Delete your account and data

Version 2026-09-23. Effective 2026-09-23.

Earlier versions are listed on the document versions page.

This page explains how to delete your Stampomat account and the data that goes with it, what is removed, what we keep for a while and why, and how long each step takes. It is published by Stampomat, operated by Daniel Ilievski, Ljubljana, Slovenia, SI, the operator of stampomat.com, Stampomat Sites and our Instagram account. You can reach this page without signing in, in English, Macedonian, Slovenian and German.

The short version. In the app: open the account menu, choose Account, then Delete account, read what will be deleted, type the confirmation word and confirm. By email: write to hello@stampomat.com from the email address on your account. Both routes delete the same data. Details follow.

1. Who this page is for

Customers: you have a wallet at stampomat.com/app, a membership pass, or a card at a shop or organisation. Sections 2 to 8.
People who ordered on a business website built with Stampomat Sites, or signed up to its newsletter or wrote through its contact form. Section 9.
People who wrote to us on Instagram or commented on our posts. Section 10.
Business contacts we hold as prospects. Section 11.
Businesses and organisations with an account, and benefit partners an organisation named. Section 12.
Team members of a business, an organisation or of Stampomat itself. Section 13.

If you are not sure which applies, write to hello@stampomat.com and describe what you used. We work it out with you.

2. Before you delete

Deletion is final. There is no undo and no grace period on our side. Please read this first:

Your stamps, points, rewards, credit codes and memberships are lost. Businesses owe you the rewards recorded in the wallet; once the record is gone, there is nothing to show at the counter. Use or redeem what you have earned first.
You can download your data first. The Account page has a Download my data entry that gives you a copy of your account, cards, stamps, points, rewards, memberships, attendance, the slips you claimed, feedback, consents, the notes businesses kept about you, and the security and email records that still name you.
You may not need to delete. If you only want to stop email, use the unsubscribe link in any message or the Account page. If you only want to cut a shop's website off from your wallet, use Unlink on the Account page. If you only want a pass out of Google Wallet, remove it in Google Wallet. If you want a business to stop seeing you, ask the business to remove you from its programme; your wallet and your other cards stay.
An organisation can also put your card on hold or remove you from its roster on its own initiative. A hold deletes nothing and lifts again. A removal is the organisation's decision, not a deletion of your account, and section 8 says what it takes and what it leaves.
Deleting the app is not deleting the account. Your account still exists until you delete it here or in the app.
A new sign-in starts from zero. If you sign in with Google again after deletion, we create a new, empty account. Nothing comes back.

3. Delete in the app

The app is the wallet at stampomat.com/app. To delete your account there:

Sign in and open the account menu (your name at the top of the wallet).
Choose Account.
Choose Delete account.
The confirmation page lists what will be deleted and what we keep (sections 5 and 6 of this page). Read it.
Type the confirmation word shown on the page and press Delete my account.

Deletion runs at once. You are signed out on every device, and the page that follows confirms that your account is gone. That page is the only confirmation; we do not send an email, because we no longer hold your address.

The action is rate limited to protect accounts against abuse. If it fails, nothing is half deleted: the deletion either completes or does not happen, and you can try again or use the email route.

4. Delete by email

If you cannot sign in, no longer have the app, or prefer to write, send an email to hello@stampomat.com with the subject "Delete my account". Write from the email address on your account. That is how we know it is you.

If you cannot write from that address, say so. We will ask you for details that only the account holder knows, for example the shops where you had cards, a member number or the date of your last visit. We do not delete an account on a request we cannot verify, because that would let someone else delete your data.

What happens next:

We confirm that we received your request.
We verify your identity as described above.
We run the same deletion as the in-app route. A member of our team does this from the owner console or by a command that records the action in our audit trail without your name.
We reply to confirm that it is done and to tell you about anything we kept under section 6.

We finish within 30 days of a verified request. The law gives us one month, which can be extended by two more months when a request is unusually complex; if we ever need that, we tell you within the first month and explain why. Deletion is free of charge.

If you write from a shop, an organisation or a partner asking us to delete a customer on their behalf, we ask the customer directly. Only you can delete your own account.

5. What is deleted

When your account is deleted, the following is removed from our live systems:

Your account: name, email address, Google account identifier, language, notification settings, email preferences, sign-in tokens and the random identifiers we used to link you to a shop's website.
Your cards and history at every business: stamps, points and the purchase amounts behind them, rewards, credit codes, reward reminders, visit and engagement records, and the log of messages sent to you. Sale slips you claimed lose their link to you and remain only as the shop's sale record.
Your memberships: member number, status, validity, level, attendance records, join requests and disputes.
Your consents: push notification consent and message preferences.
Your feedback: ratings and comments you left for shops.
Notes businesses wrote about you in their dashboard.
Push subscriptions for your browser or phone.
Your Google Wallet passes, which we expire at Google (section 7).
The link between your wallet and any business website (section 9).

Most of this happens through database rules that remove every row tied to your account in one transaction; the rest is a sweep that runs in the same action.

Businesses see the effect immediately: you disappear from their customer lists, exports made after that moment no longer contain you, and their counter screens no longer show your name.

6. What we keep for a while, and why

Some records are kept after deletion, either because they no longer identify you, or because we need them for security, for accounting or as evidence. Here is the full list.

What	How long after deletion	Why we keep it
Security and anti-fraud records (sign-in events, stamp attempts, blocks) with your account number, email and IP address removed	Until they are 90 days old, then deleted automatically	Detecting and investigating abuse of the stamp and reward system. Once unlinked, a row says only that an event of a certain kind happened at a certain shop at a certain time.
Email delivery records with the recipient address replaced by a blank	Until they are 1 year(s) old, then deleted automatically	Proving that a message was sent or bounced when a business or an authority asks, and tracing delivery faults. After deletion the record shows the message type and time, not who received it.
Our administrative audit trail, with your name, email and member number redacted	Until the entry is 24 months old, then deleted automatically	Showing who changed what on the platform and when, which the data protection rules require us to be able to show. The entry that records your deletion itself contains no name.
The record that you accepted the terms and the Privacy Policy (document, version, language, screen, time and a fingerprint of the text), without your account number	Indefinitely	Evidence that the contract existed and what it said. It cannot be traced back to you once the account number is removed.
Benefit redemption records at partner businesses, without the link to your membership	Indefinitely	The organisation's and the partner's record that a benefit was used. It shows a time, a method and a partner; your name and member number were never part of it.
Server log files	Until they are 14 days old, then deleted automatically	Diagnosing faults. Log lines carry internal numbers, not names or email addresses.
Database backups	Until the backup is 14 days old, then overwritten	Restoring the platform after a failure. Backups are not used to look up or restore individual accounts. If we ever have to restore a backup that predates your deletion, we run your deletion again as part of the restore, using the note in the next row.
A note of your deletion kept outside the database: your account number, a one-way fingerprint of your email address and the time of the deletion	Until it is 15 days old, one day longer than our backups, then deleted automatically	Running your deletion again if we ever restore a backup taken before it. It holds no name and no readable email address, and we use it for nothing else.
Website statistics	Not personal data	Our page view counts never contained your name, email or IP address, so there is nothing to delete.

Nothing else survives. In particular we keep no copy of your name, email address, cards, points, feedback or notes after the deletion completes.

Copies outside our database. Our support mailbox holds copies of the operational emails we send to businesses, purged on the same schedule as the delivery log. Emails we send to you as a customer or member are never copied there. If any other email to you sits in that mailbox, we remove it when we process a deletion request; after an in-app deletion, write to hello@stampomat.com and name the address if you want that checked.

7. Google Wallet passes

If you saved a card or pass to Google Wallet, we created a pass object at Google when you first asked to save it. When your account is deleted, or a single membership ends, we set that pass to expired at Google straight away, and the same request blanks your name, your member number, the text on the pass and its barcode. Google lets us expire a pass, not delete it, so the expired pass stays in your Google Wallet until you remove it yourself, which you can do at any time. Google keeps whatever it keeps about the pass under Google's own privacy policy; we cannot delete Google's copy for you. If Google cannot be reached at that moment, the expiry is retried every minute until it succeeds. It never delays the rest of the deletion.

8. Roster members who never signed in

An organisation can enter you on its roster from your name and email address before you ever sign in. In that case you have a membership record and a pass, but no wallet account. The invitation email tells you which organisation gave us your details and how to be removed. You can ask the organisation to take you off the roster, or write to hello@stampomat.com and we delete the record ourselves within 30 days. Either way the pass stops working and any Google Wallet object is expired.

The organisation can also remove you without being asked. This is the third route, and it is the organisation's own decision under its own rules. It can take it whether your card is active or on hold. It deletes your membership with that organisation, every attendance record, the private note it wrote about you and the bookkeeping we kept to pace its mail to you. It takes your name off the points you earned by attending, which stay in the organisation's totals without you. It keeps, without your name, the counts and times of any benefit you redeemed. Your pass stops working straight away, and a pass you had saved to Google Wallet is expired at once; Google lets us expire a pass, not delete it, so it stays in your wallet as an expired pass until you remove it there. We email you in the organisation's name when it happens, with its reason if it typed one. It never touches your Stampomat account or your cards at other businesses, and no business can ask us to delete those. The organisation can undo the removal for 7 days, and for exactly those days we hold a copy of the deleted records so the undo is possible; after that the copy and the reason are destroyed.

If you never signed in, the account record the roster created for you has nothing left in it once the removal is final. We delete that record too, within 7 days after the removal, as long as nothing anywhere on the platform still refers to it. Signing in with that address at any time before then makes the record your account, and it is then never deleted this way.

9. Orders, newsletters and contact forms on business websites

Some shops have a website built with Stampomat Sites where you can order for pickup. What you type at checkout (your name, phone number, an optional email address and a note) belongs to the order, not to your Stampomat wallet. The shop and we are jointly responsible for it, so you can ask either of us.

If you linked your wallet at checkout, the shop's website received a random identifier for you at that shop. Deleting your wallet, or pressing Unlink on the Account page, voids that identifier and we tell the website to remove it from every order it was attached to. From then on the orders show no connection to a wallet.

The order records themselves stay with the shop's website for 90 days after the order was completed, cancelled or declined, because the shop may need them to answer a question or a complaint. After that, the name, phone number, email address and notes are replaced by blanks and only the items, totals and times remain for the shop's statistics. To have them removed earlier, write to hello@stampomat.com and give us the phone number or email address you used at checkout and the name of the website; we find every order by that number or address and blank it within 30 days. The shop also received an email copy of your order in its own mailbox. On request we forward your deletion request to the shop, which is bound by our business terms to act on it.

Newsletter signups. No newsletter has been sent through Stampomat yet; when sending is built, every email will carry an unsubscribe link. A sign-up you never confirmed through the emailed link is not on any list and is never exported; write to hello@stampomat.com if you want the pending entry removed. You can unsubscribe at any time through the signed link the business gives you, or by writing to the business or to hello@stampomat.com. When you unsubscribe, your name and address are deleted and only a one-way fingerprint of the address is kept for 30 days, so that you are not signed up again by mistake.

Contact form messages are forwarded to the shop and kept by us for the period stated in the Privacy Policy. Write to hello@stampomat.com if you want our copy removed sooner.

10. Instagram conversations and comments

If you send a message to our Instagram account, or comment on one of our posts, we keep a copy: your Instagram handle and display name, an identifier Instagram assigns to you for our app, the messages in the thread with any attachments, reactions, the comment text, and any internal notes or tasks our team wrote about the conversation. We use it only to answer you and to keep track of the conversation.

