Privacy Statement

Stampd runs the service at stampd.eu and is built in Amsterdam. You can reach us at hello@stampd.eu.

The cafe where you got your card is a separate business that uses Stampd to run its own loyalty programme. The cafe decides to offer the card and what it offers on it; Stampd runs the system that does the work, on the cafe's behalf. Stampd is itself responsible for cafe owner accounts, billing, keeping the service secure, and the way the system works. You can contact either of us about your data, and we will make sure your request is handled.

Cafe owners and their managers

• Email address and password. Passwords are handled by our login provider; we never see or store the plain password.
• Cafe and business details, logo and loyalty card settings.
• The email addresses of up to 3 managers an owner adds, and which locations each may open.
• Billing details from our payment provider, Stripe. We do not store card numbers.

Loyalty card members

You get a card with no account and no password. When you join we create a card number, which is also the card's QR code.

On an ordinary card you may add your name, your usual order and your birthday from your own card page, and change or remove them there. Your card page never shows them back; it only shows whether a detail is saved. You may also add an email address there. We never ask for any of this when you join, and your card works exactly the same without it.

A Friends and Family card or a team card is different: the cafe issues it to you personally and enters your name and email address when it invites you.

Cafe staff see your name and your usual order on their screen when your card is scanned. Your birthday is not shown to anyone.

We keep a record of what happens on the card: stamps, rewards, visits and when they happened. This is what makes the programme work. The programme itself gives some things to every card, such as the welcome stamp when the cafe offers one, streak rewards and the birthday treat. Your birthday is used for that one thing: if the cafe has switched the birthday treat on, and you have visited at least once and your card is at least 30 days old, we put a treat on your card on the day and send you a message about it.

Wallet

If you add the card to Apple Wallet, your phone gives us a device code and a push token so we can tell it when the card has changed. If you add it to Google Wallet, Google holds a copy of the card: the card number, your stamps and rewards, the cafe's name and any message on the card. Neither includes your name, email address or birthday. If the cafe switched it on, the card carries the cafe's location so your phone can show it when you are nearby; your phone decides that, and we never receive your location.

Sales data

A cafe may upload its own payment export. We keep only the payment reference, time, amount, currency, payment method and status. We do not receive names or card numbers. A payment is linked to a card only when a card was scanned within moments of it, and that link is an estimate, never a confirmed identity.

Your card shows messages on your lock screen. Some come with the card itself: a stamp, a reward ready, a streak, the birthday treat. Others are sent by STAMPER, the part of Stampd that works the loyalty programme for the cafe. They include offers such as bonus stamps if you come by soon, gifts and surprises, a message when you have not been in for a while with a reward waiting for you, and deals from the cafe on a rainy day. These are offers from the cafe, so they are promotional.

STAMPER decides who gets what from the card's own history: how often you usually come, when you last came, and your stamps and rewards. Each card has a weekly limit on these messages. None of this has legal or similarly significant effects on you; at most it decides which offer reaches your card.

About 1 in 10 cards are chosen at random, when the card is made and for good, not to get STAMPER's own messages, so we can check that they really help. If yours is one of them, you keep the card, your stamps and rewards, and a birthday treat if the cafe offers one; you only miss what STAMPER does on his own: his messages, and the surprise gifts and deals he sends.

To stop the messages, switch off notifications for the card in your wallet, or remove the card from your wallet.

We email a member only to confirm a request about their data, such as removing an email address, withdrawing details or asking for a copy of their data. We send no newsletters. Owners and managers get emails about their account and their cafe, such as sign-up and password links, monthly reports and alerts. During its free month and the two weeks after, a new business also gets short emails from our founder about getting started, in the language chosen at sign-up; every one of them has a link to stop them, and stopping them never stops account emails.

• To run the loyalty programme: issue cards, count stamps, give rewards and keep your wallet card up to date.
• To send the messages described above on the cafe's behalf.
• To give the cafe owner reports on how the programme is doing. Reports to owners use counts; where a single customer is mentioned, it is by a short card code.
• To keep the service secure, for example by limiting how often a page can be tried from one address.
• To bill cafe owners for their subscription.

