Privacy

Someone who scans your HII tag sees the item type, the name you gave it, your description and photo if you added one, and whether you have marked it lost. That is the complete list.

They do not see your name, phone number, email address, home address, or any internal identifier. This is enforced in the database: the function that resolves a public tag returns a fixed set of columns and none of them are yours.

Their messages, any photo they chose to attach, and an approximate area if they chose to share one. Nothing else. HII never asks a finder for a name, a number or an email.

When a finder chooses to share their area, their browser gives us coordinates and we round them to two decimal places — roughly a kilometre — before storing anything. Precise coordinates are never written to our database, so they cannot be exposed later.

We record that a scan happened, roughly when, the country, and a coarse device category. We do not store IP addresses. To count unique scans without identifying anyone, we store a salted one-way hash that cannot be reversed into an address.

Conversations close automatically 24 hours after they start unless you extend them. A finder’s browser session expires at the same time, and its credential is scrubbed from our database after a short grace period.

Your phone number and email are used to sign you in and to notify you. They are never shown to a finder and never sold or shared for marketing.

Payments are processed by Razorpay. HII never sees or stores your card details.

You can deactivate a HII identity at any time, which stops it resolving. You can delete an item and its conversation history from your dashboard. To delete your account entirely, contact us and we will remove your profile, assets, identities and conversations.

Questions about any of this: privacy@hii.cx