PRIVACY
What we store, and why.
Last updated 21 September 2026. Returnpass is operated by Zet Studios.
Two kinds of people
Returnpass holds data about merchants who use the product, and about their customers, who never sign up for anything. We treat those differently. For customer data the merchant is the controller and Returnpass is the processor: the merchant decides what is collected, and we hold it on their behalf.
If you are a merchant
We store your email address, your business name, industry, currency, branding, and any staff email addresses you invite. Your email is your account — we do not store a password, because there isn’t one. We keep a record of your sign-in sessions so you can stay signed in and so you can sign out of them.
If you hold a pass
The business that issued your pass chose what to record. That is typically your name, and optionally a phone number, an email address, and the name of the pet, vehicle, or person the pass covers. A phone number is there so the business can find your pass when you arrive without your device, or if you do not use a smartphone at all; it is visible only to that business, never on your pass page. We also store the history of visits on that pass, because that history is the product.
Your pass page does not expose your email address or which staff member served you. Anyone holding your pass link can present it for a visit, so treat it as private.
What we do not do
We do not sell data. We do not show advertising inside Returnpass. We do not use third-party analytics or tracking scripts, and we set no cookies for analytics — usage is measured on our own servers in aggregate, and those records deliberately contain no names, emails, or pass links. When we advertise Returnpass elsewhere, a visit may record the referring website’s domain and the campaign tag in the link, so we can tell which advertising works; the full referring address, including anything in its query, is discarded and never stored. The only cookie we set is the one that keeps a merchant signed in.
We do not process payments between a business and its customers, and we never see that money or those card details. Payment is taken through whatever the business already uses.
Who else is involved
Cloudflare hosts the application and database. Resend delivers email — sign-in codes to merchants, and pass links to customers whose email was provided. Stripe handles the subscription a merchant pays us, and receives that merchant’s email address and card details directly; we never see or store card numbers. Stripe is not involved in what a business charges its own customers. Apple and Google receive the contents of a wallet pass when a customer chooses to add one to their wallet. Nothing is shared with anyone else.
Keeping and deleting
Records are kept while the business is using Returnpass, because a prepaid balance is an obligation to a customer and deleting it would erase what they paid for. Merchants can export everything themselves at any time — Settings → Export your data — as a spreadsheet or as one structured file, including voided passes and archived packages. Deletion of a whole business is still a request to us, deliberately: it destroys prepaid balances that customers have paid for, so a person checks it rather than a button. Customers should ask the business that issued their pass, or contact us and we will pass it on.
Where data lives
The database is hosted in Cloudflare’s Western North America region. Our email and wallet providers operate internationally.
If you are in the UK or the EEA
Where the UK GDPR or EU GDPR applies, our lawful basis for merchant data is performance of the contract you have with us, and for the small amount of aggregate usage measurement described above it is our legitimate interest in knowing whether the product works. For customer pass data the merchant is the controller and we act on their instructions. You have the right to access, correct, export, restrict, object to, or delete your data, and to complain to your national supervisory authority. Write to us first and we will try to put it right.
Contact
Email support@returnpass.app for access, correction, export, deletion, or any complaint. If you are in Canada and are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.