To have it deleted, do either of these:

send us a message from the same Instagram account saying that you want your conversation deleted; or
email hello@stampomat.com naming your Instagram handle. We may ask you to confirm from that Instagram account, because a handle alone does not prove it is you.

We then delete the conversation, every message and attachment reference in it, your comments and our replies, any media we sent you, and the internal notes and tasks that named you, and we record the deletion without your name. We also keep a one-way fingerprint of your handle so that you are not turned into a business contact again later (section 11). We confirm by reply, on Instagram or by email, within 30 days.

Through Meta. Meta can also send us a deletion request for your Instagram account through its data deletion callback. We treat it the same way, and we give Meta a confirmation code and a link where you can check the status of the deletion.

If you unsend a message in Instagram, we remove its text from our copy as well.

Conversations with no message for 12 months are deleted automatically, unless the thread belongs to an open business contact under section 11, whose windows then apply. Deleting on our side does not delete anything inside Instagram itself; your own copy of the thread and Meta's copy are governed by Meta's terms.

11. Business contacts and prospects

If we hold you as a business contact, for example because you run a cafe we would like to work with, we keep your name, role, business, phone, email and social handles, where we found them, and a log of our contact with you. The Privacy Policy explains the source and the purpose. You can ask us at any time to stop contacting you, or to forget you entirely.

Stop contacting me. Reply to any message with that request, use the opt-out sentence in it, or write to hello@stampomat.com. We mark you as objected the same day, stop all outreach immediately, and delete your record 30 days later.
Forget me. Write to hello@stampomat.com. We delete your record and every copy of your details in our tools, including notes, drafts and tasks that named you, within 30 days and confirm by email.

In both cases we keep one thing: a salted one-way fingerprint of your phone number, email address or handle, with the date and the reason. It cannot be turned back into your details. Its only purpose is to stop a later import from recreating you, which is how we make sure a request to be forgotten stays honoured.

Records we never acted on are deleted after 30 days without a request, and records of contacts that came to nothing are deleted 12 months after the last contact.

12. Businesses, organisations and benefit partners

A business account is closed by the person who holds it. Write to hello@stampomat.com from the email address on the business account, or give notice as the Terms of Service for Businesses provide. Ask for an export of your programme data before the closure if you want one; we provide it within 30 days and before anything is deleted.

When the account is closed we delete the business record, its cards and programme settings, its team accounts, its cashier devices, its customer lists, its messages, and for organisations the roster, attendance, levels, benefits and partner links, within 90 days of the end of the contract. Customers keep their wallets; the business's card simply stops working in them, and their stamps, points, rewards and membership records at that business are deleted with it. The customer terms say so, and we tell customers in advance where we can.

For a website built with Stampomat Sites, closing the account also takes the website offline, detaches any custom domain, and deletes the pages, menu, photos, orders, contact messages and newsletter signups that belong to it. Ask for an export first if you need one.

What we keep after a business account is closed:

Invoices we issued to your business, with the period, counter volume and fee they were computed from, for as long as tax and accounting law requires. An issued invoice is a frozen record of what you were asked to pay; closing the account does not erase it.
The record that your business accepted the business terms and the data processing terms (document, version, language, screen, time and a fingerprint of the text), without the personal account numbers, as evidence of the contract.
Email delivery records, the administrative audit trail and security records under the same rules as in section 6, with names and addresses removed.
Backups, until they are 14 days old.

A benefit partner named by an organisation has no account with us. We hold the email address its invitation letter went to, the business name the organisation typed, and the sign-in details for its scanning page where it uses one. When no organisation's benefit names the partner any more, we delete that record automatically, at the latest 90 days later. The partner can also write to hello@stampomat.com from that email address, and we delete the record by hand within 30 days; the benefit then keeps working on members' cards, but checking it with a code stops until the organisation names a partner that accepts again. What the organisation typed about the partner on its own benefit stays with the organisation, and so do the redemption counts and times as its record of the benefit; they never contained a member's name. Our record that the partner accepted the Partner Terms stays, without the link to the deleted record.

