Privacy

What we store

• A random ID stored on your device, so the passport can remember which spaces you've stamped. We never see your name, email, or any account.
• Your ratings (numbers from 1 to 5), the chips you tap, and any optional note.
• The timestamp of each rating.

What we don't store

• No names, no emails, no phone numbers.
• No IP addresses, no browser fingerprints, no analytics trackers.

How long we keep it

Within 7 days, individual ratings are summarised into anonymous totals (per space, per day), and the raw rows, including your device ID and any free-text note, are deleted. The summaries contain no personal data, so they sit outside UK GDPR's scope. An automatic job runs daily, and admins can trigger an earlier purge at any time. Every deletion run is recorded in an internal audit log.

This follows the storage limitation principle (UK GDPR Article 5(1)(e)), keeping personal data only as long as needed.

Notes

The free-text note field is optional. Please don't include personal information about yourself or other people. Notes are stored alongside the rating and removed when the row is summarised, within 7 days at the latest. Aggregates keep flag counts only, never note text.

Clear this device

You can wipe the local device ID and cookie at any time. New ratings from this browser after that won't be linkable to your earlier ones.