone. Link tokens are stored as hashes and encrypted so you can view and copy your current link in Settings. Regenerating the link invalidates the old one.
Deleting your account.
Deleting an account removes its username, settings, passkeys, recovery code, stamp history, share links and all sessions. The account is removed from stamp collector counts. Store master data and original stamp artwork remain.
Browser preferences.
The browser remembers your selected interface language. A session cookie keeps you signed in. We do not use analytics or advertising services.