PRIVACY
PROTOCOL

1. Introduction

Welcome to Flypost ("we," "our," or "us"). We provide a "Privacy-First" presence-verification and feedback platform. Unlike traditional apps, we do not require you to create an account, log in, or provide your name, email, or phone number.

2. Information We Collect

Because we do not use a login system, we rely on technical data to provide our services.

• 2.1. Persistent Browser Identifiers: We generate a unique, random ID called a buyerToken (e.g., ulid_4727...) stored in your browser’s localStorage. This allows us to recognize your session history without an account.
• 2.2. Precise Geolocation (The "Handshake"): To verify presence, we request GPS coordinates only at the specific moment you click "Check-In." We do not track your location in the background or after you leave.
• 2.3. User-Generated Feedback: We collect text voluntarily entered into our "Liked" or "Disliked" fields.

3. Usage & Integrity

Data is used for Verification, providing pseudonymous Organizer Reports to hosts, and fraud prevention to ensure the integrity of the Registry.

4. Data Sharing

We do not sell, rent, or trade your data to third-party advertisers. Data is shared only with the specific Event Host you checked into and secure infrastructure providers (Google Firebase/AWS) used to run the platform.

5. Security & Retention

By forgoing passwords and contact information, the risk of "identity theft" is significantly reduced. We retain feedback only as long as necessary to provide reports to event organizers.

6. Your Rights & Choices

Even without an account, you maintain control over your data footprint:

• Location Access: Denying browser location permissions will prevent successful check-ins.
• Data Reset: You can "reset" your identity by clearing your browser's site data/cache.
• Right to be Forgotten: Request deletion of all records associated with your current buyerToken using our "Delete My History" tool in site settings.

7. Children’s Privacy

Our services are not intended for children under 13. We do not knowingly collect identifying information from children.