Privacy Policy

fobtap ("we") provides profile pages you share by tapping an NFC key fob. This policy describes what we collect and why. The short version: we store what you put on your profile, the minimum needed to run accounts, and privacy-preserving tap statistics — and we do not sell any of it.

What we collect

• Account data: your email address, sign-in method, and the handle you choose. If you sign in with Google, we receive your name and avatar from Google.
• Profile content: the links, social handles, text, and images you add. This content is public by design — it is what a tap displays.
• Tap statistics: when a fob is tapped we record a timestamp, a coarse country code, and a salted hash of the visitor's browser signature that rotates every day. We cannot identify a visitor from it, and it cannot be used to follow a visitor across days.
• Contact form: if you ask us about fobs for your organization, we keep the name, email, organization, and message you send until the conversation concludes, then for up to 12 months.

What we do not do

• No advertising, no sale of personal data, no third-party analytics or tracking scripts.
• No cookies beyond the session cookie needed to keep you signed in.

Where your data lives

We run on Vercel (hosting and image storage), Neon (database), and Resend (transactional email). Each processes data on our behalf under their own data-processing agreements.

Your rights

You can edit or delete your profile content at any time from the dashboard. To delete your account and all associated data, or to exercise any data-protection right (access, rectification, erasure, portability), email us and we will respond within 30 days.

Contact

Questions about this policy: use the contact form on our home page.