Last updated: May 2026
When you tap an NFC coaster at a store using hndrdfold, we collect: a timestamp of the tap, your device type (iPhone or Android), and your browser language setting. This data is anonymous by default.
If you join the passport program by entering your email address, we additionally collect and store: your email address, a device identifier (stored in your browser's localStorage), your stamp history (dates, locations, receipt references), and any earned rewards. Your email is your identity across devices.
If you send a receipt to your email or WhatsApp, we process your contact information solely for delivery. We do not store it for marketing unless you have separately joined the passport program.
The receipt data shown on your screen (items, prices, VAT, payment method) comes from the store's point-of-sale system. We display it to you and store it temporarily. We do not store your payment card number. The last 4 digits may be shown if the POS system includes them, but we do not record the full card number.
We process anonymous tap analytics under legitimate interest (GDPR Article 6(1)(f)) — the store has a legitimate interest in knowing how many customers use the digital receipt service.
Passport account data (email, stamps, rewards) is processed under consent (GDPR Article 6(1)(a)) — you explicitly opt in by checking the consent box and submitting your email.
Wallet pass saves are processed under consent (GDPR Article 6(1)(a)) — you actively choose to save the offer.
If you join the passport program, we store your email and stamp history for as long as your account is active. We use this data to: track your stamp count, notify you when you earn a reward, and identify you on return visits.
We will only email you about your passport status and earned rewards. We will never sell your email to third parties or use it for unrelated marketing. You can unsubscribe from non-essential emails at any time.
Receipt data is stored for 90 days, then automatically deleted. Anonymous tap analytics (counts, timestamps, device types) are retained for reporting purposes. Passport account data (email, stamps, rewards) is retained until you request deletion.
The store where you made your purchase is the data controller. hndrdfold (operated by Félix Ménard-Brière, CVR pending) is the data processor, acting on behalf of the store. A Data Processing Agreement governs this relationship for every store.
Under GDPR, you have the right to access, correct, or delete any personal data we hold about you. If you have a passport account, you may request deletion of your email, stamp history, and all associated data by contacting us. We will process deletion requests within 30 days.
We store a device identifier (UUID) in your browser's localStorage to recognize returning customers. This is not a cookie. It does not track you across websites. You can clear it at any time by clearing your browser data.
We do not use cookies. We do not use tracking pixels. We do not use third-party analytics services. We do not serve ads.
For data inquiries: felix@hndrdfold.com