Privacy

Bidadari Check-In is built to know as little as possible. Here is exactly what happens to your data.

What attendees give

• Only what the organizer asked for on the form. By default that is just a full name. The organizer may add fields such as email, phone or a custom question.
• The time of check-in. Attendees do not need an account.
• Your answers are shared with the organizer of that check-in, who decides how to use them. Bidadari does not use them for anything else.

What organizers give

• An email address, used only to send the private dashboard link (and a new link if you ask for one). It is not used for marketing.
• The check-in title and optional date, time and location.
• There are no accounts or passwords.

Cookies on your device

• A security cookie that protects forms from forged requests.
• On a check-in page, a random cookie for that one check-in, used only to stop the same browser checking in twice. It is not a fingerprint and is not shared. The server stores only a hash of it.
• For a moment after an organizer creates a check-in, a short-lived encrypted cookie holds the result page. No advertising or tracking cookies are used.

Security data

• To limit abuse, short-lived counters are keyed by a one-way hash of the network address (HMAC). The address itself is not stored by the application, and the counters are deleted automatically.
• This data never appears in exports.
• Like any web server, the hosting provider may keep standard access and error logs.

How long data is kept

• Attendance data is deleted automatically about 7 days after the event.
• The dashboard link stops working after 7 days. The data stays until it is deleted.
• Organizers can delete a check-in and all its records at any time from the dashboard.

What we do not do

• No analytics, advertising, session replay or third-party tracking. Pages make no requests to other services, and fonts and images are served from this site.
• No location is collected, and no data is sold or shared.

Please remember

Anyone who scans the QR code can see the check-in form. Organizers are responsible for asking only for what they need. See Security for the full picture, including limitations.