Privacy policy
grtzplz (“grtzplz”, “we”, “us”) is operated by BubbleTech Labs LLC. grtzplz lets you make a page of links, images, videos and ways to get tipped, with a QR code that opens it. This policy says what we collect, why, who else sees it, and what you can ask us to do. We try to collect as little as we can, and we do not run ads or sell anyone’s information.
What we collect
- Your sign-in details. If you sign in with email, we keep your email address. If you sign in with your phone, we keep your mobile number. If you use a sign-in provider such as Google or GitHub (when offered), we keep the name and email address it gives us.
- Anonymous sign-in. If you choose to stay anonymous, we use your email address only to send you a one-time code. We do not store it. We keep a one-way, keyed scrambled version of it (a hash) that lets us recognise you when you sign in again but cannot be turned back into your address. If you lose access to that inbox we cannot recover your account, because we do not have your address.
- What you put on your page. Your page name, bio, links, images, video and music embeds, colors and fonts, QR code settings, and any tip handles you add (a Venmo username, a Cash App $cashtag, a PayPal.me name, or a Zelle email or phone number). Pages you publish are public, including anything you put on them.
- Orders. If a page has a shop and someone buys from it, we keep a record of the order: what was bought and for how much, whether it was paid or refunded, and what the buyer gave when paying: their name, email address and phone number and, for things to be posted, their delivery address. Card and bank details are entered on Stripe’s page and never reach us.
- Images you upload. We remove location, camera and other hidden metadata from uploaded images before storing them. Images used on a published page are public.
- Technical data. Our servers keep short-lived operational logs (such as request times, errors and IP addresses) so we can run and protect the service, kept for about a month. We use a single sign-in cookie that keeps you signed in. We do not use advertising or analytics trackers.
How we use it
- To sign you in, by sending you a one-time code by email or text message.
- To host your pages and QR codes and show them to anyone who opens the link.
- To keep the service secure, prevent abuse, and fix problems.
- To answer you if you contact us.
We do not use your information for advertising, we do not sell it, and we do not share it for others’ marketing.
Text messages
The full description of our text-message program, including how you opt in, is on our SMS sign-in page. In short: if you sign in with your phone, we send you a text message containing a one-time sign-in code each time you ask for one, and nothing else. Message and data rates may apply. You can reply STOP to any message to stop receiving them (you will then need to sign in another way), or HELP for help. Text sign-in is currently available for US and Canadian numbers. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes, and your phone number and your consent to receive texts are never shared with third parties for those purposes.
Who else handles your information
We use Amazon Web Services to run grtzplz: to store data, deliver pages and images, and send email and text messages. They process information on our behalf and under their own security commitments. Apart from what this policy describes, we do not give your information to anyone, except if the law requires it or to protect people from harm or abuse.
Payments for orders are handled by Stripe, who collect and process the buyer’s payment details and the seller’s identity and bank details under Stripe’s own terms and privacy policy. The seller whose page an order was placed on receives that order’s details (the buyer’s name, email address, phone number and any delivery address) so they can fulfil it. Sellers are independent of grtzplz, and what they do with those details is up to them and the law.
Pages can include things that connect visitors to other companies. A video or music embed (YouTube, Vimeo, Spotify, SoundCloud or Loom) loads that company’s player, and it may collect information about the visitor under its own policy. A tip button sends the visitor to Venmo, Cash App or PayPal, which handle the payment under their own terms. grtzplz does not process, see or take a share of any payment. Zelle has no link, so its button just shows and copies the email or number you entered.
How long we keep it
We keep your account and pages until you delete them. You can delete any page yourself at any time. Order records are kept so sellers can see and fulfil their sales; when a seller deletes a page or closes their account we keep the order records for as long as we need them to meet legal, accounting and dispute obligations, and then delete them. A page’s web address (its “slug”) stays reserved after deletion so that a printed QR code can never lead to someone else’s page. Logs are kept for about a month. If you ask us to delete your account, we remove your account and your pages and uploads, except that the reserved web address itself remains reserved.
Your choices
You can change or delete your pages in the editor. You can ask us to see, correct or delete the information we hold about you, or to close your account, by emailing admin@bubbletech.io. Depending on where you live (for example California or the European Economic Area) you may have additional legal rights over your information, and we will honour them. We will not treat you differently for asking.
Security
Connections to grtzplz are encrypted. Sign-in codes expire and are limited in how often they can be requested and tried. Images are cleaned of hidden metadata. No service is perfectly secure, so please use the product with that in mind and do not put anything on a published page you would not want the public to see.
Children
grtzplz is not for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.
Changes
If we change this policy we will update the date above, and for significant changes we will say so on the site. Using grtzplz after a change means you accept it.
Contact
BubbleTech Labs LLC
1207 Delaware Ave, Suite 3975
Wilmington, DE 19806
admin@bubbletech.io