Document · 01
Your data, stamped & sealed.
Aranor is a travel passport — collecting stamps, not surveillance. This page is the plain-English receipt of every byte of personal data we touch, why we touch it, and how to ask for it back.
§ 01 · TL;DR
Plain-language summary
The five-line version
- We collect your email, name, language, and the venues you stamp.
- We use that to grow your rank, hand out discounts, and detect fraud.
- We never sell your data. Period.
- You can export everything or delete your passport from Profile → Data.
- We use one analytics tool — Plausible — which doesn't track you across sites.
Aranor LLC ("we", "us") operates the Aranor Passport service available at passport.aranortravel.com and the connected mobile applications. This Privacy Policy explains how we handle Personal Data when you create a passport, stamp a venue, or simply browse the site.
§ 02 · Data inventory
What we collect
We deliberately keep this list short. If a field isn't on it, we don't collect it.
- Account basics
- Full name, email, language preference, password hash.
- Stamp history
- Venue ID, timestamp, signed claim code, multiplier applied.
- Device metadata
- Browser user-agent, OS family, approximate region (city-level, IP-derived).
- Payments
- None — Aranor is free. Vendor discounts settle at venue.
- Support tickets
- Anything you write to us at contact@ — kept for 18 months.
- Photos
- Only if you upload an avatar. Stored encrypted at rest.
§ 03 · Purposes
How we use your data
- Run your passport — record stamps, compute rank, surface eligible discounts.
- Verify legitimacy — the staff-code handshake exists to keep fraudulent stamps out.
- Improve the product — aggregated, never linked to your name in analytics.
- Talk to you — receipts, rank-up notifications, and the occasional venue invite.
What we will never do
Sell your data, target advertising at you, share your stamp history with other users without your action, or use your face for any biometric purpose.
§ 04 · Lifecycle
Retention & deletion
Data lives only as long as it's useful. Defaults below; you can override most of them.
- Active passport
- Kept while your account is active.
- Inactive account
- Auto-archived after 24 months of no logins; deleted 6 months later.
- Stamp history
- Anonymized after account deletion (we keep counts for vendor settlements).
- Support tickets
- 18 months from last reply.
- Analytics
- No cookies; aggregated daily, raw events purged after 30 days.
§ 05 · GDPR
Your rights
Whether you live in the EU or not, you can:
- Access — download a JSON dump of everything we hold.
- Rectify — fix anything wrong in Profile → Account.
- Erase — delete your passport in one click; we comply within 30 days.
- Object — withdraw consent for non-essential processing at any time.
- Lodge a complaint — with the Personal Data Protection Agency of Armenia.
§ 07 · Jurisdictions
International transfers
Aranor is based in Yerevan, Armenia. Most of our infrastructure sits in the EU. Where data must move between jurisdictions, we rely on the European Commission's adequacy decisions and standard contractual clauses.
§ 08 · Revisions
Updates to this policy
Material changes are announced via email at least 30 days before they take effect. Cosmetic changes (typos, formatting) are made silently and reflected in the "Last updated" date at the top.