Privacy policy

Last updated: 19 October 2026

tagg.ie puts a QR label on the things that go places. If someone finds one, they scan it and can get in touch with the owner. This policy explains what personal data that involves, why, how long we keep it and what you can do about it.

Who we are

The controller of your personal data is Brian Gallagher, a sole trader, trading as tagg.ie, at 7 Bayview, Pembroke Street, Dublin 4, D04 C9X0, Ireland. Write to us at hello [at] tagg [dot] ie. We have no data protection officer; this address reaches the person responsible.

Three kinds of people

• Owners have an account and register labels (we call them taggs).
• Finders scan a label. They have no account and we have no relationship with them beyond the scan.
• People who email an owner through a tagg’s anonymous email address. Usually finders.

We do not use anyone’s data for advertising, profiling or automated decisions that affect them. We do not sell personal data, and there are no advertising or analytics trackers in the app or on the finder page.

Owners: what we collect and why

You give us this when you sign up and use the app. Without your email address, first and last name and mobile number we cannot set up your account. Everything else is optional or comes from using the app. Our legal basis for all of this is that it is needed to provide the service you asked for (a contract with you), except where stated.

• Your email address. To sign you in (with a one-time code or link) and to send you alerts and service emails.
• Your name and mobile number. Finders see your first name. Your number is shown to finders only if you choose to share it.
• Your taggs. Item name, notes, reward and the contact choices you make for each one.
• Your print history. If you make labels in the app, which labels you made and when, so you can reprint them, and the short line of text you chose to print on a tagg or a batch of them, if any (kept with the tagg or batch so it can be printed again). That text is printed on the label, so anyone who finds it can read it. Deleted with your account.
• Your push notification token. A code your phone’s system gives the app so we can tell you when someone finds a tagg. If you refuse notifications in your phone’s settings, we still email you.
• Your time zone. The app tells us your phone’s time zone (for example Europe/Dublin) each time you open it, so the times in our alert emails are in your own time zone. Deleted with your account.
• A sign-in session. A secure session cookie is kept in your phone’s secure storage so you stay signed in. We record the IP address and device type of the session for security, and delete them with the session.
• Sign-in and security records. Short-lived sign-in codes, and counters of recent attempts per email address and IP address to stop abuse. (Our legitimate interest in keeping accounts secure.)
• A reminder about your find. About two days after we tell you someone found your tagg, we may send one email and notification asking whether you got it back. It uses nothing new: your email address, push token and the tagg’s name. Your answer, Yes or Not yet, is added to anonymous usage counts below; a Yes also marks the tagg as reunited. We send at most one such reminder per tagg a week.
• The camera. The app asks to use your camera only to read the QR code on a label. The image stays on your phone.

The waitlist

If you join the waitlist on our website, we collect your email address and nothing else. We send you one email to confirm it, and one when tagg.ie launches. Our legal basis is your consent. You can withdraw it at any time with the unsubscribe link in those emails, which deletes your address straight away. We do not record your IP address with it, and the website sets no cookies and uses no analytics.

Shop orders

If you order printed taggs from our shop, we collect your name, delivery address, email address and, if you give it, a phone number, plus what you ordered and what it cost. We use them to email you about your order, to take payment (we send you a payment link by email; we never see your card details), and to have the labels printed and posted to you. Our legal basis is that this is needed to carry out your order. The printer, Prodigi, receives your name, address, and phone number or email if given, so it can print and post the order. Delivery addresses and contact details are deleted 90 days after the order is paid or cancelled; an order nobody pays for is closed and its details deleted after 14 days. The order itself, its price and your country stay, with no name or address attached.

Anonymous usage counts

To see whether tagg.ie works, we count how often things happen: for example how many times the app is opened, how many people tap Call on a label page, and how many reminders are answered Yes. Each count is a number for a day, an event name and a coarse platform (Android, iPhone, computer or other) and, for the app, its version number. A count is not linked to you, your phone, your IP address or a particular visit, and nothing is stored on your device for it. It cannot be traced back to a person, so there is nothing to look up or delete. Our legal basis is legitimate interests in running and improving the service. We keep these counts for 2 years.

