Who we are
Name Badge Creator (namebadgecreator.com) is run by Glenwhisper Limited, a company incorporated in Hong Kong (glenwhisper.com), "we" or "us".
We are responsible for the personal data described here: its "controller" under the UK and EU GDPR, and its "data user" under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486, the "PDPO"). To ask about your data, use our contact form and choose "My account or saved projects" as the topic.
When you upload an attendee list, you decide what goes into it and you are responsible for having the right to use it. For the attendee data in a saved project, we act on your instructions: we store it so you can print and reprint your badges, and for nothing else. Our data processing terms set this out, with the list of sub-processors.
Your attendee list and designs
When you upload a spreadsheet, paste rows or type names, the file is read inside your web browser on your own device. Fitting names, drawing the preview, the proof and the mockup, and creating the PDF or PNG files all happen there too.
- Local-first storage. Your projects (list, design and settings) and the logos or images you add are saved in your browser's storage (IndexedDB) on this device, so you can close the tab and carry on later. We cannot read it. It stays until you delete the project, tick "remove my projects from this browser" when you log out, or clear this site's data in your browser settings.
- We never put attendee data in page addresses (URLs), so it does not end up in server logs or browser history from our links.
- The badge files you download are created on your device and go straight to your downloads folder.
Stored in your browser
Besides the session cookie described under Cookies and analytics, the site keeps these items in your browser's own storage on this device. "Local storage" lasts until you clear this site's data; "session storage" is removed when you close the tab.
| Name | What it holds | How long |
|---|---|---|
nbc (IndexedDB) | Your projects (attendee list, design and settings) and the logos or images you add. | Until you delete a project or clear this site's data. |
nbc:anon (local storage) |
A random browser ID (for example anon_k2j8…). It is sent with the anonymous design log so saves from the same browser can be
grouped, and when you sign up or log in so your anonymous designs can move into your account.
| Until you clear this site's data. |
nbc:draft (session storage) | A copy of the project you just created on the home page, including the attendee list, handed to the editor in case your browser blocks IndexedDB. It never leaves your device. | Removed as soon as the editor opens it, or when you close the tab. |
nbc:editor-last (session storage) | The ID of the project open in this tab, so template and size links keep your list. | Until you close the tab. |
nbc:signed-in (local storage) | A yes/no note that you are signed in (no email or token), so the menu can show "Account". | Removed when you log out. |
nbc:consent (local storage)
| Your analytics choice ("Allow analytics" or "No thanks"). | Until you change it or clear this site's data. |
nbc:consent-dismissed (session storage)
| A note that you closed the cookie notice without choosing, so it does not reappear on every page. | Until you close the tab. |
Open tabs of the site also tell each other when you log in or out (a browser feature called a BroadcastChannel, named nbc:session), so every tab shows the
same signed-in state. Nothing is stored or sent anywhere by it.
Anonymous design log
To learn how people use the editor, the editor sends a copy of your design to our database (Cloudflare D1) from time to time while you work. It is linked to a
random ID created by your browser (for example anon_k2j8…), not to your name or email. It contains:
- the design: template, badge size and material, colors, fonts, layout and any fixed text you typed onto the design itself (such as an event name);
- counts: how many attendees and elements the project has, whether it has a logo, how many edits of each kind you made;
- your country (two letters, worked out by Cloudflare from your connection) and the dates of the first and last save.
It never contains your attendee list: no names, job titles, companies, emails or QR contents, and not the project name (which starts as your file's name). Logos and images you upload without an account stay in your browser. Legal basis: our legitimate interest in improving the tool. Anonymous projects are deleted 180 days after their last save, and design log rows 400 days after their last save. If you create an account in the same browser, these anonymous projects are moved into your account.
Accounts and saved projects
You need a free account to download your final badge files. When you create one, we store:
| What | Details | How long |
|---|---|---|
| Your account | Your email address and your password, scrambled with PBKDF2-SHA256 and a random salt (we never store or see the password itself), the date you joined and last logged in, your country and a hashed IP value at sign-up (see below). | Until you delete your account. |
| Sign-in sessions | A hashed copy of the token in your session cookie, with its start and expiry time. | Until you log out or the session expires. |
| Saved projects | Your full project, including the attendee list, so you can open it on another device, update the list and reprint. Each export also saves a version of the project, so you can reprint exactly what you printed before. | Until you delete the project (removed for good 30 days later) or your account. |
| Uploaded images | Logos and background images you add while signed in (PNG, JPEG or WebP, up to 2 MB each), stored privately in Cloudflare R2. Only you can load them. | Until you delete them or your account. |
Legal basis: performing our agreement with you (providing the account you asked for). We use your email address to run your account and to answer you, not for marketing.
