Privacy
Last updated 18 October 2026
EcoProof is run by SuperBee in Thailand. We are the data controller for the personal data described here, under Thailand's Personal Data Protection Act (PDPA). This page explains it in plain language. Questions or requests: privacy@superbee.me.
The short version
- You can collect stamps without an account. Then we only know a random ID stored in your browser.
- Signing in with Google or Facebook gives us your name, email and profile picture. Signing in with a wallet gives us only its public address.
- Your location is used once, to check you are at a place when you collect its stamp. We don't store it.
- Each stamp's proof on Solana is a fingerprint (a hash): it contains no name, email or location.
- No ads, no tracking or analytics tools, and we never sell your data.
What we collect, and why
- Your passport. Without an account, a random ID is created in your browser and keeps your passport. With each stamp we store the place, the date and time, how it was collected (QR code, printed card or online order) and the points it earns. We need this to run your passport and to stop the same stamp being collected twice.
- Online orders. When a shop connects its online store, it sends us the order number, the products and quantities, and we work out their eco impact. Shops never send us your name, email, address, payment details or prices.
- Location. A place on the map only gives its stamp to people who are there. When you collect one, your browser asks to share your location; we compare it with the place's location and then discard it. “Show distances” on the map works in your browser and sends nothing to us.
- Your account, if you sign in. With Google or Facebook: your name, email address (if the account has one), profile picture and account ID there. With a Solana wallet: its public address (you sign a free message to prove it is yours; we never see your keys). While you are signed in we keep a session with your IP address and browser type, so you can see and end sessions and we can spot misuse.
- Shops. If you set up a place: its name, tagline, logo, location, the account that owns it, and the order data described above.
- Reports. If you report a place: the reason, anything you write, and your passport ID, so each person counts once. Reports are never shown to the place.
- Security. Our hosting keeps short-lived technical logs, and we use IP addresses briefly to limit repeated requests.
Under the PDPA we rely on: providing the service you asked for (your passport, stamps, account and shop), our legitimate interest in keeping it fair and secure (the location check, duplicate and misuse checks), and your consent where we ask for it (sharing your location, signing in with Google or Facebook). You can withdraw consent at any time; it doesn't affect what was done before.
What is public on the blockchain
Stamps are anchored on the Solana blockchain (currently its test network, devnet) so anyone can check them. Each proof holds only a fingerprint of the stamp record, which can't be turned back into your data. Bee Guardian NFTs are minted to your wallet, and like everything on Solana they are public together with that wallet address, including the points and impact figures shown on them. Nothing written to a blockchain can be changed or deleted, by us or anyone else. That is why we put no names, emails or locations there.
Sharing your passport
If you share your passport, anyone with the link sees your stamps, points and Bee Guardians. Share links use a separate public ID, never your browser ID or your email.
Who else handles your data
- Vercel runs the website, and Neon runs our database. Both store data in the United States.
- Google or Meta (Facebook), only if you choose to sign in with them.
- Anthropic (AI) estimates what a shop's products replace, from product names and descriptions. No customer data is sent.
- Solana network nodes receive the proofs and NFTs described above.
- OpenStreetMap supplies the map images. Your browser loads them directly, so OpenStreetMap sees your IP address.
- Phantom or Solflare, if you use their wallet apps. Their own privacy policies apply.
Because our hosting and database are in the United States, your data is transferred outside Thailand. We only use providers that protect it with appropriate safeguards, as the PDPA requires. We never sell personal data or share it for advertising.
Cookies and storage on your device
We use one cookie to keep you signed in. Your browser also stores your guest passport ID and a few settings (for example a sign-in in progress). There are no advertising or analytics cookies.
How long we keep it
- Account details: until you delete your account. Sign-in sessions end after 30 days.
- Stamp records: they are what the proofs on Solana point to, so we keep them. When you delete your account we remove your name, email, sign-in methods and sessions, and your stamps are no longer connected to you.
- Shop details: until the place is removed. Reports: as long as needed to review them.
Your rights
Under the PDPA you can ask to see a copy of your data, correct it, delete it, receive it in a usable format, object to or limit how we use it, and withdraw consent. You can delete your account yourself from the account menu (Delete account). For anything else, email privacy@superbee.me and we will answer within 30 days. We can't delete what is on the blockchain, as explained above. If you are unhappy with how we handle your data, you can complain to Thailand's Office of the Personal Data Protection Committee (PDPC).
Children
EcoProof is not meant for children under 10. Under the PDPA, if you are under 20 you need a parent's or guardian's agreement to sign in with an account.
Changes
If we change how we use your data, we will update this page and the date at the top. For important changes we will tell you in the app.