Privacy Policy

Overview

The NFC Mint LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and protect information when you visit our websites, purchase our products, use our tag validation service, or use our apps NFC Proof, StampCats, and NFC Utils.

Scope of This Policy

This is the canonical privacy policy for all of The NFC Mint's websites, apps, and services. The version published on this page at https://www.nfcmint.com/privacy is the authoritative version. Condensed summaries shown inside our apps restate this policy and do not replace it.

Information We Collect

Website Visitors
Our websites use Google Analytics to measure traffic in aggregate, such as how many visitors view each page, roughly where visitors come from, and what kind of device they use. Google Analytics sets cookies so that it can tell returning browsers apart. Beyond that, we do not collect personal information from website visitors unless you voluntarily contact us.

Product Orders
We sell products only through our Amazon storefront. Amazon collects payment and shipping details and fulfills orders under its own privacy notice. The NFC Mint LLC does not process payments or fulfill orders, and customer names and shipping addresses from orders never enter our systems.

Customer Communications
When you contact us via email, we collect the information you provide in your message.

How We Use Your Information

We use collected information for:

• Communicating About Products and Services

• Providing Customer Support

• Responding to Inquiries

• Improving Our Products and Services

Tag Validation Service

Our tag validation service confirms the authenticity of NFC tags through URL-based validation and through the NFC Proof app. When you scan an NFC tag or use a validation URL, we collect the tag's unique identifier (UID), counter value, and cryptographic signatures for validation purposes. IP addresses are collected for security purposes including rate limiting and replay prevention.

The information collected is used solely to verify the authenticity of NFC tags and to maintain system security. We do not track individual users or store personal information beyond what is necessary for the validation service. Tag validation requires no account.

StampCats

StampCats operates on a pseudo-anonymous basis. The app does not require account creation, login credentials, or provision of personal identifying information such as name, email address, or phone number. Your digital passport is associated exclusively with the unique cryptographic identifier of your physical StampCats NFC tag.

NFC Tag Data
When you scan your StampCats tag, we collect the tag's unique identifier (UID) and cryptographic signature for the purposes of passport identification and tag authenticity verification.

Location Data
Location information is collected only with your explicit consent and only when you actively choose to add a stamp to your passport. We access your device's GNSS services (including GPS, GLONASS, and other positioning systems) to verify your physical presence at a location. We store only the timestamp and geographic coordinates of locations where you have chosen to create stamps.

No Background Tracking
The app does not collect location data in the background or when not actively in use for stamping purposes.

Data Storage
Stamp collection data is stored in association with your tag's UID. This data is not linked to your Apple ID, Google account, or any personal identifier. The service is designed to maintain user anonymity to the extent permitted by its functionality.

NFC Utils

NFC Utils is a free tool for reading, writing, and configuring NFC tags, including NTAG 21x, NTAG 424 DNA, and ICODE SLIX2 chips. It runs on iPhone, iPad, Mac, and Android. The app has no server component and makes no network requests. It carries no analytics, no crash reporting, and no telemetry. There is no account and no login, and no identifier of any kind is sent anywhere. Everything the app does happens on your device, and no information from it reaches us.

On-Device Storage
Tag reads are recorded in a History list held as a plain file in the app's own private storage on your device. Your settings, meaning the chosen reader source, a remembered Bluetooth reader name, haptics, and interface size, are held in the operating system's standard preferences store on your device. You can clear History inside the app, and deleting the app removes everything described here. None of it ever reaches us, so there is nothing on our side to delete.

NTAG 424 DNA Keys
On Apple devices, keys you enter are held in the device Keychain, marked device-only and available after first unlock, so they do not sync to your other devices or to iCloud. Key material stays on the device and is never transmitted, and we never receive it.

Card Readers and Bluetooth
NFC Utils reads tags with the built-in NFC antenna on iPhone and Android phones, and with external ACS card readers over USB and Bluetooth. iPad and Mac have no built-in antenna, so they use an external reader. Bluetooth permission is used only to connect to ACS card readers, never for location and never to detect anything else nearby.

Data We Do Not Collect
The app collects no location data, no contacts, no photos, and no advertising identifiers.

No Link to Tag Validation
Nothing NFC Utils does touches our tag validation service. NFC Utils is a tag utility, not a validation product.

Data Security

We implement industry-standard security measures to protect your information:

• Secure HTTPS encryption for all web, app, and validation traffic

• Encryption of sensitive data at rest and in transit

• Secure database practices with regular security audits and updates

• Limited access to customer data on a need-to-know basis

Data Retention

We retain customer communications as needed to provide services and meet legal obligations. We typically retain sales records received from Amazon for 7 years for accounting and legal purposes. These records contain no customer names or shipping addresses. Validation logs are retained for security analysis and fraud prevention purposes. The NFC Mint LLC stores a record for each tag it mints, including its UID, product type, title, serial number, product details, notes, and status flags, and displays that record through the validation service when the tag is scanned. Records written by makers with OnceMark are also stored and are public by design.

Third-Party Sharing

We do not sell your data, and we do not rent or share your personal information with third parties for marketing purposes. We may share information with:

• Cloud service providers (for secure data storage)

• Law enforcement (when required by law)

Tag validation data may be shared with the tag owner or brand partner responsible for that tag. We do not sell, rent, trade, or otherwise disclose your StampCats location data or stamp collection history to third parties.

Cookies and Tracking

Our pages use Google Analytics to measure traffic in aggregate, such as how many visitors view each page. Google Analytics sets cookies so that it can tell returning browsers apart. We do not use this data to identify individual visitors, and we do not sell it or share it for advertising. You can block these cookies with your browser settings or a content blocker without affecting tag validation or the rest of the site. Tag validation itself requires no account.

Your Rights

You have the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Request deletion of your information (subject to legal obligations)

• Opt out of marketing communications

• Request a copy of your data

• Request information about the data we have collected related to specific NFC tags you own

To exercise these rights, contact us at support@nfcmint.com.

Children's Privacy

Our products and services are not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Our servers and business operations are located in the United States. By using our services or purchasing products, you consent to the transfer of your information to the United States.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to request deletion. Contact us to exercise these rights.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email
support@nfcmint.com

Website
https://www.nfcmint.com/