Privacy

If you scan a tag

Opening the address on a tag is recorded so that the owner can be told that the item was found.

• Stored for each scan: the tag, the time, whether the QR code or the NFC chip was used, your IP address, the browser's user-agent text, a device class derived from it (iPhone, Android, computer, other), the browser language, and whether the request looked automated.
• The owner sees the time, QR/NFC, the device class and the language. The owner never sees your IP address or the user-agent text.
• IP address and user-agent text are erased 90 days after the scan. The remaining entry stays until the owner deletes the tag.
• To avoid notifying the owner twice for the same visit, a cookie named "tv" with a random number is set for 10 minutes, and keyed hashes of that number and of IP address plus user agent are stored with the scan. These hashes are erased after 24 hours.
• If you send the form: your message, and if you provide them your name, your contact details and your location (latitude, longitude, accuracy). Your location is only read after you tap "Share my current location". All of this is emailed to the owner and stays visible to the owner until the tag is deleted.
• A cookie named "lang" remembers the language you picked, for one year. It contains only "en", "de" or "th".

If you have an account

• Account: username, email address, password (only as an Argon2id hash), language, time zone, the time of your last login, and – if you enter them – a display name and a phone number.
• Tags: name, description, type, status, your message to the finder, lost note, reward text, what you chose to show to finders, and the picture. Uploaded pictures are re-encoded; location data and all other embedded information are removed, and the original file is not kept.
• Scans of your tags and messages from finders, as described above.
• Login: each login needs a one-time code sent by email. Only a hash of the code is stored, for at most 10 minutes. Password-reset links are stored as a hash for 60 minutes.
• Session: a cookie keeps you logged in. The session record on the server contains your IP address and browser user-agent text and is removed within a day after it ends. If you tick "Stay signed in", a second cookie keeps the login for 30 days.
• An account whose email address is not confirmed is deleted after 7 days.

Emails

Emails (confirmation links, login codes, scan notifications, finder messages) are handed to the mail system of the server this application runs on, which passes them on through its mail relay provider. Emails waiting to be sent are stored encrypted and removed once sent; failed ones are removed after 7 days.

Server logs and backups

• The web server keeps an access log (IP address, time, address requested, user-agent text) for 14 days.
• The application keeps an error log for 14 days. It records technical faults, not form contents.
• A backup of the database and the pictures is made every night and kept for 14 days. Deleted data can therefore remain in backups for up to 14 days.

What leaves this server

• Nothing is sent to third parties apart from the emails described above.
• Map links open openstreetmap.org in your browser only when you click them. No map is embedded.
• The WhatsApp button, where an owner enables it, is a plain link to wa.me that is only followed when you tap it.

Seeing and deleting your data

• Settings → "Download my data" gives you everything stored about your account, tags, scans and messages as a file.
• Deleting a tag removes its picture, its scans and all messages from finders.
• Settings → "Delete my account" removes the account with all tags, pictures, scans and messages at once.
• If you scanned a tag or sent a message and want that removed, contact the operator of this site (see the legal notice, if one is shown in the footer) or the owner of the item.