Privacy Policy

Last updated: October 27, 2026

In short: without an account, everything stays on your phone and we receive nothing. With the optional cloud sync, your cards are stored with Google Firebase and only your account can read them. No ads, no analytics.

1. Who we are

Badger is a digital business card app published by Nathan de Castro ("we", "us"). It lets you share your contact details by QR code, contact file (vCard) or NFC tag, and keep the cards you receive. Contact: contact@coldsnap.fr.

2. Without an account: your data stays on your phone

You can use Badger without creating an account. Everything then stays on your device and we receive nothing:

Your card: name, phone number, email address, company, role, website, card colour and, if you add one, a photo.
Received contacts: the cards other people share with you, kept in your contacts list.

When you share your card, it goes directly to the other person (shown as a QR code, sent as a contact file through the app you choose, or written to an NFC tag). It does not pass through our servers.

3. With an account: cloud sync (optional)

If you create an account, we store the following with Google Firebase so you can find your cards on another phone:

Account: your email address and password (Firebase Authentication stores the password in hashed form; we never see it).
Your cards: the card fields listed above, the card colour and the dates the card was created and updated (Cloud Firestore).
Card photos: the photo you attach to a card (Cloud Storage).
Received contacts you sync: the details of the cards you received and chose to keep in your account.

This data is readable only by your own account. Firebase may also process technical data such as your IP address to secure the service.

4. Device permissions

Camera: to scan QR codes. Images are processed on your phone and not stored or sent.
Photos: to pick a photo for your card, only when you choose one.
NFC: to read and write NFC tags, only when you start it.

5. What we do not do

No advertising and no advertising identifier.
No analytics, tracking or crash-reporting service.
We do not sell or rent your data, and we share it with no one other than the service provider below.

6. Service provider

Google Firebase (Authentication, Cloud Firestore, Cloud Storage) hosts account data. Data may be processed outside your country, under Google's data protection terms. Data is encrypted in transit (HTTPS/TLS).

7. Contacts you receive

Cards you receive contain other people's personal details, which they chose to share with you. Please use them respectfully and delete them if the person asks you to.

8. How long we keep data

Data on your phone stays until you delete it or uninstall the app. Cloud data stays until you delete the card or your account. When an account is deleted, its cards, photos and synced contacts are removed.

9. Your rights

Under the GDPR and similar laws, you can access, correct, export or delete your data, and object to or restrict its processing. You can edit and delete your cards in the app. To delete your account, see Delete account. For any other request, email contact@coldsnap.fr. You can also complain to your data protection authority (in France, the CNIL).

10. Children

Badger is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

11. Changes

We may update this policy. The date at the top shows the current version. Significant changes are announced in the app.