Privacy, analytics & data retention

Updated October 11, 2026 · Pending legal review

Information collected

Browsing assigns a visitor number stored in your browser. We derive a fingerprint from browser, language, screen and time-zone information to recognize return visits. We record page paths, street/store activity and visit times. Campaign QR pages record campaign, referral source, IP address and browser information. Accounts, Mall Pass, enquiries, events, community submissions and merchant applications collect the information you provide, including name, email, phone and business details. Signed applications also record signature information, IP address and time.

Visitor numbers are pseudonymous

Public maps show visitor numbers and recent street/store locations, not names or full visit histories. Internally, activity is linked to visitor records; registering a Mall Pass can associate your name and contact details with that record. Authorized administrators access records needed to operate the Mall. Map figures illustrate recent activity, not precise physical movement or geolocation.

Cookies, local storage and analytics

Authentication cookies support sign-in and security. Language preferences, visitor numbers, seen-store markers, Mall Pass details and application drafts use cookies or local storage. Google Analytics, when enabled, collects usage and device information and may set analytics cookies. Currently there is no dedicated analytics-consent switch. Browser controls can block cookies or tracking, but some features may be affected. Clearing local storage does not delete server records; fingerprint matching may recognize a returning browser.

Use and sharing

We use information to operate storefronts, respond to requests, measure activity, moderate content, maintain security and administer accounts. A merchant receives enquiries and contact details submitted to that merchant and aggregate traffic statistics, not individual visitor journeys. Mall QR leads go to the Mall Manager; choosing shopper also registers a Mall Pass when linked to a visitor number. Public business content and approved community posts are visible to others. Hosting, analytics, AI and communication providers process information for the features they support. Walter sends your messages to an AI service; merchant coaching also uses store details, listings and aggregate metrics. Do not put sensitive personal or payment information in chat.

Merchant data and external checkout

Merchants retain rights in their uploaded content and can export enquiries from their dashboard. Checkout takes place with the merchant and its chosen payment provider under their terms and privacy practices. The Mall records checkout clicks, not completed sales through those links. Merchants receive customer information to respond to those customers and are responsible for their own privacy and marketing obligations.

Retention: current practice

There is no automatic age-based deletion schedule for visitor activity, scan records or leads. They remain stored unless removed through an authorized process. Leaving the live map after five minutes is not deletion of activity history. Account, contract, billing and support records may need to be retained for service, legal or dispute purposes. Provider logs and backups follow their own retention practices. We do not promise a fixed deletion deadline or immediate backup removal. Requests are reviewed for applicable rights, identity verification and necessary retention.

Your choices

You can browse without registering for Mall Pass, choose what to submit and manage browser cookies and storage. Ask the Mall Manager below about access, correction, deletion, communications preferences or privacy concerns. Requests are reviewed by a person; submitting one does not itself change or delete records. Additional rights may apply depending on where you live. This notice describes current practices and is pending legal review, including consent and retention requirements.

Privacy or rights request

Include the relevant visitor number, account email or store link. Do not send passwords, payment details or identity documents. We store this request to respond and record its resolution.

Terms & intellectual property