Privacy
What Hereby records when you tap.
The short version
No name, no app, no account needed. Places only learn who you are if you tell them.
- Tapping records that a phone visited a place. It doesn't record your name, phone number or email unless you write them in a message.
- The place sees a message only if you send one. If you add your name, that's your choice.
- Nothing is collected from people who didn't tap.
- Tap events are deleted after 90 days.
- Hereby's app, database and backups are hosted in Toronto, Canada. We haven't chosen an email provider yet, so we can't say where email is handled.
What's recorded when you tap
- The place and time. Which place's stand, and the time window of the visit.
- A random ID, for that place only. It's stored in a cookie in your browser. It lets a place count repeat visits. Each place gets its own random ID, so one place can't recognise you at another. If you clear your cookies or use a new phone, you look like a new visitor.
- Your choice. Message, Google review, or skip.
- Your message, if you write one. Please don't include personal details.
Who sees what
- The place sees your message, how many visits it had and when, and an estimate of repeat visitors. It doesn't see your name, an account or your ID.
- Hereby stores the records so the stand works. Our app, database and backups are hosted with DigitalOcean in Toronto, Canada. This website uses no analytics, no CDN and no third-party fonts or scripts.
- Email. Until the dashboard exists, messages to a place are sent by email from our mailbox. We haven't chosen an email provider yet, so we can't tell you where email is handled. We will update this page when we do.
- Google only sees you if you choose to go to Google. Their rules apply there.
How long we keep it
| What | How long |
|---|---|
| Tap events (time, place, random ID, result) | 90 days, then deleted |
| Your message | 12 months, or until the place leaves Hereby (they get an export, and we delete messages within 7 days after it) |
| Weekly totals with no IDs | During the pilot and 12 months after |
| Technical logs of the Hereby app (no IP address is kept in them) | Not kept beyond 24 hours |
| Website server logs, which include your IP address | Kept for up to 8 days, then deleted. Used only to keep the site working and secure. |
Delete your data
For now, delete is by email: write to hello@hereby.ca with the place and the time of your message, and we will delete the messages we can identify. A delete button on your phone is planned for go-live (target end of January 2027). Taps we can't link to you are deleted automatically after 90 days.
Who we are
Hereby, Penticton, BC, Canada. Contact: hello@hereby.ca.
Cookies
We use one cookie per place, to count repeat visits. It's a random number, not made from your IP address, device details or anything else about you. This website, hereby.ca, uses no analytics, no tracking and no third-party scripts.