/stamp Privacy Policy

A customer joins a shop's programme with a phone number. From then on /stamp holds that number, which shop they joined, and how many stamps they have. That is nearly all of it.

There is no advertising in /stamp, nothing that follows anybody to another website, and nothing sold or rented to a third party. A shop sees its own members and nobody else's.

Joining a shop's programme creates a record of:

• Your mobile number, which is how /stamp knows the card is yours. It is the only thing you have to give, and you give it once. A name is optional and can be left blank forever.
• Which shops you joined, and when. One membership per programme.
• Your stamps and your rewards: how many slots are filled, which cards you finished, and which rewards you have collected.
• Each tap: the time, the stamp that was tapped, and whether it was accepted. This is what stops one stamp being used a hundred times in an afternoon, so it is kept whether the tap worked or not.

What is not there. No payment details: /stamp never takes money from a customer, so there is no card to store. No address, no date of birth, no email unless you write to us yourself. No location beyond which shop stamped you. No advertising identifier, and nothing that follows you off this service.

What the shop can see. Its own members, their stamps and their redemptions. It cannot see anything about the other shops you have joined, and no shop can see another's members. That separation is enforced in the code that reads the database, not by what a screen chooses to display.

Leaving. Every card has a Leave programme control. It closes the membership and stops the card earning. Ask us at hi@slashui.com and we will delete the lot.

The members of your programme are your customers, and the record of them is yours. We hold it for you and we do not use it for anything else: not to market to your customers, not to introduce them to another shop, and not to sell to anybody.

• Your shop: its name, address and contact number. The address is used on the label when stamps are posted to you, and your customers never see the phone number.
• Your staff: a name, a role, and a four-digit PIN held only as a hash. The PIN is never shown back to anyone, never written to a log, and never returned by anything the software can be asked for. Not even you can read it; you can reset it.
• Your orders: what you ordered, where it went, and its status. The payment itself is Stripe's. We never see your card number.
• Being listed: whether your shop appears in the public /stamp directory is a switch in your settings, and it is off until you turn it on.

• Running the programme: adding a stamp, completing a card, issuing a reward, letting staff redeem one.
• Stopping abuse: the tap log and the counters are what make a copied stamp, a replayed link or a hundred taps in a minute fail. A loyalty scheme with no fraud controls is a loyalty scheme somebody else is spending.
• Telling the shop what happened: its own dashboard and, if it asks for one, a summary at closing time.
• Support: answering a shop or a customer who has written to us.

Only the providers that make the service work, each acting on our instructions under its own processing terms:

• Google Cloud hosts the service and its database, in Singapore.
• Twilio sends the one-time code that verifies a phone number at signup.
• Stripe takes payment when a shop orders stamps, and holds the card details we never see.
• Resend delivers the few emails /stamp sends: a shop admin's invitation, and a daily summary where one is switched on.

Nobody else, and no advertising network at all. We do not sell, rent or trade personal information, and there is no arrangement under which somebody else's advertising gets to see who walked into your shop.

A membership and its cards last as long as the programme does. Leaving a programme closes the membership and keeps the history, so a card you finished stays a card you finished; asking us to delete your account removes it. Tap and claim records are kept as a running history of the programme, because they are what a shop settles a dispute with and what shows a reward was actually handed over. If you want yours gone, write to us and we will do it.

/stamp is for shops and their adult customers, and it is not directed at children. We do not knowingly create an account for anyone under 13. If you believe we have, write to us and we will remove it.

If what /stamp holds or sends ever changes, this page changes first, with a new date at the top. We will not quietly start collecting something and update the wording afterwards.

Questions about this policy, or a request to see or delete what we hold about you: hi@slashui.com. A person answers.

Help with the product itself is on the /stamp support page. This policy covers /stamp only; the Slash UI privacy policy covers this website, including the /stamp waiting list form.

Slash UI Pte. Ltd.
Singapore