How Backmate handles personal information

Backmate is operated by CasettaLab. Backmate provides QR recovery pages for tagged items, owner account tools, finder messaging, abuse reporting, and a small shop for QR recovery products.

Questions or privacy requests can be sent to backmate.app@outlook.com.

Backmate collects the information needed to run a private lost-and-found recovery flow.

• Owner account data, such as account identifiers, email address, verification state, display name, and optional verified phone number for SMS alerts.
• Tag and item data, such as public code, item name, item type, public owner message, owner notes, status, scan timestamps, and message counts.
• Finder message data, such as finder name, email or phone number, message text, consent confirmation, and optional manually entered or shared approximate location.
• Abuse report data, such as the reported public code, reason, optional report message, and review metadata.
• Shop and fulfillment data, such as selected product, Stripe checkout session identifiers, payment status, shipping name, shipping address, order totals, and fulfillment status.
• Cookie consent and analytics data, such as Cookiebot consent choices and limited Mixpanel product events when statistics cookies are accepted.
• Basic technical data, such as request metadata, security logs, and diagnostics needed to protect and operate the service.

Backmate uses personal information to operate recovery pages, deliver finder messages to owners, maintain owner dashboards, process orders, review abuse reports, secure accounts, prevent misuse, and improve reliability.

When statistics cookies are accepted, Backmate uses Mixpanel analytics to understand signup and item registration flows. Analytics events avoid message text, phone numbers, finder contact details, owner notes, public codes, item names, and precise location.

Backmate does not publish the owner email or phone number on public recovery pages. Public pages show only the item and owner details that are intentionally configured for recovery.

When a finder submits a recovery message, Backmate stores that message and makes the submitted contact information visible to the item owner so the owner can arrange a return.

Finders should share only information they are comfortable sending to the owner. Owners should use finder contact information only for arranging the safe return of the relevant item.

Backmate checkout is handled through Stripe. Stripe processes payment details and may collect billing, payment, and shipping information according to its own privacy terms.

Backmate stores order and fulfillment information needed to confirm paid orders, ship QR recovery products, support customers, and keep operational records. Backmate does not store full payment card numbers.

Backmate uses service providers to host and operate the product. This includes AWS services for authentication, backend processing, data storage, and related infrastructure, including Cognito for account authentication.

Backmate uses Cookiebot to manage cookie consent and Mixpanel for consent-gated product analytics.

Service providers process information only as needed to provide their services, meet security obligations, comply with law, or support Backmate operations.

Backmate keeps account, tag, message, abuse report, order, and diagnostic data for as long as needed to provide the service, support recovery history, process fulfillment, meet legal or accounting needs, resolve disputes, and protect against abuse.

If an owner closes an account or asks for deletion, CasettaLab will review the request and delete or anonymize information where reasonably possible, unless retention is required for security, legal, fraud-prevention, or operational reasons.

Owners and finders may contact backmate.app@outlook.com to ask for access, correction, deletion, restriction, portability, or objection where those rights apply.

Some information may be needed to keep tags working, complete orders, investigate abuse, or comply with law. CasettaLab may need to verify a request before acting on it.

Backmate is designed to limit public exposure of owner contact details and to keep recovery interactions focused on the tagged item. No online service can guarantee absolute security, but Backmate uses account authentication, access controls, and operational safeguards to reduce risk.

CasettaLab may update this policy as Backmate changes. The effective date above will be updated when material changes are published.