Privacy notice for people who scan a code

Version: [[VERSION]] · Effective date: [[EFFECTIVE_DATE]] · Last updated: 2026-10-14 (draft)

Shown in the footer of the scan, brand, product and tracking pages. The full text is Part B of the privacy policy.

Who is responsible. The brand named on this page is responsible for your data (it is the "controller"). OneTrueTag runs this page for the brand and uses your data only on the brand's instructions. The brand's own privacy notice, if it has one, is linked on this page.

When you scan. We record the time, the code, the result, your country and city (worked out from your network address, which is not stored), and your device type and operating system. A cookie with a random id lets the page recognise this browser next time; only a scrambled version of the id is stored. This is used to check that the product is genuine, to warn if the code was checked by someone else before, and to give the brand statistics. No account is needed and no fingerprinting is used.

When you fill in a form or chat. If you register a warranty, ask a question, request a repair or report a product, the brand receives what you enter, such as your name, contact details, purchase details, photos and, for a repair, a pickup address. If you write to the brand's Telegram or WhatsApp bot, the brand receives your messages and the profile details the messenger shares with bots. If the brand uses an AI assistant, your question is sent to the AI provider the brand chose.

News and offers. You only get them if you agreed. On the warranty form that means ticking the offers box (it is never ticked for you and never needed for the warranty) and then pressing the link we email you; nothing is sent before that. You can stop at any time (/stop, "stop" on WhatsApp, the Unsubscribe button, or the one-tap link in every offer email).

How long. The brand decides, within the platform's limits. On some plans, data about a customer who has been inactive for 12 months is deleted automatically, unless a warranty is still running.

Your rights. You can ask the brand to show, export, correct or delete your data, and you can object to its use or withdraw consent. Use Your data (the privacy request) on this page or in your customer account, or contact the brand. To prove the request is yours, we email a one-time link to the address you gave the brand; nothing reaches the brand until you open it, and the page does not say whether the brand holds the address. If you only wrote to the brand's chat bot, contact the brand. The brand must answer within 30 days, and you get its answer by email. You can also complain to the data protection authority in your country.

Transfers. Your data may be processed outside your country, with the safeguards the law requires.

Cookies. See the cookie policy.

Questions about OneTrueTag: [[PRIVACY_EMAIL]].