Privacy policy
Last updated 2026-10-02
How Bordly handles personal data: for guests who tap a table tag, and for the venues that use Bordly.
För gäster (in Swedish)
Kort version: Du är anonym. Vi använder inga spårningscookies och ingen reklam. Kaféet eller restaurangen du besöker är personuppgiftsansvarig för dina uppgifter; Bordly (Codexier (Jamshaid Amjad, enskild firma)) behandlar dem för deras räkning.
- Stämpelkort: När du trycker “Visa min kod” sparas en slumpad kod i en cookie på din telefon, så att kortet känns igen nästa gång. Den är nödvändig för tjänsten du bad om.
- E‑post (frivilligt): Om du sparar kortet med e‑post använder vi den för att hitta ditt kort. Erbjudanden skickas bara om du kryssat i det, och varje mejl har en avregistreringslänk.
- Feedback: Det du skriver, ditt betyg och eventuellt foto går till ägaren. Kontaktuppgift lämnar du bara om du vill ha svar.
- Statistik: Vi räknar besök utan cookies, med en dagligen roterande hash som inte kan kopplas till dig.
- Radera: Under “Visa min kod” finns “Radera mitt kort”, som tar bort kortet direkt. Du kan också kontakta kaféet eller oss på hej@codexier.com.
- Lagring: Kort som inte använts på 24 månader raderas automatiskt. Rå besöksstatistik raderas efter 400 dagar.
Who is responsible for what
Guest data (loyalty cards, optional email, feedback): the venue is the controller. Codexier (Jamshaid Amjad, enskild firma) is the processor and handles the data only on the venue's instructions, under our data processing agreement.
Venue owner and staff accounts (name, email, password hash, billing): Codexier (Jamshaid Amjad, enskild firma) is the controller.
What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Loyalty card code and stamp history | Run the stamp card the guest asked for | Art. 6(1)(b) contract |
| Guest email (optional) | Find a lost card; send offers only with consent | 6(1)(b); offers 6(1)(a) consent |
| Feedback text, rating, photo, optional contact | Let the venue improve and reply | 6(1)(f) legitimate interest |
| Page visits (cookieless, daily-rotating hash) | Aggregate statistics for the venue | 6(1)(f) legitimate interest |
| Owner name, email, password hash | Account and security | 6(1)(b) contract |
| Billing details | Invoicing and bookkeeping (Bokföringslagen: 7 years) | 6(1)(c) legal obligation |
Cookies
We only set cookies that are strictly necessary for something you asked for: your loyalty card (guests), your login session (owners), your language choice, and a staff session on the scanner device. No analytics, advertising or third-party tracking cookies, so no cookie banner is needed under the Swedish Electronic Communications Act (LEK 9 kap. 28 §).
Sub-processors
| Provider | Purpose | Transfer safeguard |
|---|---|---|
| Vercel Inc. | Hosting and serverless functions (EU region, Frankfurt) | EU + SCCs / EU–US DPF |
| Supabase Inc. or Neon Inc. | Postgres database (EU region) | EU + SCCs |
| Resend Inc. | Sending emails (alerts, reports, campaigns) | SCCs / EU–US DPF |
| Stripe Payments Europe Ltd. | Subscription billing (venue owners only) | EU |
| Google LLC | Google Wallet passes; reading public rating via Places API | SCCs / EU–US DPF |
| Apple Inc. | Apple Wallet pass updates (push notifications) | SCCs / EU–US DPF |
| Anthropic PBC | AI menu import (menu text and photos only, no guest data) | SCCs / EU–US DPF |
Data is stored in the EU. Wallet and email providers may process data outside the EU under Standard Contractual Clauses or the EU–US Data Privacy Framework.
Retention
- Loyalty cards: deleted automatically after 24 months without use, or immediately on request.
- Feedback: kept until the venue deletes it or closes its account.
- Raw visit statistics: 400 days. Aggregated numbers have no personal data.
- Venue accounts: deleted with all guest data when the owner deletes the venue. Backups roll over within 30 days.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing. Guests: contact the venue or us at hej@codexier.com and we'll help the venue respond within 30 days. You can also complain to Integritetsskyddsmyndigheten (IMY), imy.se.
Security
TLS everywhere; passwords hashed with bcrypt; guest card secrets stored only as SHA-256 hashes; database row-level security that blocks direct API access; rate limiting against brute force; access to production limited to named staff at Codexier (Jamshaid Amjad, enskild firma).
Codexier (Jamshaid Amjad, enskild firma) · org.nr 950311-3954 · Godkänd för F-skatt · Momsreg.nr SE950311395401 · Sverige · hej@codexier.com