Privacy Policy for Badger

Last Updated: October 12, 2026

1. Who we are

Badger is a digital business card app published by Nathan de Castro ("we", "us"). It lets you share your contact details by QR code, contact file (vCard) or NFC tag, and keep the cards you receive. This policy explains what data the app handles and why.

2. Without an account: your data stays on your phone

You can use Badger without creating an account. In that case, everything stays on your device and we receive nothing:

• Your card: name, phone number, email address, company, role, website, card colour and, if you add one, a photo.
• Received contacts: the cards other people share with you, kept in the "My Contacts" list.

When you share your card, it goes directly to the other person (shown as a QR code, sent as a contact file through the app you choose, or written to an NFC tag). It does not pass through our servers.

3. With an account: cloud sync

Cloud sync is optional. If you create an account, we store the following with Google Firebase so you can find your cards on another phone:

• Account: your email address and password (Firebase Authentication stores the password in hashed form; we never see it).
• Your cards: the card fields listed above, the card colour and the dates the card was created and updated (Cloud Firestore).
• Card photos: the photo you attach to a card (Cloud Storage).
• Received contacts you sync: the details of the cards you received and chose to keep in your account.

This data is only readable by your own account. Firebase may also process technical data such as your IP address to secure the service.

4. Device permissions

• Camera: to scan QR codes. Images are processed on your phone and not stored or sent.
• Photos: to pick a photo for your card, only when you choose one.
• NFC: to read and write NFC tags, only when you start it.

5. What we do not do

• No advertising and no advertising identifier.
• No analytics or tracking.
• We do not sell or rent your data, and we do not share it with anyone other than the service providers listed below.

6. Service providers

Google Firebase (Authentication, Cloud Firestore, Cloud Storage) hosts account data. Data may be processed outside your country, under Google's data protection terms. Data is encrypted in transit (HTTPS/TLS).

7. Contacts you receive

Cards you receive contain other people's personal details, which they chose to share with you. Please use them respectfully and delete them if the person asks you to.

8. How long we keep data

Data on your phone stays until you delete it or uninstall the app. Cloud data stays until you delete the card or your account. When an account is deleted, its cards, photos and synced contacts are removed.

9. Your rights

Under the GDPR and similar laws, you can access, correct, export or delete your data, and object to or restrict its processing. You can edit and delete your cards directly in the app. To delete your account, see Delete Account. For any other request, email contact@coldsnap.fr. You can also complain to your data protection authority (in France, the CNIL).

10. Children

Badger is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

11. Changes

We may update this policy. The date at the top shows the latest version. Significant changes will be announced in the app.

12. Contact

• Email: contact@coldsnap.fr
• Website: https://coldsnap.fr