Privacy Policy

WayBack is operated by KABAYA.PH Software Development Services, based in Batanes, Philippines. For anything related to your data, email us at support@waybck.com.

We handle personal data in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

If you're a sticker owner

When you register a sticker or place an order, we collect:

• Email address — where finder messages, verification codes, and order updates are sent. This is the core of how WayBack works.
• Item label & optional message to finders — the name you give your item and anything you'd like a finder to see.
• Name and shipping address — only when you order physical stickers, and only to deliver them.
• Your preferred payment method — so we can send the right payment instructions. We never see or store your payment credentials or account balances; you pay through your own banking/e-wallet app.

If you're a finder (someone who scans a sticker)

We're deliberately built to know as little about you as possible:

• Your message and contact detail are forwarded to the owner's email and are not saved in our database. We keep only an anonymized record that a message was sent (a timestamp and its length) for aggregate statistics — never the text or your contact.
• No account, login, or app is required to send a message.

Collected automatically

Like most websites, our servers keep standard technical logs for security and reliability. In our own analytics, IP addresses are anonymized (the last part of the address is removed) before they're stored, so we can't tie activity back to a specific person. We use a small session cookie to prevent duplicate scan counts and to keep admins logged in — it does not track you across other websites, and we run no third-party advertising trackers.

• To deliver finder messages to the registered owner's email.
• To verify ownership of an email the first time it's used, and to send the manage link.
• To process, confirm, and ship sticker orders, and send order updates.
• To understand, in aggregate, how well WayBack reunites people with their things.
• To keep the service secure and prevent abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

Only the service providers needed to run WayBack:

• Amazon Web Services (AWS) — hosts our website, application, and database, and delivers our email (via Amazon SES).

These providers process data on our behalf and aren't permitted to use it for their own purposes. We may disclose information if required by law or a lawful order from Philippine authorities.

• Owner records — kept while your sticker is registered. Releasing a sticker or requesting deletion removes your name, email, and message from our active database.
• Finder messages — delivered by email and not stored on our servers.
• Order records — kept as needed for basic bookkeeping.
• Server logs — routinely rotated and deleted (within about 30 days).

Under the Data Privacy Act you can access, correct, or delete your personal data, object to processing, and withdraw consent. To do any of these, email support@waybck.com — owners can also release a sticker from its manage link at any time, which wipes its details immediately.

You may also lodge a complaint with the National Privacy Commission (privacy.gov.ph).

Data is stored on secured servers, sent over HTTPS, and accessible only to us. No system is perfectly secure — but we collect so little that there's very little to lose. That's by design.

WayBack isn't directed at children under 18. Registration should be done by an adult; stickers can of course be placed on a child's belongings by a parent or guardian.

If we make meaningful changes, we'll update the date at the top and note it here. Continued use of WayBack after changes means you accept the updated policy.