Crash reports (optional, only with your consent)

After you sign in the app asks once whether you want to help us fix crashes. The answer is no unless you say yes. Until you do, nothing is sent to Google. If you say yes, then when the app crashes it sends Google Firebase Crashlytics the technical details of the crash, your device model, your Android or iOS version, the app version, a random installation identifier and, as with any connection, your IP address. It does not include your taggs, name, phone number or email.

You can change your mind at any time under Account, Send crash reports, as easily as you said yes. Turning it off stops further reports; reports already sent are deleted by Google on its own schedule (Google’s documentation currently says about 90 days). Our legal basis is your consent. The app works the same whichever you choose.

Finders: what we collect and why

We get this data from the finder’s own browser when the label’s page loads. We have no other source. When the page loads we record the time, your IP address, your browser and device type, your language, the page you came from and the rough place Cloudflare works out from your IP address (country, region, town and network). The page also asks your browser to report your device model and screen size; the owner is shown a description such as “Pixel phone”. We record this even for labels that are unregistered or do not exist, which is how we spot misuse.

We use this to tell the owner that someone found their item, to stop abuse such as someone trying to collect owners’ contact details, and to keep the service secure. Our legal basis is legitimate interests: the owner’s interest in getting their property back, your interest in being able to return it, and everyone’s interest in a service that is not abused. You can object (see Your rights). Giving us this data is not a legal or contractual requirement; but a web page cannot load without your browser sending an IP address.

• A cookie. We set one first-party cookie, tg_f, containing a random code. It lasts up to 12 months. It lets us tell that the same finder scanned the same label again, so the owner is not alerted twice for one find and so the limit on how many people can see an owner’s contact details can be applied fairly. It contains nothing about you, is not shared, and is used for no advertising or tracking across sites. We treat it as strictly necessary to protect the owner’s contact details and run the service, so the page does not ask for consent for it. If your browser blocks it, the page still works: we then recognise a repeat visit within 24 hours using a one-way fingerprint (a hash) of the first part of your IP address, browser type and language.
• A human check. Cloudflare Turnstile checks that you are a person before the owner’s contact details are shown. It runs automatically and is only visible if Cloudflare needs you to tap. Cloudflare receives data from your browser for this, under its own privacy policy.
• Your precise location. Only if you tap Share where I found it and your browser agrees. Only the owner can see it. You can say no and still contact them. Our legal basis is your consent, which you can withdraw by closing the page; ask us to delete a location already shared.
• What you do on the page. We record that the owner’s contact details were shown to you, and which ones.

What owners see about finders

When a find happens the owner gets an email and a push notification, and the app shows their tagg’s history. These tell them the time, the rough place, the type of device and, if the finder shared it, the precise location. The alert email also includes the finder’s IP address, network, language and the page they came from, so the owner can judge whether the find is genuine. The owner also sees which of their contact details were shown.

Once an alert email has been delivered it sits in the owner’s own mailbox, with their own email provider, outside our control, and is not deleted when our own records are. Owners should use finder details only to recover their item.

Anonymous email

If an owner has anonymous email on, a finder can write to an address like t+ID@my.tagg.ie. We receive the message and process the finder’s email address, the subject and the text (up to 5,000 characters; attachments are dropped). We forward it to the owner with the finder’s address as the reply address, so the owner can answer, and keep a copy in the owner’s app for 90 days. The owner can delete messages earlier. If the owner replies, the reply comes from their own email address and so reveals it to the finder; that is their choice. Each forwarded message includes a link the owner can use to switch anonymous email off for that tagg.

Our legal basis is legitimate interests: connecting finders and owners. Finders can ask us to delete a message they sent (see Your rights); we can then also ask the owner to delete the copy in their mailbox, but we cannot make them. Messages are processed through Cloudflare’s email services.

Who else handles your data

• Cloudflare runs our servers, database, file storage, email sending and receiving, and the human check. As the network in front of every page it also sees requests, including IP addresses, in its own operational logs, under its terms.
• Google Firebase delivers push notifications to Android phones and, only if you agreed, receives crash reports.
• Apple delivers push notifications to iPhones.
• Prodigi prints and posts sticker orders (Prodigi Group Ltd, which is based in the United Kingdom), and receives the delivery details of each order.
• Your email provider and the sender’s handle emails we send and receive, as with any email.
• Our administrator. One person runs the service and can open an admin console, protected by Cloudflare Access sign-in. It is used to support owners, deal with abuse and run the service. Phone numbers and precise locations are hidden there until revealed through an action that is logged. Our legal basis is legitimate interests in running and securing the service.

