Privacy Policy

Stampr Limited ("we", "our", or "us"), the data controller of Stampr™, is committed to protecting your privacy. This policy explains how your data is handled across the Stampr™ Mobile Application and the Stampr™ Website (stampr.info).

PART I: MOBILE APPLICATION PRIVACY POLICY

1. Data Storage, Sync & Anonymous Architecture

The Stampr™ Mobile Application is engineered with a local-first privacy model. Your "Passport" data, including visits, timestamps, personal notes, and achievement progress, is stored securely inside a local database on your device.

To support optional cross-device synchronisation and leaderboards, you may choose to enable Cloud Sync. This synchronises your progress totals to our secure cloud backend using a model designed so your personal information is never needed. We generate a secure cryptographic key pair locally on your device (publicKey). We do not collect, store, or transmit your name, email address, phone number, or device identifiers. Your identity remains on your device and is never linked to a real-world identity.

2. Anonymous Peer-to-Peer Friend Connections

Stampr enables you to connect with friends and compare aggregate collection statistics without revealing personal identity details or private location histories. You can connect with friends using any of the following supported in-app methods:

• Camera QR Code Scanning: Scanning a friend's public key QR code directly from their device screen using the in-app camera.
• Gallery QR Code Import: Reading a friend's saved QR code image uploaded from your device photo library.
• Manual Public Key Input: Manually typing or pasting a friend's 32-character hexadecimal Public Key / Friend Code string.
• Invite Link & Text Share: Opening a shared invite link (stampr.info/friend?key=...) or text string shared via external messaging apps.

All connection methods exchange strictly anonymous cryptographic public keys (publicKey). Stampr does not collect, link, or access real names, contact lists, phone numbers, or location tracking logs to establish friend links. Connected friends can view your aggregate collection counts, category totals, and streak stats, but can never view individual visited locations or historical check-in paths.

3. Google Drive & iCloud Backups

When you enable Google Drive or Apple iCloud backups, the App stores backup copies of your local database (stampr_backup.json) inside a private, app-specific container in your personal cloud storage. This data is private to you and cannot be accessed by other applications or Stampr servers.

4. Location Data & Geolocation Consent

To provide features like "Stamp Verification" and "Nearby Discovery", the App requires access to your device's GPS location:

• User Consent: Geolocation access requires your explicit permission. You will be prompted on app launch or map access, and you can revoke permission anytime via device system settings.
• Precise Location: Used strictly when you initiate a stamp to verify physical proximity (geofencing).
• Offline Processing: In poor connectivity or no-signal areas, location data is verified entirely locally on-device against your local database without dispatching network requests.
• No Server Location Tracking: We never store your real-time GPS coordinates, movement paths, or location tracking logs on our servers.

5. Map Services & Tile Rendering (MapTiler & OpenStreetMap)

The App uses interactive maps rendered via MapTiler and OpenStreetMap data to display landmarks and check-in locations. When map tiles are loaded, your device transmits standard technical request headers (IP address, device user-agent, and tile grid coordinates) directly to map tile providers to serve map graphics. No personal identity data, user account details, or passport logs are shared with map tile providers.

6. Digital In-App Purchases & Payments (Google Play & Apple App Store)

If you purchase optional digital features (such as Premium Passes or Ad Removal), transactions are processed directly by Google Play Billing or Apple App Store In-App Purchases. Stampr does not collect, process, or store credit card numbers, bank account details, or billing addresses. All payment processing is handled securely by Google or Apple under their respective privacy policies.

7. Mobile Advertising (Google AdMob, UMP & Apple ATT)

The App uses Google AdMob to display banner, interstitial, and rewarded ads (allowing streak restoration). AdMob may collect device advertising identifiers, general location (if granted), and ad interaction metrics. For users in the UK and European Economic Area (EEA), we request explicit consent via the User Messaging Platform (UMP) and Apple App Tracking Transparency (ATT) framework before serving personalised ads. Consent choices can be managed anytime in App Settings.

8. Children's Privacy (UK Children's Code & COPPA)

Stampr is intended for general audiences aged 13 and older (or 16 in the UK/EEA without parental consent). We do not knowingly target, solicit, or collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can promptly delete it.

PART II: WEBSITE PRIVACY POLICY (stampr.info)

1. Website Data Handling & Server Logs

When you visit our website (stampr.info), our web servers process standard, technical server log data required for website delivery and security. This may include your IP address, browser type, operating system, referring URL, and page timestamps. These server logs are processed strictly for website security, routing, and denial-of-service protection.

2. Cookies & Tracking Technology

Our website is designed to be lightweight and privacy-respecting. The public website does not use tracking cookies, third-party advertising cookies, or cross-site behavioral tracking scripts.

3. Direct Inquiries & Contact Communications

If you contact us directly via email (support@stampr.info), we will use your email address and message contents solely to answer your support inquiry. We do not sell or add support email addresses to marketing lists.

PART III: GENERAL PROVISIONS & REGULATORY RIGHTS

1. Lawful Basis for Processing

Under UK GDPR, we must establish a valid lawful basis to process your data. We rely on the following bases:

• Consent: For accessing your device location (to verify stamps) and for serving personalised mobile advertisements (via UMP/ATT). You can withdraw this consent at any time in your device settings.
• Legitimate Interests: For processing website server logs (to ensure network security, prevent fraud, and maintain stability) and for processing direct support email inquiries (to provide customer service).
• Contract: For processing optional in-app purchases (handling digital delivery).

2. Data Retention Periods

We retain data only for as long as necessary to fulfill the purposes outlined in this policy:

• Mobile App Data: Stored locally on your device indefinitely until you choose to delete the App or use the "Reset Progress" feature.
• Server & Infrastructure Logs: Retained securely by our hosting and infrastructure providers (including Vercel, Supabase, and Krystal) for up to 30 days before being automatically deleted.
• Support Emails: Retained for 2 years following the resolution of your inquiry, after which they are securely deleted.

3. Data Processors & International Transfers

We use trusted third-party service providers (processors) to deliver our services, including Vercel (website hosting), Supabase (backend infrastructure), Cloudflare (security and content delivery), and Krystal (UK-based hosting). We also use Google, Apple, and map rendering services.

While some of these providers (like Krystal) process data strictly within the UK, others may process or store technical data on servers located outside the UK or European Economic Area (EEA), particularly in the United States. In these instances, we ensure your data is protected by relying on legally recognised safeguards, such as the UK International Data Transfer Agreement (IDTA), standard contractual clauses (SCCs), or adequacy decisions.

4. Comprehensive Data Rights (GDPR)

Under UK GDPR, you have the following rights regarding your personal data. Because our mobile application uses a PII-minimised local architecture, you maintain direct control over most of these:

• Right of Access & Portability: You can view all saved passport entries directly inside the App. You can export your data via the backup feature.
• Right to Erasure (Right to be Forgotten): Stampr does not require user accounts. Selecting "Reset Progress" in App Settings or uninstalling the App permanently erases all local data on your device and disassociates your anonymous key.
• Right to Rectification: You can edit or delete individual personal notes and entries within your local App passport.
• Right to Restriction & Objection: You have the right to object to processing based on legitimate interests or request processing be restricted. You may contact us directly to exercise this right regarding support communications.

5. Automated Decision-Making & Profiling

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, nor do we engage in user profiling.

6. UK ICO Supervisory Authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been infringed.

7. Contact & Corporate Identity