Privacy, in plain language
Effective 7 October 2026. Passpile is Zeeshan’s personal hobby project, supported by Alvara. For privacy questions or requests, contact zeeshan@alvara.ae.
What we use
We use your name, email, account authentication information, uploaded pass artwork, collection settings and optional memories to provide your account and wall. Optional role, country/region and city help group public rankings. Event countries and years help calculate collector badges. We do not infer your precise location.
Where it goes
Appwrite provides authentication, database, file storage and hosting. This project uses its Frankfurt region for account and collection data; CDN delivery and operational logs may involve other locations. See Appwrite’s privacy notice for its processing details. Browser storage retains account collection drafts, finished artwork, cached published collections and original photos used for re-cropping on that device. This helps recover interrupted work. Clearing browser data removes local copies, not your cloud account.
Automatic crop processing and English text reading run in your browser. This version does not automatically send uploads to an external generative AI provider. Any separately requested assisted reconstruction is a separate workflow, not an invisible step in uploading. We do not sell personal data or add advertising trackers.
Private until you publish
Publishing shares all pass fronts and backs, memories, wall details, optional profile fields and a generated preview publicly. Joining Explore also places your collection in public discovery and rankings. Social platforms may fetch and cache public previews when you share a URL. Public artwork can contain personal details and scannable codes: inspect and remove them before publishing. Unpublishing cannot recall external copies or caches.
Choices and retention
You can leave optional fields blank, edit them, remove passes and unpublish your wall. New or edited cards, memories and profile details do not replace a previously published snapshot until you publish again. Changing your room also updates that room and preview on an already-public wall. We retain cloud account and collection data to provide the service until you remove it or request deletion; operational providers may retain logs or backups under their own policies. Email us to request access, correction, a copy, account deletion or withdrawal of optional processing. We may verify account ownership before acting. You may also contact your relevant data-protection authority.
Essential storage and external links
We use authentication/session storage and browser caches needed for the app. LinkedIn, WhatsApp, email and Alvara links lead to services with their own policies. Clicking a share button opens a composer; Passpile does not automatically post on your behalf. A room request drafts an email containing your account name, email and ID, which you choose whether to send.
Children and security
Passpile is intended for adults aged 18 or over. Contact us if a child has submitted data. We use provider access controls to separate private and published collections; no online service can guarantee absolute security. Never store active access credentials or highly sensitive documents here.