Password resets. If you ask to reset your password, a single-use reset link is created. For now it is sent to our team inbox and a person on our team forwards it to your email address, usually within one working day. The link expires after 72 hours.
Deleting your account. Deleting your account in Account settings removes your saved projects, their versions, your uploaded images and your sessions right away. We keep only an empty record with your email address removed, so the account ID cannot be reused.
Export log
Each time badges are exported, we record how: the output type (sheet, single badges or PNG), the badge size, material and template, how many badges and pages, whether it was all badges or just the changes, the date and your country. Never names or other attendee data. It is linked to your account (or the anonymous browser ID), so we can see how the tool is used and, later, count paid exports. Export log rows are deleted after 24 months; on account deletion they are unlinked from you.
Contact form
When you send a message, we store your name, email address, topic and message, the page you sent it from, the date and time, your country (two letters) and a hashed IP value in our database, and our server emails a copy to our team inbox so we can reply. Legal basis: our legitimate interest in answering questions about our service. Messages are deleted 24 months after they were sent, or sooner if you ask. Messages are limited to 5,000 characters; please don't send attendee lists, passwords or payment details through the form.
Hashed IP value. We never store your IP address itself. If you connect over IPv6, we first shorten the address to its network part (the /64 prefix). We then combine it with a secret that changes every day and store only the scrambled result (a SHA-256 hash). Because the secret changes daily, values from different days cannot be matched to each other. We use it only to limit how often forms and sign-ins can be tried from one connection and to spot abuse. Rate-limit records are deleted after about two days.
Anonymous usage counts
The site also counts a short list of actions, such as "a list was imported", "a template was picked" or "badges were exported", sometimes with one extra word from a fixed
list (a template, size, material or output type). Each count is added to a daily total for the whole site, with no visitor ID and no cookie. Anything that is not on the
fixed list is stored as other, so names and anything you type are never stored. The same action names are also sent to Google Analytics (see Cookies and analytics).
Daily totals are deleted after 400 days.
Cookies and analytics
- Signing in sets one session cookie (below). It is needed for your account and is not used for tracking.
- Google Analytics sets first-party cookies on this site: in Europe only after you choose "Allow analytics", elsewhere by default unless you choose "No thanks". Details below.
- No advertising. There are no ad networks, social media pixels or session recording tools, and Google Analytics runs with its advertising features off.
- Cloudflare Web Analytics counts page views without cookies (see below), and we run the anonymous counts above ourselves.
- Our fonts are served from our own domain, so no font service sees your visit.
Google Analytics
We use Google Analytics 4, a service of Google LLC, to learn which pages and features people use, so we know what to improve. It records pages you view, the site that sent you, your browser, device type and approximate location (city or country), and the actions listed under anonymous usage counts with the same one-word details. It never receives attendee names, your lists or the files you work with.
Cookies. When analytics is allowed, Google Analytics sets two first-party cookies on our domain: _ga, which tells visits from the
same browser apart, and _ga_<ID>, which keeps track of the current visit. As of November 2026, Google sets both to expire after 2 years by
default. They are used only for our statistics, not for advertising.
Your choice. If you visit from the European Economic Area, the UK or Switzerland, Google Analytics starts with its cookies off. Until you choose
"Allow analytics" (or if you choose "No thanks"), Google's consent mode does not read or write analytics cookies; it may still send Google a basic cookieless
signal for each page, with the time, your browser type, the referring page and whether consent was given, which Google uses for aggregate statistics. Everywhere
else, analytics cookies are on by default. Wherever you are, you can change your choice at any time with "Cookie settings" at the bottom of every page: "No thanks"
turns the cookies off from then on. Your choice is saved in your browser's local storage (nbc:consent), not in a cookie. Deleting cookies already set
is done in your browser settings.
What is switched off. We have turned off Google signals and ad personalization, so Google Analytics does not link your visits to a Google account, and its data is not used to show you ads. We do not pass ad click information between pages.