13. Team members

If you signed in as a team member of a business or an organisation, your account (name, email address, Google identifier, role, avatar and last sign-in) belongs to that business's workspace. The administrator of the workspace can remove you on the Team page; your access ends at the moment of removal and your profile is deleted with it.

You can also write to hello@stampomat.com yourself, from the email address of the team account, and we delete it. Where the audit trail recorded an action you took, the entry stays for its normal period without your name and email.

On Stampomat Sites, removing a team member from a website ends their portal access, deletes their order notification subscriptions and signs them out everywhere; the sign-in record itself is deleted on request. Members of our own team are removed by an action that replaces their name and email in every record with a neutral marker.

14. How you know it is done

In the app: the page shown after you confirm says that your account is deleted. Everything in section 5 has already happened when you see it.
By email: we reply to confirm, and the reply names anything we kept under section 6.
On Instagram: we reply in the thread or by email, and the reply is the last message you get from us.
Through Meta's callback: Meta shows you the confirmation code and the status link we returned.
Businesses: we confirm the closure by email and, if you asked for one, send the export first.

If you believe something was missed, write to hello@stampomat.com. We check and answer within 15 days.

15. Timelines at a glance

Step	When
Deletion in the app	At once
Deletion requested by email (customer, roster member, Instagram, prospect, order data)	Within 30 days of verifying who you are; the statutory limit is one month, extendable by two months in complex cases with notice
Google Wallet pass expired	At once; retried every minute if Google is unreachable. It then sits in your wallet as an expired pass until you remove it there
Removal from an organisation's roster	At once, with an email to you in the organisation's name; the organisation can undo it for 7 days. If you never signed in, the account record created from that roster is deleted within 7 days after that
Wallet identifier removed from website orders	At once
Security and anti-fraud records unlinked	At once; rows deleted at 90 days of age
Email delivery records anonymised	At once; rows deleted at 1 year of age
Audit trail redacted	At once; entries deleted at 24 months of age
Order data on a business website	Blanked 90 days after the order ended, or on request
Instagram conversations	On request; otherwise after 12 months without activity, unless section 11 applies
Server logs	Overwritten at 14 days
Backups	Overwritten at 14 days
Deletion note for backup restores	Deleted at 15 days of age
Business data after the contract ends	Within 90 days

These windows are the same values our pruning jobs read; a change to one changes both.

16. Your other rights, and where to complain

Deletion is one of your rights. You can also ask us for a copy of your data (the Download my data entry, or by email), to correct it, to restrict what we do with it, or to object to processing based on our legitimate interest. Write to hello@stampomat.com. The Privacy Policy describes each right and how we handle it.

If you think we have not handled your deletion or another request properly, you can complain to a supervisory authority: in Slovenia the Information Commissioner (ip-rs.si), in North Macedonia the Agency for Personal Data Protection (azlp.mk), or the data protection authority of the EU country where you live. Complaining to us first is not a condition, but it is usually the fastest way.

Data protection officer: none appointed; write to the privacy address above. Representative in North Macedonia: none appointed; write to the privacy address above. Full provider details are on the legal information page.

17. Changes to this page

We update this page when a deletion step, a retention period or a contact changes. The version and effective date at the top identify the text you are reading, and the document versions page lists every published version. This page describes how deletion works; it is not a contract. Your rights come from the law and from the Terms of Service for Customers or the Terms of Service for Businesses, and nothing here reduces them.

18. Contact

Stampomat, operated by Daniel Ilievski, Ljubljana, Slovenia, SI. Deletion and other personal data requests: hello@stampomat.com. General support: hello@stampomat.com. A real person reads both.