Privacy Policy

• Account data — your email address, a display name, and the date and version of the terms and privacy policy you accepted.
• Profile data you publish — the child or pet display name, an optional photo, your emergency message, optional critical information, and notes such as behaviour, medical or communication details.
• Emergency contacts — the names, relationships and phone numbers you add so a finder can call you.
• Tag records — the public token printed into your tag link, its status, and a one-way cryptographic hash of its claim code.
• Security records — limited logs of failed claim attempts to stop guessing attacks, and administrative audit entries.

The profile attached to an active tag is public by design: anyone holding the tag or its link can view it without an account. Only the fields you choose to publish are served, and the server sends nothing else — your email address, account details, claim codes and any field you have switched off are never included in a public profile.

Tag links use long, unpredictable tokens and are excluded from search engine indexing, but treat a tag link as public. Anything you publish should be information you are comfortable a stranger seeing.

• We do not sell or rent your data, and we do not share it with advertisers.
• We do not track a tag’s location. SafeTag contains no GPS.
• We do not log who scans a tag or where they scanned it.
• We do not store claim codes in a readable form — only a one-way hash.

Photos are stored in a private storage bucket. Only your account can upload, replace or delete them. A photo is served on a public profile only while you have the “show photo” setting switched on for that profile; turning it off stops it being shown.

Data is encrypted in transit and at rest with our infrastructure provider. Database row-level security means each account can only read and write its own profiles, contacts and tags. Claim codes are hashed with a slow key-derivation function, and repeated failed claim attempts are rate limited.

We keep account and profile data for as long as your account is open, because an active tag needs it to work. Security and audit records are kept for a limited period for fraud prevention. When you delete a profile or your account, the associated profile data, contacts and photos are removed and the tags are deactivated.

• Edit or remove any field on a profile at any time from your dashboard.
• Disable a tag instantly so scanning it shows nothing.
• Request a copy of your data, correction of it, or full deletion of your account by emailing privacy@blackwelldesignsco.com from the address on your account. We respond within 30 days.

We use a hosting and database provider to run the site, store your data and send account emails such as verification and password resets. They process data on our instructions only. We do not use advertising or cross-site tracking cookies; the only browser storage we use keeps you signed in.

Accounts are for adults. Information about a child appears on SafeTag only because a parent or guardian chose to publish it. See our Children’s Privacy statement for details.

We will update this policy as the service changes and will raise the version number above. Contact us at privacy@blackwelldesignsco.com.