Privacy notice

Who we are

Wink is a startup based in Erbil, Iraq. In this notice "we" means the Wink team and "you" means the person holding a Wink account, unless a section says it is about visitors.

What we collect when you create an account

You can sign up with an email address or with Google. Either way, the account itself is small.

If you sign in with Google, we receive your email address, your name and whether Google has verified the address. We do not store a Google account id, and we never see your Google password. We ask Google only for your email and basic profile, nothing else.

Your email address, which is how you sign in and where sign-in codes are sent.
A name. If you give none, we make a placeholder from your email address, and you replace it when you set up your profile.
The language you were using when you signed up, so the dashboard opens in it.
A password, only if you choose to set one in settings. Signing in with a code is enough; a password is optional and is stored hashed.
Your notification choices for order updates and for new contacts, which are on until you turn them off.

What your public profile shows

Your profile at wink-app.me/your-username shows exactly what you put on it: your display name, headline, photo, tabs and blocks, and for a business your products and about card. Nothing else about your account is public. Your email address, your sign-in details, your orders and your contacts are never shown to a visitor.

Anything you upload to the profile, including photos, block images and files, is served from a public address so that a phone with no login can open it. Treat what you put on a profile as published.

A profile you have not published, or have unpublished, shows a short holding page instead of your content.

What a visitor who taps your card gives us

Very little, by design. A person who taps a card or scans its QR code is sent your profile as a plain page. We set no cookie on them, open no session for them, and do not follow them afterwards. The page is the same for everyone and is served from a cache. If you set your profile in one of our Google fonts, their browser fetches that font from Google.

To count unique visitors without a cookie, we compute a one-way hash from the visitor's network address and browser, mixed with a secret and the date. It changes every day, so the same person counts once per day and cannot be recognised across days. The network address itself is never stored.

If a visitor taps "Save contact", their phone receives a contact card built from your public details, and the save appears in your Contacts as an unnamed contact with the time and how they arrived. They can then add their name and phone number if they choose.

Analytics

Each time your profile is opened or one of your links is tapped, we write one row for you to see in your dashboard. The row holds:

The time, and which of your cards it came from, if any.
The source: an NFC tap, a QR scan, a link, or direct.
The device type (phone, tablet or computer) and the operating system, read from the browser's own description of itself.
The website that linked to you, if any. We keep its domain name only, never the full address of the page.
The daily visitor hash described above.
Location, when recorded, is the city at most. Nothing finer than a city is ever collected.

We do not record what a visitor types, where they go afterwards, or anything that identifies them by name.

Analytics rows are kept for as long as your profile exists, so your history is complete, and they are deleted with the profile. Your dashboard can show them over seven, thirty or ninety days with the full history behind them.

Contacts and form answers

When a visitor saves your contact card, the save is recorded in your Contacts without a name. Right after saving, they can add their name and a phone number if they choose. We also record which card and which source it came through.

If you add a form to your profile, a visitor's answers are kept for you with the time and how they arrived, and emailed to you when your New contacts switch is on. You can read, delete and export them from the form's page in your dashboard, and they are deleted with the form or your profile.

These details belong in your Contacts and are visible only to you. We do not use them for anything else, and we do not contact the people who left them. You can edit, tag, delete and export them as a CSV or vCard file at any time. They are deleted when your profile is deleted.

People who leave their details are trusting you with them. Use them as a reasonable person would expect from someone they just met.

Orders and delivery

When you order a card we need enough to make it, deliver it and account for it.

What you ordered: the plan, the card colour or your artwork, the profile design you chose, any voucher code, and a note if you left one.
A delivery address: the recipient's name, phone number, governorate, city, district, nearest landmark, any notes, and a map pin if you drop one. Delivery in Iraq is arranged by phone, so the number is required. A copy of the address is kept on the order so a later edit does not change what was delivered.
How you paid. For cash on delivery, only that you chose it. For a transfer, the reference you typed and the receipt photo you uploaded. Receipts are stored on a private disk and are seen only by the team member confirming the payment.
Who delivered it: the courier's name and any order or tracking code they gave us, typed in by hand when the parcel is handed over.
An invoice with a number, a date and the total, in IQD.
Notes our team adds while fulfilling the order. These are internal and are never shown on your side.

