Privacy Policy
Last updated: September 2026
This website ("Feedbacker") lets visitors leave feedback about attractions or events after scanning a printed QR code, and lets organizers manage those attractions and read the submitted feedback. This policy explains what data we process, why we process it, and what rights you have.
What data we process
- The feedback you submit voluntarily: what was good, what could be better, and other comments, together with the attraction and the QR code it was submitted through.
- A visitor identifier computed by the FingerprintJS library on the feedback form (described below), stored together with your feedback.
- If you register an organizer account: your e-mail address and a hashed (never plain-text) password.
- Your language preference, kept in your browser's local storage and in a session cookie.
FingerprintJS visitor identifier
To protect the service against automated abuse and spam, the feedback form uses FingerprintJS, an open-source (MIT-licensed) library by Fingerprint.com, to compute a visitor identifier from attributes of your browser and device (such as screen size, timezone, installed fonts and rendering behaviour).
The identifier is computed locally in your browser. The open-source version of FingerprintJS used here does not send any data to Fingerprint.com servers; the identifier is transmitted to us together with your feedback and stored in our database.
The identifier is pseudonymous and is not guaranteed to be unique or permanent — it can change between browsers, devices or after browser updates.
Legal basis
Feedback is provided voluntarily. We process the data described above on the basis of our legitimate interest (Article 6(1)(f) GDPR) in operating this service and in preventing abuse and spam.
You may object to this processing at any time; we will then delete the related data, unless we have overriding legitimate grounds for keeping it.
Retention
Feedback (including the visitor identifier) is kept until the organizer deletes it or the attraction it refers to is removed. Account data is kept until the account is deleted.
Your rights
Under the GDPR you have the right to access, rectify or erase your data, to restrict or object to processing, and to data portability. Because feedback is anonymous, we cannot identify a specific submission without additional information from you (such as your device and the exact time of submission).
Cookies and local storage
This service uses the following browser storage. FingerprintJS itself does not place cookies.
- A session cookie that holds your language preference and (for organizers) your login session.
- Your browser's local storage, used to remember the chosen language between visits.
Contact
For any questions about this policy or about your data, contact the service operator: