Last updated: July 2026
When you tap an NFC coaster at a store using hndrdfold, we collect: a timestamp of the tap, your device type (iPhone or Android), and your browser language setting. This data is anonymous by default.
If you join the passport program by entering your email address, we additionally collect and store: your email address, a device identifier (stored on your device — see “Device recognition and cookies” below), your stamp history (dates, locations, receipt references), and any earned rewards. Your email is your identity across devices.
If you send a receipt to your email or WhatsApp, we process your contact information solely for delivery. We do not store it for marketing unless you have separately joined the passport program.
If you opt in to offers by ticking the marketing consent box, we store the email address and/or phone number you provide so the store can send you offers by email, SMS, or WhatsApp. This is separate from receipt delivery, and you can withdraw it at any time.
The receipt data shown on your screen (items, prices, VAT, payment method) comes from the store's point-of-sale system. We display it to you and store it temporarily. We do not store your payment card number. The last 4 digits may be shown if the POS system includes them, but we do not record the full card number.
We process anonymous tap analytics under legitimate interest (GDPR Article 6(1)(f)) — the store has a legitimate interest in knowing how many customers use the digital receipt service.
Passport account data (email, stamps, rewards) is processed under consent (GDPR Article 6(1)(a)) — you explicitly opt in by checking the consent box and submitting your email.
Wallet pass saves are processed under consent (GDPR Article 6(1)(a)) — you actively choose to save the offer.
Aggregated, anonymised market insights are covered by the consent you give when joining the passport, together with our legitimate interest in statistical analysis — see “Aggregated market insights” below.
Marketing messages (email, SMS, or WhatsApp) are sent only under consent (GDPR Article 6(1)(a), and §10 of the Danish Marketing Practices Act) — you give it by ticking the offers box, and can withdraw it at any time.
If you join the passport program, we store your email and stamp history for as long as your account is active. We use this data to: track your stamp count, notify you when you earn a reward, and identify you on return visits.
We will only email you about your passport status and earned rewards. We will never sell your email to third parties or use it for unrelated marketing. You can unsubscribe from non-essential emails at any time.
hndrdfold also uses visit data to produce aggregated, anonymised market statistics across all participating venues — for example, which drink categories are growing in a city, or how often guests return. We share these statistics with venues, brands and partners.
These statistics are aggregated and anonymised so that they cannot identify you. We never sell individual-level data: no venue, brand or partner receives your email, phone number, receipts or personal visit history through this product.
For this purpose hndrdfold acts as an independent data controller. The legal basis is your consent (GDPR Article 6(1)(a)), given when you join the passport, together with our legitimate interest (Article 6(1)(f)) in producing statistical insights (Article 89). You can withdraw at any time by asking us to delete your data — see “Your rights” below.
Receipt data is stored for 90 days, then automatically deleted. Anonymous tap analytics (counts, timestamps, device types) are retained for reporting purposes. Passport account data (email, stamps, rewards) is retained until you request deletion.
The store where you made your purchase is the data controller. hndrdfold (operated by Félix Ménard-Brière, CVR 46479262) is the data processor, acting on behalf of the store. A Data Processing Agreement governs this relationship for every store.
For features that span more than one store — for example, recognising that you are a returning guest across venues, or improving the service — hndrdfold decides the purpose of the processing and therefore acts as an independent data controller for that limited activity.
Under GDPR, you have the right to access, correct, or delete any personal data we hold about you. If you have a passport account, you may request deletion of your email, stamp history, and all associated data by contacting us. We will process deletion requests within 30 days.
To deliver your receipt and let you re-open it on the same phone, we set one strictly-necessary first-party cookie (hf_device_token) on your device. It is the credential that lets your device — and only your device — re-open the receipt you were shown. It is stored for up to 60 days, is not readable by other websites, and is not used for advertising. You can remove it at any time by clearing your browser data.
To count how many distinct devices use the receipt service, we also derive a rotating, one-way device signal (a daily hash of network and browser characteristics). This signal is pseudonymous and is not linked to your name or email unless you choose to join the passport program.
We do not use advertising cookies or tracking pixels, we do not use third-party analytics services such as Google Analytics, and we do not serve ads or sell your data.
Your account and receipt data are stored in the European Union (Supabase, Frankfurt, Germany). To run the service we rely on a small number of sub-processors. Some of them may process limited data (such as an email address, or the contents of a receipt you ask us to send) outside the EU/EEA under GDPR-approved safeguards (Standard Contractual Clauses):
We send your data only to the sub-processors needed to provide the service you asked for. A current list is available on request.
For data inquiries: felix@hndrdfold.com