The Nullware Standard0 trackers on this page
Pledge 04 · Every channel

Apps and inboxes count too.

As websites got more scrutiny, a lot of tracking moved into apps, loyalty schemes and devices. The Standard follows the customer, not the channel.

WebsiteAppEmailLoyaltyIn storeDevices
01

Where tracking hides

The less visible the channel, the more it tends to collect.

01
Inside apps
Third-party tools bundled into apps can send usage and device data to other companies.
02
In the phone itself
Advertising IDs let apps recognise the same person across different services.
03
At the till
Loyalty cards can turn every purchase into a profile, sometimes shared with partners.
04
In the building
In-store Wi-Fi and sensors can follow shoppers’ phones around a shop.
The pledge
The same Standard, in every place a customer meets you.

Everything that applies to a member’s website applies to their apps, emails, loyalty schemes, in-store systems and connected products. No third-party tracking tools in apps, no advertising IDs, and no selling or sharing data collected offline.

Fineinside the line
App analytics that are aggregate and first-party.
Crash reporting that doesn’t identify the user, with analytics switched off.
Loyalty schemes with published rewards and published data use.
Guest Wi-Fi that asks for nothing beyond what’s needed to connect.
Neveroutside it
Third-party tracking or advertising tools bundled into apps, including Firebase Analytics.
Collecting advertising IDs or device fingerprints.
Selling or sharing loyalty purchase histories.
Tracking shoppers’ phones or faces in physical spaces for marketing.
02

Every channel, one Standard

Wherever a member meets a customer, the same rules apply.

Website
No ad pixels, no third-party trackers, no customer data to ad platforms.
Mobile app
No third-party tracking tools built into the app, and no advertising IDs collected from phones.
Email
Only to people who asked. Never shared, never matched with ad platforms.
Loyalty cards
Rewards on published terms. Purchase history never sold or shared for marketing.
In-store Wi-Fi and devices
No location tracking of shoppers, and no collecting device identifiers for marketing.
Smart products
Product data used to make the product work, not to profile its owner.
03

How we check

Every channel is a signed pledge, and every SDK in every app goes on the data map. At review we read public app reports such as Exodus Privacy and Apple’s privacy labels. When a concern is reported, we look at what the app actually sends. Email follows the Standard: aggregate open and click counts only.

This page is general information, not legal advice.
04

Questions

We only have a website. Does this apply?
Only the parts you have. The rule is simply that adding a channel later doesn’t add tracking.
What about emails?
Emails go only to people who asked. Aggregate open and click counts are fine; per-person open and click records aren’t (NFS-2.2).
Previous · pledge 03Data minimisationNext · pledge 05Honesty when it goes wrong
Clean in every channel?

Membership covers the whole business, not just the homepage.

Apply to joinTake the self-check