Privacy Policy

1. Controller and contact

tagowner.app is the data controller for personal data processed by Tagowner. We process personal data under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act. For privacy questions or requests, email tagowner@tagowner.app.

2. Information about owners and administrators

We process account and profile details, contact and travel details, tag settings, photos, reward settings and activity log records. The owner chooses which contact details a finder can see and when they are disclosed.

Activity records for signed-in owners and administrators include available technical information: IP address, approximate country, city and region, network provider and network number (ASN), browser and major version, operating system and version, device type, up to five requested language tags, browser language, time zone, screen and window size, display pixel ratio, light or dark preference, touch support and connection type. Where the hosting edge exposes them, HTTP protocol and TLS version are included. We record only the origin of a referring website, never its path or query, and a fixed application page path without queries, tag tokens or other identifiers.

These are ordinary browser and request details collected without permission prompts. We do not probe canvas, audio, installed fonts or hardware to create a fingerprint, and add no third-party analytics scripts. Browser-reported details and location estimates may be missing or inaccurate, including when using a VPN. Failed sign-in attempts may also be logged. For incoming email notifications, we log available sender network and connection information, not browser details.

3. Information about finders

When a tag is reported lost, we record scan timestamps and available technical information, including the finder's IP address, approximate country, network provider, browser and operating system. Some information may be unavailable depending on the request. If the finder submits a request, we also process their email address, message and any photo they provide.

4. Why we use information

We use information to provide the service, help return items and notify owners. Technical activity records help with security, fraud and abuse prevention and auditing administrator actions. Photos are checked automatically for inappropriate content and may be reviewed by authorised administrators. Technical error reports help us maintain the service.

5. Legal basis

We process owner account and service data to perform our contract to provide Tagowner (GDPR Article 6(1)(b)). We process finder data on the basis of legitimate interests in connecting finders with owners and returning items. Technical activity data about owners, administrators and sign-in attempts is processed on the basis of legitimate interests in security, fraud and abuse prevention and auditing administrator actions (Article 6(1)(f)). These interests must be balanced against your rights and freedoms.

6. How long we keep information

Scan data, finder submissions, uploaded finder photos and the site activity log are deleted within a maximum of 30 days. Case data, including finder photos in private storage, is deleted sooner when the owner marks the item recovered. Recovery does not delete owner-uploaded tag photos or owner account data. Owner account data is kept until the account is deleted; request account deletion by email.

General contact correspondence in our internal mailbox is separate from finder case data and is kept for handling the correspondence, rather than being included in the 30-day case cleanup.

7. Recipients and service providers

Owner-chosen contact details may be disclosed to finders according to the tag settings. Finder submissions are passed to the owner. Authorised administrators can access data for support, security and photo review.

Service providers include hosting and database services through Lovable Cloud, email delivery through Resend, AI image checking through the Lovable AI gateway, and currency rates through exchangerate.host. Currency conversion sends currency codes, not your contact details.

8. International transfers

The hosting, email and AI services we use may process personal data outside Denmark or the EU/EEA, including through their service providers. Where processing involves a transfer outside the EU/EEA, GDPR requires an appropriate legal basis for that transfer, such as an adequacy decision or contractual safeguards. Contact us for information about the safeguards applicable to your data.

9. Cookies and browser storage

Tagowner uses essential cookies and browser storage for sign-in, session operation and necessary interface settings. We do not add advertising cookies or advertising analytics. Technical error reporting is used to maintain the service.

10. Your rights

Subject to the conditions in applicable data protection law, you have rights to access, rectification, erasure, restriction, portability and objection. To exercise your rights, email tagowner@tagowner.app. We may need to verify your identity before acting on a request.

You have the right to complain to the Danish Data Protection Agency, Datatilsynet.