Privacy Policy

Effective June 2026

Cove Travel is a lost-and-found service for luggage tags. When someone finds a tagged bag and scans its QR code, they can reach the owner. This policy explains what we collect and how we use it.

What we collect

Account information. Your email address and a securely hashed version of your password.

Tag information. The label you give a tag, the contact details you choose to show (such as an email and/or phone number), and your per-tag notification and marketing preferences.

Scan information. When one of your tags is scanned, we record the time, an approximate (city-level) location derived from network information, and a one-way hashed value of the scanner’s network address used only to prevent abuse. We do not store the scanner’s raw network address, and we do not collect precise GPS location.

How we use it

To operate the service (show finders the contact details you’ve chosen, and let you manage your tags), to send the notifications you turn on, to send marketing emails only if you opt in, and to protect the service from abuse.

What finders can see

A finder sees only the contact methods you choose to show, and only after entering the PIN printed on the tag. If you enable scan notifications, you’ll be emailed when your tag is scanned; an approximate location is included only when someone enters the PIN.

Sharing

We do not sell your information and we do not show ads. We use a small number of service providers to run Cove Travel: hosting (Vercel), database (Supabase), and email delivery (Resend). They process data only to provide these services.

Marketing emails

We email marketing only to people who opt in, and you can unsubscribe at any time using the link in those emails.

Retention

Scan logs are kept for up to 90 days and then deleted. Account and tag information is kept while your account is active. Retiring a tag removes its contact card.

Your choices

You can edit or hide your contact details any time from your dashboard. To access or delete your account and associated data, contact us at privacy@cove.travel.

Security

Data is encrypted in transit. Passwords and tag PINs are stored only as secure hashes, and scanner network addresses are stored hashed. No method is perfectly secure, but we work to protect your information.

Children

Cove Travel is not directed to children and is intended for adults.

Changes & contact

We may update this policy and will revise the date above when we do. Questions? Email privacy@cove.travel.