Last updated: 15 August 2026
ExtraTag is a QR-based lost-and-found service. We process only the information needed to manage tags, help a finder contact the owner and protect the service against abuse.
Extravisual Services BV
Company number: BE 0669 804 301
Contact for privacy questions and data requests: info@extratag.be
| Context | Data | Purpose |
|---|---|---|
| Account | Name, e-mail address, password hash, language preference, notification settings and contact details entered by the owner. | Account login, tag management and owner notifications. |
| Tags | Tag name, public slug, printed code, status/mode, optional photo/emoji, optional owner message and optional contact details. | Show the public scan page and allow the owner to configure what a finder may see. |
| Scans and security logs | Scan time, selected language, event type, masked IP address, approximate country-level location derived from IP address, browser/device information where needed for security. | Notify the owner, prevent abuse, rate-limit suspicious activity and maintain service security. |
| Exact location | GPS coordinates and accuracy data, shared either when the scanner actively taps the location button and grants browser permission, or automatically on a scan when the scanner has previously granted this site persistent location permission in their browser. | Help the owner recover the item. This is optional and the scan page continues to work without it. |
| Found report | Message, finder name and finder contact details when voluntarily submitted through the secure report form. | Forward the report to the tag owner without publicly exposing the owner's contact details. |
| Shop/payment | Order data, selected plan/product, price, payment status, promo/license code, shipping/contact details where applicable and Mollie payment reference. | Process orders, activate licenses and handle payment/shipping administration. |
| Processing | Legal basis |
|---|---|
| Account, tag management, shop orders and license activation | Performance of the service agreement. |
| Scan notifications, contact unlock and owner/finder communication | Performance of the service and legitimate interest in helping recover lost items. |
| Security logs, rate limits, anti-abuse controls and masked IP logging | Legitimate interest in protecting the service, users and finders. |
| Exact browser location shared by a scanner | Consent through browser location permission — either an explicit tap on the location button, or a persistent permission the scanner previously granted this site and which the browser reuses on a later scan. Consent can be refused or withdrawn by not granting, or by removing, location permission in the browser. |
| Payment and accounting records | Performance of the service agreement and legal obligations where applicable. |
For ordinary scans, ExtraTag may query ipwho.is to estimate the scanner's country from the IP address. Ordinary scans are stored and shown at country level only. City, region and exact GPS coordinates are not stored for an ordinary scan unless the scanner shares location — either by using the location-sharing button and granting browser permission, or automatically when the browser already holds a persistent location permission the scanner previously granted for this site.
Exact shared coordinates and accuracy data are used only for the lost-item flow and are automatically removed from older logs after 7 days.
ExtraTag does not use marketing, advertising or analytics cookies. We only use necessary and functional cookies/browser storage for login, security, language preferences and temporary page state.
| Name / type | Storage | Typical duration | Purpose | Category |
|---|---|---|---|---|
bagtag_session | Cookie | Browser session | Login session, CSRF protection and account/admin access control. | Strictly necessary |
extratag_admin_lang | Cookie and localStorage | Up to 1 year for the cookie; until browser cleanup for localStorage | Remember dashboard/shop language preference. | Functional |
bag_lang | localStorage | Until browser cleanup | Remember the selected public scan-page language. | Functional |
extratag_help_enabled | localStorage | Until browser cleanup | Remember whether dashboard help tips are enabled. | Functional |
bag_session_<tag> | sessionStorage | Browser tab/session | Temporary scan-flow token used to reduce duplicate logs and abuse. | Strictly necessary |
| Dashboard temporary state | sessionStorage | Browser tab/session | Temporarily restore dashboard state after actions such as saving. | Functional |
Because no non-essential analytics, advertising or tracking cookies are used, ExtraTag does not show a marketing-cookie consent banner. If analytics or marketing tools are added later, the cookie notice and consent flow must be updated before activation.
We only share data where needed for the service. Depending on how the service is used, the following external services may receive limited data:
Some external services may process data outside the European Economic Area. In that case, the service provider's own safeguards and privacy terms may apply.
To exercise your rights, contact info@extratag.be. We may need information to verify your identity and locate the relevant account/tag/logs.
If you believe your personal data is not handled correctly, you can contact us first. You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Gegevensbeschermingsautoriteit / Autorité de protection des données
Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels
contact@apd-gba.be
ExtraTag uses measures such as password hashing, CSRF protection, rate limits, masked IP logging, restricted uploads, admin access control and security logging. No online service can guarantee absolute security, but the service is designed to limit unnecessary exposure of personal contact details.