These providers act for us as processors, except Cloudflare Turnstile and the network logs, where Cloudflare also acts for its own security purposes. We share data with authorities only if the law requires it. We do not sell personal data.

Transfers outside the European Economic Area

Our providers are US companies, so some data is processed in the United States. We rely on these safeguards:

• Cloudflare is certified under the EU-US Data Privacy Framework. Its data processing terms also include the European Commission’s standard contractual clauses, which apply if the certification ever lapses or is invalidated.
• Google (Firebase) is covered by the standard contractual clauses in Google’s Firebase data processing terms, and by Google’s certification under the EU-US Data Privacy Framework.
• Apple delivers push notifications under the safeguards in its own agreements, which Apple states include standard contractual clauses.

You can ask us at hello [at] tagg [dot] ie for how to obtain a copy of these safeguards.

How long we keep it

• Your account, taggs and push tokens: until you delete your account. Releasing a tagg deletes its item details, any precise location finders shared and its anonymous email messages straight away.
• Anonymous email messages: 90 days.
• Delivery addresses for printed sticker orders (someone we send a sheet of printed taggs to, at our own cost or at their request): 90 days after the order is delivered. The order itself, its price and its country stay.
• Shop orders: your name, address and contact details are deleted 90 days after the order is paid or cancelled (14 days for an order nobody pays for). The order, its price and your country stay.
• IP address and device details: 90 days. After that the IP address, browser string, referring page, language, network, device model, screen size and the approximate coordinates worked out from the IP address are removed from the record of each visit, and from the record that contact details were shown. The time, the country, region and town, and the find itself (identified only by a random cookie value or a one-way hash, never by name) stay while the tagg exists.
• A precise location a finder shared: until the tagg is released or deleted, or the account is deleted.
• Waitlist email addresses: until you unsubscribe, or 24 months after you confirm, whichever is sooner. Addresses nobody confirms: 14 days.
• The finder cookie: up to 12 months.
• Anonymous usage counts: 2 years. They are not personal data.
• Sign-in sessions: until they expire or you sign out. Sign-in codes expire within minutes.
• After you delete your account: your details, taggs, finds and messages are deleted straight away. Your label IDs are retired for good and are never given to anyone else; an ID holds no personal information. Visit records for those labels, which no longer contain an IP address, device details or a location, are deleted after 6 months.
• A log that an account was deleted: 2 years. It holds an internal ID and a count, never your email address. The same two-year log records when an administrator revealed a phone number or location.
• Backups: our database provider keeps point-in-time recovery data for a limited period (Cloudflare’s documentation currently says up to 30 days), after which deleted data is gone from it too. We do not restore deleted data except to recover from a failure.
• Support emails to hello [at] tagg [dot] ie: as long as needed to deal with your request, then deleted.

Your rights

You can ask us to access, correct, delete, restrict or export your personal data, object to how we use it, and withdraw consent you gave (withdrawing does not affect what we did before). To delete your account, open the app, go to Account, then Delete account, or see https://tagg.ie/delete-account. You can change your details under Account.

If you are a finder or someone who emailed an owner, write to hello [at] tagg [dot] ie. We have no way to look you up by name, so tell us the label ID, roughly when you scanned or wrote and, if you can, your IP address or the email address you used, and we will find and delete or send you the matching records. IP addresses are removed after 90 days, so older visits cannot be linked to you. We will answer within one month and may ask you to prove it is you.

You can also complain to the Data Protection Commission in Ireland at dataprotection.ie, or to your local authority.

Children

tagg.ie accounts are for people aged 16 and over. We do not knowingly collect data from younger children. If you think a child has an account, tell us and we will delete it.

Security

Traffic between the app, the label page and our servers is encrypted (HTTPS). Access to our admin console is limited to one person through Cloudflare Access, and personal data in it is masked until revealed through a logged action. No online service is perfectly secure, and email in particular is not always encrypted on its way. If a breach is likely to harm you we will tell you and the Data Protection Commission as the law requires.

Changes

If this policy changes we will update the date above, and tell owners in the app if the change matters.