Privacy policy

Working draft for the pilot (Plovdiv, launching 1 October 2026). The texts will be reviewed by a lawyer before the public launch; changes are marked with a date. Last updated: September 2026.

Rules: Participation terms · Terms of use · Privacy

Privacy policy

We keep as little data as possible, for as short a time as possible. This is not just a rule: it is part of the methodology, because data that does not exist cannot be traded or leaked.

1. What we read from the receipt

Only what is in the QR code: fiscal memory number, receipt number, date, time and amount. We do not know what you bought, we do not keep a photo of the receipt and we do not ask for access to your photo gallery. The camera is used only while we read the code, and no images are stored.

2. A hash instead of the receipt

The receipt is stored as a fingerprint (SHA-256 of the memory number, receipt number, time and amount) together with the venue, the price range and the time of the rating. The fingerprint is used only for the “one receipt, one rating” rule. The raw text of the QR code is deleted after 30 days.

3. No photos

We do not accept or keep photos of receipts, venues or people. If you send us a photo through another channel, we delete it after the check.

4. Pseudonymous profiles

A rater profile is a random identifier in a cookie on the device. We do not require a name, email or phone number for you to rate. If you sign in with email and password, Google or Facebook, we keep your email, name and (optionally) profile photo so that you can see your history in one place; your ratings remain pseudonymous in public. We never publicly link a rating to a person.

5. Location

When you scan, we may ask for your approximate location to check that you are near the venue. It is used only at the moment of the check and is not stored as a history of your movements.

6. Reports and contact forms

When you submit a report, contact details for a reply are optional. They are seen only by the team checking the case, are not passed on to the company and are deleted once the case is closed. Messages from the contact forms are kept for as long as needed to reply.

7. Companies and institutions

Companies see only summaries by venue and by measure. We provide institutions only with aggregated public data; data on a specific venue is provided only where required by law.

8. Your rights

You can ask for your profile and the data linked to it to be deleted. The aggregate indexes do not change, because they contain no personal data. Write to us through the contact form.