Privacy

The short version

When someone taps one of our cards, we record that a tap happened — the card, the time, a rough device type, and a one-way scrambled value derived from their network address. We do not learn or store their name, email, phone number, location, or anything that identifies them.

What we store when a card is tapped

• Which card was tapped and which business it belongs to.
• The time of the tap.
• A coarse device description — for example "iPhone / iPad" or "Android". We keep the browser's user-agent string to derive this and never display or export it.
• A hashed network address. The IP address is combined with a private secret and put through a one-way hash, then truncated. We keep this only to recognise that two taps a minute apart are probably the same person, so a business's tap count reflects visits rather than repeated page loads. We never store the raw IP address, and the stored value cannot be reversed back into one.

We do not use cookies, tracking pixels, fingerprinting, or any third-party analytics on the redirect. There is no advertising network involved. Nothing is sold or shared.

Where taps go

Tapping a card forwards the phone to a destination the business chooses — normally their Google review page. Once forwarded, the visitor is on Google's site and Google's own privacy policy applies. We have no visibility into what happens there, which is also why we describe review counts as estimates rather than facts.

Business accounts

For businesses that hold an account with us, we store the business name, its Google review URL, the account email address, and a scrambled (hashed) form of the password. Passwords are hashed with scrypt and cannot be read back by us or by anyone who obtained a copy of our database — they can only be reset.

We also record when an account last signed in.

How long we keep things

Tap records are kept for as long as the business's account is open, because they're the history the business is paying to see. Sign-in sessions expire after 30 days. Password reset links expire after 24 hours. Failed sign-in records are discarded after 15 minutes.

Your rights

If you're a business we work with, you can ask for a copy of your data or ask us to delete your account and its records. Email [email protected].

If you tapped a card and want to know what we hold about you: because we deliberately store nothing that identifies you, we have no way to find "your" records, and no way to connect any of it back to you. That's the intended design, not an evasion.

Contact

chip.metric — [email protected]