IP addresses. As of November 2026, Google states that Google Analytics 4 does not log or store IP addresses. For visitors in the EU, the UK and Switzerland, Google uses the IP address only to work out an approximate location on servers in those regions, and then discards it.
Legal basis: in the European Economic Area, the UK and Switzerland, your consent. Elsewhere, our legitimate interest in improving the tool, with the option to opt out at any time. See how Google uses information from sites that use its services.
Cloudflare
Session cookie. When you sign in, we set one cookie, nbc_session. It holds a random token that keeps you signed in; we store only a scrambled
(hashed) copy of the token. It is HttpOnly (page scripts cannot read it), sent only over HTTPS to this site, and removed when you log out or the session expires. It is
strictly necessary for your account and is not used for analytics or advertising. While you are signed in, your browser's local storage also keeps a
simple yes/no note (nbc:signed-in, no email or token) so the menu can show "Account" instead of "Log in"; it is removed when you log out.
Cloudflare, which delivers the site, may set a strictly necessary security cookie (such as __cf_bm or cf_clearance) if it needs to check that traffic is not
from a bot. These cookies are used only for security, not for tracking or advertising.
We use Cloudflare Web Analytics to count page views and measure page speed. Its small script sends the page address, referrer, browser type and timing data to Cloudflare. As of November 2026, Cloudflare states that it does not use cookies or local storage, does not fingerprint visitors and does not track people across sites. It never sees the names you type or the files you load.
Who processes data for us
Cloudflare, Inc. hosts the site, delivers its pages, protects it from attacks, runs the database (D1) that holds accounts, saved projects, the design log, contact messages and usage totals, and stores uploaded images (R2). To deliver any website, Cloudflare has to handle your IP address and basic request details. Cloudflare acts as our processor under its data processing addendum. See Cloudflare's privacy policy.
Google LLC provides Google Analytics (see Cookies and analytics) as our processor under the Google Ads Data Processing Terms. We have switched off Google Analytics' "Google products & services" data sharing setting. If we ever turn it on, we will say so here first.
Our team inbox is a Google Gmail account, so contact messages, password-reset relays and our replies are also stored by Google LLC. Cloudflare delivers the email from our server to the inbox. We do not use any other service providers for the personal data on this page, and we never sell or rent it.
Where your data is handled
We are based in Hong Kong. The database, file storage and network are run by Cloudflare on servers in many countries, so your data may also be handled outside Hong Kong, the UK and the EU, including in the United States. Email copies are stored by Google (Gmail), including in the United States.
- From the UK and the EU: as of November 2026, Cloudflare's data processing addendum includes the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Google Analytics data is handled by Google, including in the United States, under terms that include the Standard Contractual Clauses.
- Under the PDPO: we use your data only for the purposes on this page, wherever it is processed, and Cloudflare's data processing addendum binds it to keep the data secure and to use it only on our instructions.
Your rights
Everyone. Under Hong Kong's PDPO, which applies to us wherever you live, you can ask whether we hold personal data about you, get a copy of it, and ask us to correct it. You can delete your saved projects and your whole account yourself in Account settings, or ask us to do it.
In the UK and the European Economic Area. Under the UK GDPR and the EU GDPR you also have the right to:
- get a copy of the personal data we hold about you;
- have it corrected if it is wrong;
- have it deleted;
- object to, or ask us to restrict, how we use it;
- receive it in a portable format;
- withdraw your consent at any time, without affecting what we did before.
How to ask. Send a message through our contact form from the email address the request is about. We may ask you to confirm the request from that address before we act. We reply within one month, which is also inside the 40 days the PDPO allows for access and correction requests. There is no charge.
People on a badge list. If your name is on a list someone else uploaded, the event organizer decides what is on it. Please ask them first; you can also contact us and we will help where we can.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to Hong Kong's Office of the Privacy Commissioner for Personal Data (PCPD) at pcpd.org.hk, to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, or to the data protection authority where you live.
Children
Accounts are for adults organizing events. We do not knowingly collect data from children under 13 through accounts or the contact form. Badge lists for school or club events are the organizer's responsibility. If you think a child has sent us their details, contact us and we will delete them.
Changes to this policy
When the site changes how it handles data, we update this page and the effective date at the top before the change goes live. If a change affects account holders in a meaningful way, we will email them. Paid exports, when they start, will be covered here before they launch.
See also our terms of use. Questions? Contact us.