Privacy

Who is responsible

Guðmundur V. Magnússon, organisation number 0712453499, Þrastarás 75, 221 Hfj, is the data controller.

One business runs both retra.no and retra.is. Questions and requests go to retra@retra.is, and we answer within 30 days.

If you own a tag

• Your email address, used to sign in and to notify you when someone finds your item.
• Your phone number, only if you switch SMS notifications on yourself. It is off by default and we don't ask for it at signup.
• The country and language your account belongs to.
• The nickname and message you write for a finder to see. You decide what goes there.
• Which tags you have activated, and when.

If you found something

A finder never creates an account and never has to say who they are.

• The message they write. It is the whole reason this service exists.
• Their email address, only if they type it in. It is used for one thing — sending them the link back to the conversation — and the owner never sees it.
• An approximate location, only if they tap the button that shares one. Coordinates are rounded to three decimal places — roughly a hundred metres — before anything is stored, and deleted after 30 days.

What we don't store

• A child's name, age or nursery. We don't ask, and there is no field for it.
• Your address or your location. Only a finder can share where an item was found.
• Precise coordinates. The rounding happens before storage, so the exact position never exists here.
• Tracking scripts, analytics, marketing cookies or embedded fonts. Which is why there is no consent banner either.

Technical data

Two things are stored for technical reasons, and both are worth naming even though neither says who you are.

To limit how many messages can be sent from one place in a short time, we store a cryptographic code derived from the IP address together with the current date and a secret value. It changes every day, so yesterday's rows cannot be matched against today's, and it cannot be turned back into an address.

The web server keeps an ordinary access log with IP address and timestamp. The address of a scanned tag is filtered out of it. The log is deleted after 14 days.

The sign-in page runs a bot check from Cloudflare (Turnstile), which receives your IP address as part of that check. It is not present on the page a finder sees.

If you are signed in, a cookie keeps you signed in. It is necessary for that and used for nothing else.

Our legal basis

• Account, notifications and relaying messages: performance of a contract (GDPR article 6(1)(b)).
• A finder's message: legitimate interest (article 6(1)(f)). Both parties have an obvious interest in getting the item home, and the finder writes the message voluntarily for exactly that purpose.
• A finder's email address and location: consent (article 6(1)(a)). Both are optional fields, and consent can be withdrawn by asking us to delete the conversation.
• Abuse limits and access logs: legitimate interest (article 6(1)(f)).

How long we keep it

• A finder's message, the replies in the conversation and the finder's email address: 90 days from when the message was sent, then deleted automatically, nightly, by a job that checks its own work.
• A finder's approximate location: 30 days. Shorter than the rest of the conversation, deliberately.
• Your account and what you have written about your items: until you delete them. We don't delete dormant accounts.
• Access logs: 14 days.
• Backups: 30 days. Anything you delete disappears from the service immediately, but may exist in a backup until it expires.

Who else sees it

We sell nothing on and share nothing for marketing. These providers process data on our behalf, under a data processing agreement, all within the EEA.

• Server and database hosting («FYLL INN FØR LANSERING»).
• Outbound email («FYLL INN FØR LANSERING»).
• SMS, only if you have turned SMS notifications on («FYLL INN FØR LANSERING»).
• Cloudflare, for the bot check on the sign-in page.

The shop is separate

The purchase itself happens in a separate shop with its own privacy policy and its own payment and shipping providers. The registry you are reading about never learns what you bought, what it cost, or where it was sent.

Children

The service is built for adults labelling children's belongings, not for children to create accounts. We don't knowingly create accounts for anyone under 18.

The tag itself is designed to give nothing away: it carries a random code, not a name. What goes in the message is your choice, and our advice is to write something that helps a finder without identifying a child.

Your rights

You can ask at any time for access to what we hold, correction of anything wrong, erasure, restriction of processing, a machine-readable copy, and you can object to processing based on legitimate interest.

Access and deletion are self-serve from your account page. Deleting your account takes your items, conversations and messages with it, and frees the tags — the stickers themselves survive and can be activated again. You can also write to retra@retra.is.

If you are the finder and want the conversation deleted before those 90 days are up, write to us from the address you gave, or send us the link to the conversation.

Security

The code on a tag is never stored as printed. We store a cryptographic code derived from it, so a leaked database does not hand anyone access to anyone's tags.

Everything runs over an encrypted connection. The database is in the EEA, backed up continuously, and access to it is limited to running the service.

Changes

If we change this policy in a way that matters to you, we will say so by email before it takes effect. The date at the top says when the text last changed, and we can document exactly what it said on a given date.

Complaints

If you disagree with how we handle your data, we would rather hear it first. You are entitled either way to complain to Persónuvernd, or to the data protection authority where you live.