Cookie Policy

This policy says what TapCard stores in your browser. The operator is Laboise eworker Laos enterprise (Tax ID 275618471000, registration 08/04 – 000001253). The company and the two headquarters are described in the Terms of Service. Questions go to hello@tapcard.asia.

What we mean

A cookie is a small file a site asks your browser to keep. TapCard uses cookies only so a signed-in owner can stay signed in. A public card, the QR code, and the lead form do not need an account and do not set an advertising cookie.

The cookies we set

• Session cookie. Name pattern next-auth.session-token (or __Secure-next-auth.session-token on HTTPS). Set when you sign in. Used to know which account is open. Ends when you sign out or when the session ends. Strictly necessary for the dashboard.
• Sign-in helpers. NextAuth may set a short-lived CSRF cookie and a callback cookie while you sign in. They exist only to finish that sign-in safely.

We do not set an analytics cookie, an advertising cookie, or a cookie that follows you across other sites. We do not use a consent banner for ads, because those cookies are not here. If a non-essential cookie is added later, this page will change first and we will ask before it is set.

What is not a cookie

• The QR code is an image of the contact details. It is not stored as a cookie.
• A lead form stores what you type in our database, not in a cookie. That is covered by the Privacy Policy.
• The view counter is a number on the card. It is not a tracking cookie.

How to refuse

You can block cookies in your browser. If you block the session cookie, the public card still opens, and the dashboard sign-in will not stay open. Sign-out also clears the session.

Law

Under PIPEDA, a cookie that is required to provide a service you asked for does not need a separate marketing consent. The session cookie is that kind. Canada’s anti-spam law (CASL) covers commercial email, not this cookie. TapCard does not send commercial email.

The same company duties under the Law on Electronic Data Protection No. 25/NA (Lao PDR) apply to information that identifies a person. A session cookie identifies the signed-in account and is used only for that session.

Changes

The date at the top of this page is the date of the current text. Disputes about this policy are heard in Ontario, Canada, as the Terms say.