Privacy Policy

We believe in complete transparency. Here is a clear, human-readable breakdown of how we protect your data, privacy, and peace of mind.

Effective: Apr 4, 2026Updated: Apr 4, 2026
01

Introduction

Welcome to OneTag (“we,” “our,” or “us”). We operate the smart QR tag platform available at onetag.in/.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services. By registering an account or using OneTag, you agree to the practices described in this policy.

02

Information We Collect

2.1 Account Registration

When you create a OneTag account, we collect:

  • Full name
  • Email address
  • Phone number (for alerts)
  • Encrypted password
  • Billing & transaction history (if purchasing)

2.2 QR Tag Data

When you register a QR tag to an item, we collect:

  • Item name and category (e.g., “Black Backpack”, “Pet Collar”)
  • Custom tag description (optional)
  • Unique cryptographic QR tag ID linked to your account

2.3 Finder / Scan Event Data

When a finder scans your QR tag, we collect:

  • Selected alert type
  • Finder's message (optional)
  • GPS coordinates (optional)
  • Approximate scan time
  • Browser/device type (for security)
03

How We Use Your Information

Deliver instant alerts

Notify you (via push notification, WhatsApp, or SMS) when your QR tag is scanned.

Protect your privacy

Ensure your personal contact details are never shown on the QR landing page or to finders.

Secure your account

Authenticate logins and prevent unauthorized access.

Prevent abuse

Detect and block fraudulent or malicious scans using rate limiting and abuse detection systems.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

04

What Finders See — Privacy by Design

OneTag is built on a privacy-first architecture. When a finder scans your QR code, we strictly control what they can and cannot see.

Never Displayed

  • Your phone number
  • Your email address
  • Your home address
  • Your exact identity

What Happens Instead

  • Finder sees a secure, branded alert form specific to your item.
  • Message & location are relayed directly to you via notifications.
05

Data Sharing

We may share data only in the following limited circumstances:

ScenarioDetails
Service ProvidersTrusted third-party providers (e.g., notification services, hosting) who process data on our behalf under strict confidentiality agreements.
Legal RequirementsIf required by applicable law, court order, or governmental authority.
Business TransferIn the event of a merger, acquisition, or sale of assets — users will be notified in advance.
Safety & SecurityTo protect the rights, property, or safety of OneTag, our users, or the public.

We do not share finder messages, scan locations, or alert data with any third party except as described above.

06

Data Security

We implement robust technical and organizational measures to protect your data:

Encryption

All data is encrypted in transit (TLS/HTTPS) and at rest.

Cryptographic QR IDs

Each QR tag uses unique, non-guessable identifiers to prevent enumeration attacks.

Rate Limiting

Scan requests are rate-limited to prevent abuse and spam alerts.

Access Controls

Only authorized personnel have access to production systems.

07

Data Retention

We retain your data for as long as your account is active. Specifically:

Account DataUntil account deletion
Scan/Alert LogsUp to 12 months
Anonymized AnalyticsIndefinitely
08

Cookies

OneTag uses essential cookies strictly for core functionality:

Session maintenance CSRF prevention Platform security

We do not currently use advertising or tracking cookies. If this changes, we will update this policy and request your consent.

09

Children's Privacy

OneTag is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will promptly delete it.

10

Your Rights

Depending on your jurisdiction, you may have the right to:

Access

Request a copy of the personal data we hold about you.

Correction

Request correction of inaccurate or incomplete data.

Deletion

Request deletion of your personal data ('right to be forgotten').

Portability

Request your data in a portable, machine-readable format.

11

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

  • 1 Update the “Last Updated” date at the top of this document
  • 2 Notify registered users by email of material changes
  • 3 Post the updated policy at onetag.in/privacy
12

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, we are here to help.