Privacy

When someone scans a code

We count the scan in an hourly total for the code, with the kind of device (phone, tablet or computer) and the rough place the network is in (country, region and city). We never record the person's IP address, their phone or browser details, or anything that tells one person from another, so counts are of scans, not people. Counts are kept for 2 years, and deleted sooner with the code or your account.

When you visit kifuna.com

• One cookie of our own holds a random ID for 395 days. It tells us which ads lead to paying customers and where people leave the sign-up steps.
• Another holds only your browser's time zone, such as America/Chicago, so your codes' scans are counted in your days.
• Google's ad tag loads on our public pages and the sign-up steps, so Google Ads can tell which ad clicks lead to purchases, and when you first pay it sends Google a scrambled form of your email. It never loads if your browser sends Global Privacy Control. We note the ad click and campaign a visit came from, never the full address of the page before.
• Microsoft Clarity loads on the same pages and records how people use them, such as where they click and scroll, so we can fix what gets in the way. It hides everything you type and everything about your account, and it never loads if your browser sends Global Privacy Control.
• Our ad reporting service gets the ad click and the steps of each visit and, once you have an account, your email address. When you start a plan, it tells Google Ads which click it came from and a scrambled form of your email, with when you paid and how much, so Google learns which ads lead to customers. If your browser sends Global Privacy Control, we stop giving it your click IDs and email address, so your orders aren't shared with Google Ads.

Your account and payments

• Each sign-in records its IP address and browser, for your account's security. They're in your data download.
• Stripe handles payments. We never see your full card number.
• You can download your data or delete your account at any time: see your account.

The full policy

The privacy policy lists everything we collect, who else handles it, how long we keep it and your rights.