Privacy, clearly.
Device activity
VisitorPing handles device configuration and campaign reporting. Activity includes the device URL open or menu selection, configuration version, destination, coarse country/device/referrer information and automated-traffic label. Device interactions do not retain IP addresses or full User-Agent strings and are kept for 30 days.
Private ownership
Public URLs never contain activation or claim credentials. Credentials are stored as hashes. Workspace authorization isolates claimed devices and their campaigns.
Purchases and artwork
Stripe processes payment details. Order contact and shipping details are used for fulfillment and support. Artwork is stored privately with short-lived authorized download links. Final commerce retention and legal policies must be approved before sales open.