Privacy
Last updated: October 14, 2026
This is an English translation, provided for convenience, of the French privacy policy (French version). If the two versions differ, the French version prevails.
The principle
StampyWallet is designed to work with as little data as possible. What is not collected does not need to be protected.
If you are a merchant
- Your account: your email address, and a password if you set one (stored hashed, never in plain text).
- Your activity data: your customers, stamps and rewards. They belong to you: you can export them (CSV) or delete your shop and your account at any time, from the settings.
If you are a shop's customer
- Your card holds an optional first name and your stamps. If the shop asks for it, the page where you add the card may also offer your name, your birthday (day and month, never the year), your email or your phone number. Each field is shown on the page, nothing is asked outside it, and you can erase everything from your card. If you choose to receive your card by email, the address is used for that sending and is then not kept.
- You can erase your card and your data yourself, from the card, at any time.
- If you add the card to Apple Wallet or Google Wallet, Apple or Google process the pass data under their own policies.
Audience measurement
The public pages of the site are measured by an internal counter without cookies: the IP address is used once to determine a country and is then immediately discarded; it is never recorded. No identifier makes it possible to link two days of visits. These statistics are kept for fifteen months. This counter works without asking for your consent because it stores nothing on your device and does not follow you anywhere else.
To learn which pages and buttons lead to a signup, the site and the
merchant screens also use a journey measurement of our own,
served by stampywallet.com itself. It sets two cookies: sw_vid,
an identifier drawn at random (nothing derived from you), kept for thirteen
months, and sw_sid, which marks a visit and expires after thirty
minutes of inactivity. It records the pages viewed, the time spent and how
far down the page you scrolled, clicks on links and buttons, the site you
came from (its name only) and the campaign of an ad. The browser, device and
language are only kept as broad families ("mobile", "Safari", "en"), the
country as two letters. Your IP address is never recorded, nothing is passed
to a third party, and nothing follows you on other sites. If you create an
account, the identifier is attached to your account so we can tell which
pages led to signups and subscriptions: it is used for those statistics only.
The data is deleted after 395 days. This measurement does not go through the
banner, because it only produces our own audience statistics; you can refuse
it here at any time, and it stops by itself if your browser sends the Global
Privacy Control signal. Customers' cards carry none of it.
This browser is counted by the journey measurement.
You have refused the journey measurement on this browser: nothing is sent any more.
Your browser sends the Global Privacy Control signal: it is not counted.
The site also uses Google Analytics, which does store data on your device. It therefore only runs after your consent: until you have answered the banner, and if you have declined, no Google script is loaded. Your answer is kept for six months in a cookie, and you can change it whenever you like through the "Cookies" link at the bottom of the page. This consent covers the public pages and the merchant screens. Customers' cards carry no third-party measurement, with or without consent.
Google ads
If you reach the site through an ad, the page address carries the campaign name and a click identifier set by Google. The campaign name, which identifies no one, is kept with your account if you sign up: it tells us which ads are useful. The click identifier is only kept with your consent in the banner: it then makes it possible to tell Google Ads, without your address or your name, that this click led to a signup, a trial or a subscription. It is erased after one hundred days.
Advertising retargeting
The banner only names the ad network you arrive through, and your consent only covers that one. If you arrive directly or through Google and click "Accept all", the Google Ads tag is loaded together with Google Analytics: Google may then count you among StampyWallet's visitors and show you our ads on other sites and apps (retargeting). Google processes this data under its own policy; you can manage the ads Google shows you at myadcenter.google.com. If you decline, or do not answer, nothing is loaded and the site works the same. You can change your mind at any time through the "Cookies" link at the bottom of the page.
ChatGPT ads (OpenAI)
If you arrive through a ChatGPT ad, the banner asks for your consent to OpenAI's measurement pixel; if you accept, it is loaded together with Google Analytics, without the Google Ads tag. It tells us whether an ad seen in ChatGPT led to a visit or a signup, and stores two cookies on your device for that. We do not send it your name or your email address. OpenAI processes this data under its own policy. If you decline, or do not answer, it is not loaded; you can change your mind at any time through the "Cookies" link at the bottom of the page.
Visitors in the United States
US privacy laws do not require consent in advance: they give you the right to opt out. If you visit the site from the United States, Google Analytics, the Google Ads tag and OpenAI's pixel are therefore loaded without a banner, unless your browser sends the Global Privacy Control signal, which we honor as an opt-out. The "Do Not Sell or Share My Personal Information" link at the bottom of every page lets you opt out at any time. We do not sell personal information.
If you connect an assistant (ChatGPT, Claude, Le Chat)
- You can link your shop to a conversational assistant. It sees nothing until you have authorized access on our page, shop by shop; you can choose read-only access, and cut access at any time in Settings › Assistants.
- What the assistant can read: your figures, your settings, your card, and from your customers the first name, the stamps and the visit dates. It never receives their email, their phone number, their birthday or their card code.
- What it can do: prepare a message, change a setting, invite a team member. It is always shown as a preview first, and done only after your agreement in the conversation. It can neither add stamps, nor give rewards, nor delete customers, nor touch your subscription.
- What goes through the assistant is also processed by its publisher (OpenAI, Anthropic, Mistral…) under its own policy. We only keep the fingerprint of access tokens, never the tokens themselves, nor the content of your conversations.
- Without an account, an assistant can also design a card and put it into service: the shop is created with what you provided (name, reward, style), without an email address, and you become its owner by following the link you receive. A shop that is never claimed is deleted.
Where and for how long
All data is hosted in France (OVH, Strasbourg). Technical logs keep neither the full addresses of pages nor their parameters. A deleted account is erased, not archived.
Your rights
Access, rectification, erasure, portability: write to bonjour@stampywallet.com. You can also contact the CNIL, the French data protection authority (cnil.fr).