How Vonga handles fan data.

Written for the data, legal, and security people who review us before a deal. Two layers, kept separate on purpose.

Always

The tap layer

Item, place, time. Anonymous. Enough to count unique items, repeats, and the curve across a season.

The fan says yes
Only on consent

The identity layer

A name or email the fan chose to share, behind an age gate and an unticked opt-in. No yes, no identity.

The tap layer is anonymous

A tap records the item, the place, and the time. No name, no contact details. We know a specific item was tapped, and that later taps came from the same item. We do not know who is holding it.

That is enough to measure engagement honestly: how many items went out, how many were ever tapped, how many were tapped more than once, and the repeat curve across a season. No personal data required.

Identity exists only on consent

After a tap, the fan may choose to share a name or email. An age gate comes first; below the minimum age in our Privacy Policy, nothing is collected and the fan sees content only. The opt-in is explicit and unticked by default. No opt-in means no identity, permanently.

So can anyone be re-identified? Not by default, and not by design. You know someone tapped, and that it was the same someone as last time. You know who they are only if they told you.

What a sponsor can see

  • Always: attribution reporting. Unique fans engaged, repeat rate, what they did, what happened after. No personal data moves.
  • Only if the consent said so: the fan list. The property sets this in the consent language before launch. It is never something we do quietly.
  • Our preferred shape: each opted-in fan gets a unique code the sponsor redeems against. The sponsor measures real people without holding the list.

What we collect

Only the fields an activation needs, and every added field needs a stated reason. Consent scope is agreed in the contract, before launch, because a fan base collected under narrow consent cannot be widened later.

Storage, access, retention, deletion

  • Storage: AES-256 encryption at rest and TLS 1.2 or higher in transit. No personal data in URLs or analytics events.
  • Access: each client's data is isolated. No client can see another client's fans.
  • Retention: anonymous tap data is kept for 24 months, then deleted automatically. Personal data a fan chose to share is kept for the life of the client's subscription and deleted when it ends. Details are in our Privacy Policy.
  • Deletion: a fan can ask for their data to be deleted at any time.
  • Ownership: the data belongs to the property that ran the activation.

Limits we would rather tell you first

  • A tap identifies the item, not the person. A giveaway shirt handed to a brother reads as the same fan. At giveaway scale that is noise, not distortion.
  • Location is reliable to about 50 feet with a strong cellular or Wi-Fi signal, and only when the fan allows it. Indoors or on a weak signal it can be less precise; for exact placement, give each location its own batch of items.
  • Vonga is designed to GDPR standards. We do not claim certifications we do not hold.

Questions from your data or legal team are welcome before any commitment. Contact us.