Privacy policy
The short version.
- Attendee photos never leave your device. Cards are made in your browser.
- We count visits and card activity ourselves. If you accept analytics, Google Analytics also shows device, approximate geography and session behaviour.
- Organisers sign in with an email address. We use it to run your account and reply to you.
- Event designs and numbers are stored with Cloudflare in the EU.
- Deleting an event takes it down at once. We keep a copy for 12 months in case you need it back, then delete it for good.
Who we are
I Am At (iamat.tech) makes personalised event cards. For anything about your data, email hello@iamat.tech.
Attendees and visitors
When you make a card, the photo and the words you type stay in your browser. They are never uploaded to us.
We record:
- A random device ID in a first-party cookie, so we can count unique visitors and keep event card limits fair.
- Which pages you viewed and when, and whether you generated, downloaded or shared a card (and to which app).
- Whether you arrived from a link someone shared, and from which app.
- A one-way code made from the event and the name on your card, so each person counts once towards the event's limit, even on a shared phone. Your browser makes the code; your name never reaches us.
We do not store your name, your photo, your IP address or your precise location in our own analytics database.
Optional Google Analytics
Google Analytics loads only after you choose “Accept analytics”. It helps us understand device types, browsers, approximate geography, traffic sources and how people move through the public site. We also send card generation, download and share actions, including the chosen card format and participation option. We never send the attendee’s name, photo, email address or typed card answers to Google Analytics.
Advertising storage and ad personalisation are disabled. Admin and organiser account pages are excluded.
Organisers
When you sign in and ask for organiser access, we keep:
- Your name and email address, from our sign-in provider.
- What you tell us in the access request: organisation, role, website, event and phone number if you give one.
- The designs, logos and images you upload, your event settings and any design brief you send.
Cookies and local storage
| Name | Purpose | Kept for |
|---|---|---|
| ia_device | A random ID that counts unique visitors and enforces event card limits. | 400 days |
| Clerk session cookies | Keep organisers signed in. Only set when you sign in. | Your session |
| iamat-analytics-consent | Stored in your browser to remember whether you accepted or rejected optional analytics. | Until you clear it |
| _ga and _ga_* | Set by Google Analytics after consent to distinguish visits and understand site use. | Set and managed by Google Analytics |
Where your data is stored
- Cloudflare hosts the site and stores event designs and numbers in the European Union.
- Clerk handles organiser sign-in and stores organiser accounts in the United States, under standard contractual clauses.
- Google Analytics processes optional public-site usage data after consent. Google derives approximate location and device information from the connection and browser.
We don't sell data, and we don't share it with advertisers.
How long we keep it
- Events and their numbers: 12 months after the last visit or edit. When an organiser deletes an event, its link stops at once and we keep a copy for those 12 months so we can restore it if asked, then delete it for good.
- Organiser accounts and access requests: until you ask us to delete them.
- Homepage visit counts: kept as totals that don't identify anyone.
Why we use it
We count first-party visits and enforce limits because we have a legitimate interest in running a fair, working service. Optional Google Analytics is based on your consent. We use organiser details to provide the account you asked for.
Analytics choice
You can change your Google Analytics choice at any time. Rejecting it does not affect card creation or account features.
Current choice: No choice yet
Your rights
You can ask to see, correct or delete your data, or object to how we use it. Email hello@iamat.tech and we'll reply within 30 days. You can also complain to your local data protection authority.
Children
I Am At is not meant for children under 16, and organiser accounts are for adults.
Changes
When this policy changes, we update the date at the top. Big changes will be announced on the site.