Stampa

Privacy Policy

Stampa is a digital loyalty-card service. This policy explains what we collect when you collect stamps or run a stamp card for your business, why we need it, who helps us process it, and the choices you have. We collect as little as the service needs.

Who we are

Stampa (stampa.ge) is operated by Stampa, Georgia (“Stampa”, “we”, “us”).

For any privacy question or request, write to hello@stampa.ge. We answer every request ourselves.

Our role and the role of businesses

Stampa provides the platform. Each business that runs a loyalty card on Stampa decides on its own why it runs the programme, which rewards it offers, which staff can approve stamps and how it treats its customers. For that customer relationship, the business is an independent controller of your data, and its own privacy practices apply as well as ours.

We are the controller for your Stampa account, for guest wallets, and for running, securing and improving the service. We process the stamps, rewards and visit history of a business’s programme to provide the service to that business and to you.

If you have a question about how a particular business uses your visit history, you can ask the business directly or contact us and we will pass it on.

What we collect

  • Guest wallets. You can collect stamps without an account. We then store a random, unguessable token in a secure cookie on your device and keep a matching wallet on our servers with the cards and stamps you have collected. The wallet is not linked to your name. If you choose to add an email address to a guest wallet, we store it so we can help you keep your stamps.
  • Account details. If you create an account, we store your email address and the name you give us. You may also add optional details, such as a profile photo and your preferred language. You can change them at any time in your account settings.
  • Sign-in data. We sign you in with one-time codes sent by email. We keep the active sessions on your account together with the IP address and browser type used to open them, so you can review your devices and so we can detect abuse.
  • Loyalty activity. When you scan a business’s QR code or a staff member approves a visit, we record the business, the card, the time, the stamps or rewards involved, and which staff member approved it. This history is the core of the service: it is how your stamps add up and how businesses see their programme.
  • Business and staff details. For businesses we store the business name, logo, card designs, locations, links to its Google profile, team members and their roles, invitations and settings.
  • Billing details. Paid plans are sold by Paddle, which collects your payment details directly. We never see or store your full card number. We receive and keep the subscription status, plan, billing country, invoice references and the email address of the business’s billing contact.
  • Technical data. Our servers handle IP addresses to deliver pages, enforce rate limits and protect against abuse. Rate-limit counters expire within minutes to hours.

We do not ask for or knowingly collect special categories of data (such as health or religious beliefs), and we do not buy data about you from anyone.

Why we use it and our legal basis

  • To provide the service you asked for: keeping your wallet and stamps, signing you in, letting businesses run their cards and approve visits. Legal basis: performance of a contract.
  • To send service emails: sign-in codes, staff invitations, security and billing notices. Legal basis: performance of a contract and our legitimate interest in keeping accounts secure.
  • To keep Stampa secure and working: rate limits, fraud and abuse prevention, error tracking and backups. Legal basis: our legitimate interest in a safe, reliable service.
  • To understand how the product is used, in aggregate, so we can improve it. Legal basis: our legitimate interest. We use cookieless analytics and do not build profiles of individuals.
  • To meet legal duties such as tax and accounting records. Legal basis: legal obligation.

We do not sell your personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Who processes data for us

We share data only with providers who help us run Stampa, under contracts that limit them to processing it on our instructions:

  • Railway: hosting of our servers, database, cache and file storage. Our database runs in Railway’s European region (the Netherlands).
  • Resend: delivery of transactional emails such as sign-in codes and invitations. Resend receives your email address and the content of the message.
  • Paddle: payments for paid plans. Paddle is the merchant of record, which means Paddle sells the subscription to the business, handles payment, tax and invoices, and acts as an independent controller for the payment data it collects. Paddle’s own privacy policy applies to that data.
  • Sentry: error tracking for our website, API and background jobs. Before an error report leaves our systems, we remove email addresses, sign-in codes, tokens and similar identifiers from it.
  • Umami: product analytics that we host ourselves on our own infrastructure. It sets no cookies, does not collect your IP address, and records pages and product events in aggregate only.
  • Google Fonts: some loyalty-card typefaces are downloaded from Google’s font service, which receives your IP address and browser details when your browser fetches a font.

Links to a business’s Google Maps or Google reviews page take you to Google, whose own privacy policy applies there.

We may also disclose data where the law requires it, or to protect the rights, safety or property of our users or of Stampa. If Stampa is reorganised or sold, data may move to the successor, who will be bound by this policy.

International transfers

Some of our providers are based in, or use sub-processors in, countries outside Georgia and the European Economic Area, including the United States. Where that happens we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision, as required by the Law of Georgia on Personal Data Protection and, where it applies, the EU General Data Protection Regulation.

Cookies and browser storage

We use only cookies and browser storage that the service needs to work. We do not use advertising or cross-site tracking cookies, so we do not show a cookie banner.

  • A session cookie that keeps you signed in.
  • A guest-wallet cookie that holds the token for your guest wallet. It is renewed while you use Stampa and lasts up to 180 days without use.
  • A language cookie that remembers whether you prefer English or Georgian.
  • Local browser storage for small conveniences such as interface preferences. It never leaves your device.

If you clear cookies or site data, a guest wallet on that device cannot be recovered unless you saved it with an email address or an account. That is why we suggest adding an email to a guest wallet you care about.

How long we keep data

  • Guest wallets are kept while you use them and are deleted automatically after 180 days without use. A guest wallet with a saved email address and unredeemed stamps is kept for up to 545 days without use, so you can still recover it. When you move a guest wallet into an account, the guest record is deleted 30 days later.
  • Account data is kept until you delete your account or ask us to.
  • Sign-in codes expire after 10 minutes. Sessions expire after 7 days without use.
  • Loyalty activity is kept for as long as the account or wallet and the business’s programme exist. A business may keep the record of visits it approved even after you leave its programme, in a form that no longer identifies you once your account is deleted.
  • Billing records are kept for as long as tax and accounting law requires.
  • Error reports are kept by Sentry for up to 90 days. Server logs are kept for a short period by our hosting provider and then deleted.
  • Backups are overwritten on a rolling schedule, so deleted data disappears from them within a limited time.

Your rights

Under the Law of Georgia on Personal Data Protection and, where it applies, the GDPR, you have the right to:

  • be told whether we process your data and get a copy of it;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to processing based on our legitimate interests;
  • receive data you gave us in a portable format;
  • withdraw consent at any time, where we rely on consent.

You can edit your name, photo and language in your account settings. For anything else, including deleting your account or a guest wallet, email hello@stampa.ge from the address on your account. We may ask you to confirm that the request comes from you. We answer without undue delay and within the deadlines the law sets.

If you think we have handled your data unlawfully, you can complain to the Personal Data Protection Service of Georgia (pdps.ge) or to the data protection authority where you live. We would appreciate the chance to fix it first.

Security

We protect data with encryption in transit (HTTPS), access controls that limit staff and business members to what their role needs, hashed guest tokens, short-lived sign-in codes, rate limits and audit logs of administrative actions. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

Children

Stampa is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of the page. If a change materially affects how we use your data, we will tell you by email or in the app before it takes effect.