What we keep

We record which shops you tapped and when. We do not record where you are, what device you use, or what you do anywhere else. There are no advertising trackers on this site and no third-party analytics.

• A passport. A made-up display name, when you started, your points total, and — only if you choose to save it — your email address.
• Your stamps. Which shop, which trail, when, and how many points it was worth.
• Raw taps. Which sticker, which passport, and the time. Three pieces of information, deleted after 90 days.
• Your agreement. Which version of this page you agreed to, and when.

Your IP address. Your location. Your device or browser fingerprint. What page you came from. Anything at all about what you do on other websites.

This is not a promise about our intentions — there is nowhere in our database to put those things. The table that records a tap has three columns.

One cookie, which tells your phone that this passport is yours. It is not shared with anyone and it is not used to track you. There is no cookie banner because there is nothing to ask you about.

Shops and organisers see counts, never people: how many taps a shop had on a given day, how many different visitors, which hours were busy. Any figure covering fewer than five people is not shown at all, because a small number can identify someone.

These counts have no connection back to any passport. That is why they survive when you delete your account — there is nothing in them to delete.

• Raw taps: 90 days, then automatically deleted.
• Your stamps and points: until you delete your account. They are your record of what you did.
• Anonymous shop counts: kept indefinitely. They do not refer to you.

You can download everything we hold about you, as a file, from Settings. You can delete your account from the same page, and it is a real deletion — not a flag on a row we keep.

You do not have to give us an email address to use any of this, and we will never require one.

On servers in the United Kingdom and the European Union. Your data is not transferred outside the UK or EU.

Because you agreed on your first tap, and because we cannot give you a passport without recording what is in it. If you withdraw by deleting your account, everything personal goes with it.