We never sell data and never use it for advertising outside the cafe you joined.

• Legitimate interest of the cafe and of Stampd in running, securing and improving the loyalty programme, including its messages. You can object (see Your rights).
• Consent for the optional details you add yourself (name, usual order, birthday, email address) and for wallet notifications. You withdraw it by removing the detail, switching notifications off or removing the card.
• Contract for cafe owners, to provide the service and bill the subscription.
• Legal obligation where we must keep records, for example for tax.

These providers handle data for us, each only for its own job:

• Supabase: our database and the owner and manager logins. Everything we store is stored here.
• Vercel: hosts the website and runs the service. It sees every request, including your IP address.
• Resend: sends our emails, so it receives the address, subject and text of each email.
• Apple: receives the push token and an empty signal that your card changed; nothing else.
• Google: holds your Google Wallet card as described above, and, if the cafe uses it, gives us the cafe's public review rating.
• Stripe: handles owner subscriptions and, when a cafe sells gift cards or event tickets, the payment. A buyer pays on Stripe's own page; we send Stripe no member details.
• Upstash: counts attempts to keep the service safe from abuse. It briefly holds IP addresses, owner email addresses and card numbers, for at most a day. When the WhatsApp channel is on, it also keeps the owner's phone number and their chat with STAMPER for up to 24 hours.
• Anthropic: writes some summary sentences on the owner's dashboard and, when the WhatsApp channel is on, answers the owner's chat there. It receives counts, the owner's own offer texts and the owner's chat, never a customer's name, email address, birthday or usual order.
• Twilio: carries WhatsApp messages between STAMPER and cafe owners whose number we have added. Owners only, never customers.
• Open-Meteo, Komoot (Photon) and OpenStreetMap: receive the cafe's location or address, for the weather and the map. The map on the owner's location page loads from OpenStreetMap, so OpenStreetMap also sees that owner's IP address. Customers never load it.

Some of these providers are based outside the European Economic Area. Where data leaves the EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

On a Friends and Family card, your name, birthday, usual order and email address are deleted automatically 24 months after your last visit, or after the card was made if it was never used. On a team card they are kept while the card is in use and deleted when the cafe stops the card. When the cafe stops a Friends and Family card, they are deleted straight away too. You can also withdraw them yourself at any time.

On an ordinary card, the details you added are kept until you remove them or the card is erased.

Your stamps, rewards and visit history stay with the card while the cafe uses Stampd, so a card you come back to is still as you left it. We do not yet delete data automatically when a cafe stops using Stampd; the cafe, or you, can ask us to, and we will.

Owner account data is kept while the account exists and as long as the law requires us to keep records.

Under the GDPR you can ask to see, correct, erase or receive a copy of your data, and you can object to use based on legitimate interest.

Members: on an ordinary card you add, change or remove your name, usual order and birthday yourself from your card page. You can remove your email address there too; we confirm that by a link sent to that address, because the link to your card page is public and cannot by itself prove the card is yours. On a Friends and Family or team card, the cafe changes the details, and you can withdraw them all yourself from your card page, again confirmed by a link sent to the address on the card.

You can ask for a copy of your data from your card page; we email a link to the address on your card, so this needs an email address on the card. The copy holds the card's record: stamps, rewards, visit dates and the messages we sent. Your name, birthday and usual order appear in it only as saved or not saved, because a mailbox alone does not prove the card is yours. For a full copy, ask the cafe or email hello@stampd.eu.

To erase the whole card and its history, ask the cafe where you got it (they can delete it for you) or email hello@stampd.eu. That goes through a person on purpose: we will not ask you for new details in order to delete you.

Cafe owners and managers: email hello@stampd.eu.

You can also complain to a data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

We use no advertising or tracking cookies. What your browser stores for us is explained on the cookie page.

Stampd is not directed at children under 16. If you believe a child has joined, contact us and we will delete the data.

We update this statement when the service or the law changes. The version is at the bottom of the page. Cafe owners are asked to agree to a new version at their next login.

For any privacy question or request, email hello@stampd.eu.