What we store and how long for

Scan data, retention, strict privacy mode and deletion.

Retention

Individual scan events are kept for a set period and then rolled up into daily totals, which are kept for years. The totals answer "how did last spring compare" without keeping a row per person indefinitely.

Strict privacy mode

Turn it on and location is recorded only to country level and the visitor fingerprint is dropped entirely. Reports lose their unique-visitor counts, which is the honest trade rather than a hidden one.

Why there is no GPS option

Several competitors offer a switch that makes every scanner see their browser's location prompt, and report the exact coordinates of whoever agrees. We do not, and it is worth saying why rather than leaving a hole in a comparison table.

**The prompt is not the consent this needs.** Reading a sensor on somebody's phone requires consent that is informed, specific and as easy to withdraw as it was to give. The browser's dialog names a web address — not who is collecting, what for, how long it is kept, or who else sees it. A product that treats it as the whole story leaves the customer who turned the switch on carrying an obligation nobody described to them.

**It does not work as well as it is sold.** Most people never answer the prompt at all. What comes back is a small, self-selected group — and it is presented as though it described everybody who scanned. And a granted permission can still return a position accurate to a kilometre or more, which every product in this category draws on a map as a precise pin.

**Where it genuinely helps, we do it.** If you need somebody's position in order to send them to the right branch, a routing rule asks for it, uses the answer to make that one decision, and does not keep it. That is a question the person is being asked in order to be helped, which is a different thing from asking so a figure can be filed.

Deleting things

Clear a code's analytics from its own page. Close the company from Settings, and everything goes — codes, cards, pages, forms, files, analytics — after a confirmation that names what will be destroyed.