Privacy

• sell, rent or share information about visitors with anyone — including the businesses on the cards;
• use advertising, tracking pixels, third-party analytics or social-media trackers;
• set cookies or store anything on your device when you view a card;
• store your IP address, your precise location, or any device identifier in our records;
• load fonts, scripts or trackers from other companies when you view a card (images come only from our own storage).

Like every website, our hosting providers keep standard server logs (which include IP addresses) for a short time to keep the service secure. We don't use them to track or identify visitors.

To show each business how often its card is used, we count anonymous visits and taps on its buttons. For each one we store only:

• which card and which button, and when;
• the type of device (phone, tablet or computer);
• the name of the website that linked to the card, if any (just the domain, never the full address);
• a scrambled code that changes every day, used only to avoid counting the same visit twice. It is made with a secret key and can't be turned back into your IP address or used to recognise you on another day.

These records are deleted automatically after about 13 months.

“Save contact” downloads the business's public details to your phone. Your phone always asks before adding anything; we never see your contacts.

Buttons such as Facebook, Instagram or a booking page take you to those sites, which have their own privacy policies. We tell them nothing about which card you came from.

All pages are served over encrypted HTTPS. Business details are managed only by the TapAccess administrator; the businesses themselves have no accounts that could be broken into.