Privacy Policy

Bandera Passport — Privacy Policy

Effective date: JUNE 11, 2026

This Privacy Policy describes how Dunosis LLC, operating as Bandera Passport (the “Company,” “we,” “us,” or “our”), collects, uses, and discloses information about you when you use the Bandera Passport application at bandera.chicagopassport.app (the “Service”).

The short version: we collect what we need to run the passport program — your account, your stamps, and basic usage data. We do not sell your personal information, we do not show third-party ads, and we do not collect biometric information.

We collect the following types of information:

Category

What it includes

Account information

Email address, name or display name, password (stored in encrypted/hashed form), and age confirmation at signup.

Passport activity

Stamps earned, which participating businesses you check in at and when, reward tiers reached, and reward claims and redemptions.

Communications

Messages you send us (support requests, feedback) and your notification preferences.

Technical and usage data

IP address, browser and device type, pages visited, and approximate (city-level) location derived from your IP, collected through server logs and our analytics described below.

Camera access

The app uses your device camera only to scan QR codes. Camera images are processed on your device and are not transmitted to or stored on our servers.

We do not ask for and do not need your phone number, street address, payment information, or government ID to participate in the program.

  • To operate the passport program: recording stamps, tracking tier progress, and verifying reward claims.
  • To maintain and secure your account, and to detect and prevent fraud and abuse of the program (such as duplicate accounts or fraudulent scans).
  • To communicate with you about the Service, including reward notifications, season announcements, and material changes to our terms or this policy.
  • To understand how the Service is used in aggregate, so we can improve it.
  • To comply with legal obligations.

We use your information only for the purposes above. If we ever want to use it for a materially different purpose, we will ask first.

We use Plausible Analytics, a privacy-focused analytics service, to understand site traffic. Plausible does not use cookies, does not store personal data, and does not track you across other websites. Analytics data is aggregated and anonymous.

The Service itself uses only strictly necessary cookies: a session cookie to keep you logged in and a security cookie to protect forms against forgery. These are required for the Service to function and are not used for advertising or cross-site tracking. Because we use no advertising or tracking cookies, the Service does not display a cookie consent banner. You can block cookies in your browser settings, but you will not be able to stay logged in.

Participating businesses do not receive your personal profile. They can see:

  • Aggregated, anonymized statistics about program activity at their business, such as total check-ins and visit trends.
  • At the moment you check in or claim a reward in person, staff may see an on-screen confirmation that your scan or claim is valid. This confirmation does not give the business access to your account, contact information, or visit history at other businesses.

We may share aggregated, anonymized program statistics (never individual user data) with community organization sponsors and in public materials about the program.

We use a small number of service providers to operate the Service, such as our hosting provider and email delivery service. These providers process data on our behalf, only as needed to provide their services to us, and are not permitted to use it for their own purposes. Our servers are operated by Hetzner, located in Finland. If you access the Service from outside the server region, your information will be transferred to and processed in that region.

We may disclose your information in good faith where necessary to:

  • Comply with a legal obligation, such as a valid subpoena or court order.
  • Protect and defend the rights, property, or safety of the Company, our users, participating businesses, or the public.
  • Prevent or investigate possible wrongdoing in connection with the Service.

If Dunosis LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will provide notice before your information becomes subject to a different privacy policy.

  • Account information is kept for as long as your account is active.
  • Stamp and reward history is retained across seasons, even though your visible stamp count resets to zero each season. We keep this history to operate the program, prevent fraud, and recognize returning participants.
  • If you delete your account, we delete or anonymize your personal information within [30] days, except where we must retain it to comply with law or resolve disputes. Anonymized, aggregated statistics may be retained.
  • Access and correction: you can view and update your account information in the app, or contact us for a copy of the personal information we hold about you.
  • Deletion: you can delete your account at any time in the app or by contacting us.
  • Notifications: you can opt out of non-essential communications at any time through your notification settings or the unsubscribe link in emails. We may still send essential service messages, such as security or legal notices.

We use commercially reasonable safeguards to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by Illinois law.

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are under 18, you should use the Service only with the permission of a parent or legal guardian. If you are a parent or guardian and believe a child under 13 has created an account, please contact us and we will delete the account and associated information.

The Service may link to websites operated by participating businesses or other third parties. We are not responsible for their content or privacy practices, and this policy does not apply to them. We encourage you to review the privacy policy of any site you visit.

We may update this Privacy Policy from time to time. We will post the updated policy in the Service and update the effective date above. For material changes, we will provide a prominent notice in the app or by email before the change takes effect.

Questions about this Privacy Policy or your information?