Privacy

Short and specific. This service runs on Cloudflare Workers, D1 and KV.

What we store

• Shop account: the email address you sign up with (hashed to an account id), your plan and status. The email itself is kept so you can get your key back and so we can contact you about your account.
• Program: your shop name, the reward text and how many stamps a reward needs. These are shown on your poster and to your customers.
• Cards: a random card token, an 8-character code, the stamp count, the rewards given and the time of the last stamp. No name, no email, no phone number of the customer.
• Stamp log: one row per stamp (which card, when) so a dispute can be checked. This is not linked to any identity.
• Contact form: the name, email and message you send us.
• Request measurement: page and API requests are counted to show you your own usage. No advertising trackers, no third-party analytics scripts.

What we do not do

• No customer accounts, no customer email or phone collection. A card is a random token in the customer's browser.
• We do not sell or share data, and we do not build advertising profiles.
• No push notifications, no SMS, no marketing email to customers.

What a customer shows the shop

When a customer opens their card page, the 8-character code and the QR on that page are visible to whoever is looking at the screen. Anyone holding that card link can see the stamp count for that card — treat the link like a paper card. It carries no personal data.

Deleting your data

You can delete your shop account at /account. Deleting removes the account row; the stamp counters are kept as anonymised hashes so totals stay correct. Ask us to delete a card or a program through /contact and we will remove it.