Privacy
What the Office knows, and who else does.
The Office exists to keep one thing private: who holds which number. This page says what it collects to do that, why, and how you get it back or removed. It is written to be read.
Controller
[LEGAL ENTITY NAME. DECISION G4 PENDING], [REGISTERED ADDRESS. DECISION G4 PENDING], Romania. For every request about your data write to office@officeofreappearance.online.
What is collected
- Holders
- Your email address (the key to your file), the shipping name, address and phone number you type into the payment page, the number issued to you, and the dates on which the file was opened, vested, dispatched and delivered.
- Finders
- The message you type, the contact detail you choose to leave (optional), and a hashed form of your network address used only to limit abuse. No account, no email address required.
- Everyone
- Server logs kept by the hosting provider for a short period. No analytics, no advertising pixels, no third-party cookies. The only cookie the Office sets is the holder's session cookie, after you open a magic link.
Why, and on what basis
- To sell and deliver the tag and to keep the registry record for it: performance of a contract.
- To relay messages between finder and holder without disclosing either: performance of the registry service.
- To keep invoices and payment records: a legal obligation under Romanian accounting and tax law.
- To limit abuse of the finder page: the Office's legitimate interest in keeping the relay usable.
What is never shown
Your name, email and address are never printed on the tag, never shown on the certificate, never shown on the finder's page and never included in a case card. A finder sees only the number and, if you reply, the words you choose to send. You see a finder's contact only if the finder typed one.
Who processes it for the Office
- Stripe
- Payment, and the collection of your shipping address and phone on the payment page. Stripe is a separate controller for the payment itself.
- Print partner
- Receives the print files for your number and the shipping address and phone, to produce and dispatch the tag. Located in the European Union.
- Carrier
- Receives the shipping address and phone from the print partner to deliver the parcel.
- Supabase
- Database hosting in the European Union (Frankfurt).
- Resend
- Sends the Office's emails.
- Netlify and Cloudflare
- Hosting, DNS, and the anti-bot check on the finder form (Cloudflare Turnstile).
How long
The registry record and your email are kept for as long as the number is active, so that a finder can still reach you. Retire the number from your file and the record is closed. Shipping details are kept as long as the order and the invoice must be kept by law, then deleted. Finder messages are kept with the case; a closed case may be deleted on request by either side. Server logs expire within weeks.
Your rights
You may ask what the Office holds about you, ask for a copy, ask for corrections, ask for deletion, object to a processing, or withdraw a consent. Write to office@officeofreappearance.online; the Office replies within one month. There is no self-service export in this version, so a person does it by hand, and confirms by email before touching a record that has a live number. You may also complain to the Romanian data protection authority, ANSPDCP, at dataprotection.ro.
Deleting a holder's email deletes the only way a finder can reach that holder. The Office says so before doing it.