PassAround is operated by L121, a personal, non-commercial project by Alessandro Lisi. We are the controller of the data described here. Questions or requests? Email alessandro@lisi.cc.
To make pass-sharing work, we process a small amount of data:
- Your WhatsApp number — so a code can be delivered to you and so you can be invited in the first place.
- Pass and QR images uploaded by group admins into their pool.
- Claim records — when you claim a code we log the venue/location, a timestamp, the device, and a per-recipient watermark. This is used for accounting, pool rotation, and abuse prevention, never to block you.
- Sign-in details for admins (e.g. your email) so you can manage your group.
We use Google Analytics 4 (provided by Google Ireland Ltd) to understand how the site is used in aggregate — pages visited, approximate region, rough device/browser, and a few key actions such as requesting access. This helps us improve PassAround.
Google Analytics sets cookies and processes your IP address, and Google may process this data outside Switzerland and the EU, including in the United States. We do not use it for advertising and do not link it to your WhatsApp number or identity. You can opt out using your browser's cookie settings or Google's opt-out add-on:
The only non-essential cookies we set are Google Analytics' (e.g. _ga, _ga_*), which tell repeat visits apart from new ones. Essential cookies/local storage keep you signed in and remember that you've seen the analytics notice.
You can block or delete cookies at any time in your browser. Under Swiss data-protection law we may run analytics on this basis; if you'd rather we didn't, use the opt-out options above.
We do not sell your data and we don't run ads. Data is only shared with the providers that run the service on our behalf:
- Google — analytics (see above).
- Our hosting and infrastructure providers (e.g. Vercel, Fly.io) — to run the app.
- WhatsApp / Meta — to deliver codes to your number.
- Our database and image-storage provider (Supabase) — to store the data above.
PassAround uses the Pinterest API to publish our own marketing images ("Pins") to Pinterest business accounts we own. We authenticate to our own accounts using Pinterest's OAuth flow and store only our own access tokens, locally, to do this.
This is outbound publishing of our own content — we do not collect, receive, or process other Pinterest users' personal data through this integration. When you interact with our Pins on Pinterest, Pinterest's own privacy policy applies.
We keep data only as long as needed to run the service. Claim logs are kept for a limited period for accounting and abuse prevention; analytics data follows Google's retention settings. You can ask us to delete your data at any time.
Under the Swiss Federal Act on Data Protection (revDSG) and, where it applies, the EU GDPR, you can ask to access, correct, delete, or object to the processing of your data. Just email alessandro@lisi.cc.
We may update this policy as the project evolves. The date at the top reflects the latest version.