To deliver the parcel we give the courier your recipient name, phone number and address.

Messages we send

We send two kinds of message, and no marketing.

Sign-in codes, by email, each time you sign in without a password. A code lasts ten minutes and works once.
Form answers, by email, when someone answers a form on your profile. This follows the New contacts switch in settings, which is on until you turn it off.

We do not send news or promotions. If that ever changes it will be a separate switch in settings, off unless you turn it on.

Photos, files and artwork

What you upload is stored on our servers, in two places depending on who should be able to see it.

Public: your profile photo, block images, gallery and product photos, and files attached to a file block. Anyone with the address can open them, because visitors have no login. Photos are resized and re-encoded before they are stored.
Private: artwork you send for a custom card, the finished print file our team prepares from it, and payment receipts. These are never served publicly; only team members working on your order can open them.

Your profile photo is deleted when you close your account. Artwork and print files stay with the order they belong to, so a replacement card can be printed from the design you approved.

Third parties

We share information only with the services that make a specific part of Wink work.

Google, only if you choose to sign in with Google. Google Fonts, only on a profile whose owner chose one of our Google fonts, and on the design page in your dashboard: your browser then fetches the font from Google, which sees its network address.
Mapbox draws the map in the location picker in your profile editor and in the checkout address form. Both are behind your login, and your browser talks to Mapbox only when you open one of them. A visitor opening your profile never loads Mapbox: a map location on your profile is a link that opens in their own maps app.

There are no advertising trackers, no third-party analytics scripts and no social media pixels on this site, on your dashboard or on any profile. Our own fonts are served from our own servers; the one exception is a Google font chosen for a profile, described above. We do not sell or rent anything about you or your visitors.

Security

Sign-in codes are short-lived and single-use. Passwords, when you set one, are stored hashed, so nobody at Wink can read them. Your dashboard uses a session cookie that only your own device holds and that expires after a period of inactivity.

Payment receipts, artwork and print files live on a private disk and are reached only through pages that check who is asking. Team members see what their role needs for fulfilment and support, and their actions on orders are recorded.

Public profiles carry no cookie and no session, so there is nothing on a visitor's side to protect or to leak.

The pages that describe Wink, this site included, set two cookies that make them work: a session cookie and a security token that protects forms against forged requests. Both expire after two hours and hold nothing about who you are. If you dismiss the question "How will you use Wink?", your browser remembers that in its own storage, on your device only. There are no analytics or advertising cookies.

Your choices

You are in control of what is on your profile and what we hold about you.

Edit, hide or delete anything on your profile at any time. Changes are live within moments.
Unpublish your profile, or publish it again, from the dashboard.
Pause a card or report it lost from My Winks. A paused card can be resumed; a lost card stops working at once and is brought back only through support.
Delete or export your contacts.
Download everything your account holds as one file, from settings. Form answers are exported from each form's own page.
Change your language and your notifications, for order updates and new contacts, in settings.
Close your account from settings.

Closing your account removes you as a person and keeps the sale. Your name, email address and password are replaced with placeholders, your profile is deleted outright along with its blocks, contacts and photo, your username is released, and the personal parts of your delivery addresses are blanked. Any card you hold stops opening your profile and shows a page saying it is not set up. What stays is the order history: what was bought, when, for how much, and the governorate and city it went to, because that is a record of a sale rather than of a person. Closing an account cannot be undone.

Children

Wink is a tool for people who meet other people in their work, and it is not aimed at children. We do not knowingly open accounts for anyone under 18. If you believe a child has an account, contact us and we will close it.

Changes to this notice

When the service changes in a way that affects what we collect, this notice changes with it and the date at the top moves. A change that matters to you will also be mentioned in your dashboard.

Contact

Questions about this notice, or a request about your data, go to the Wink team. We answer from Erbil.