Privacy policy

Short version: we do not know who you are, and we intend to keep it that way.

Last updated: 2026-09-03

What we do not collect

No account is needed to scan a sticker or leave a trace.
We store no plain IP address, no advertising identifier and no browser fingerprint.
We sell nothing, to nobody.

The number of scans per sticker, as counters and daily aggregates.
An irreversible technical fingerprint, computed from your IP address and browser with a server secret and a salt that changes every day. It is used only to avoid counting the same scan twice and to limit spam. It cannot be traced back to you.
The content you publish on purpose: nickname, message, trace, optionally a country.
For ambassador applications: name, e-mail, country and motivation.
For a message sent through the contact form: name, e-mail and the message itself, forwarded by e-mail to the operator.

Raw scan events are deleted automatically after 30 days. Only aggregated counters remain.
Traces and claimed pages stay for as long as the sticker exists.
Ambassador applications are kept for the time of the review, then archived.
A contact message lives in the operator's mailbox, long enough to answer it. It is stored in no database.

A sticker owner can change or delete their nickname and message at any time from their dashboard.
To have a trace or an application deleted, write to us from the contact page under “Content or data removal”, quoting the sticker's code. Instagram stays a fallback.
Under the GDPR you have a right of access, rectification and erasure over data concerning you.

The site uses Vercel Analytics, and nothing else: no measurement cookie, no identifier that follows you from one site to the next. This tool is independent from the scan counting described above.