Privacy
Last updated: October 18, 2026
When someone taps a Tapora card
We record three things, and only three: the time of the tap, the channel (NFC chip or QR code) and the type of phone (iPhone, Android or other). That’s what powers the business’s statistics.
We keep no IP address, no identifier, no location and no lasting cookie. A 60-second technical cookie only prevents counting the same tap twice; it contains no identifier and expires on its own.
Link previews (messaging apps, social networks) and bots are redirected without being counted.
This website
This website uses no cookies, no analytics and no third-party scripts. Fonts and scripts are served from our own domain.
Business customers
For business customers, we keep what the service and billing require: business name, billing details, and an email for the monthly report if requested. Every monthly report includes a way to stop receiving it.
Hosting
Card redirects are served by Cloudflare; data is stored in a Supabase database and our management app is hosted by Render. These providers act on our behalf.
Contact and requests
Tapora S.E.N.C. (NEQ 3382462367), Québec. Person in charge of the protection of personal information: the partners of Tapora S.E.N.C. For any question, or to request access or correction: [email protected].