Anonymous contact tag · Private beta
A PassQR Tag on the windshield, the gate or the toolbox carries a code and nothing else. Someone who needs you scans it and writes. The relay works out whether they are really standing there, then keeps trying to reach you until you answer.
Neither of you ever holds an identifier for the other.
Patent pending
No phone numbers were exchanged
The problem with a sticker
To be reachable you publish a phone number. To protect a phone number you become unreachable. Most people pick the second and hope nothing happens.
It is readable by everyone who walks past, photographable from ten feet, and permanent the moment it is scraped. You cannot take it back off the windshield.
A neighbour who saw smoke and a cold caller reach you the same way, at the same hour, with the same ringtone. So eventually you stop picking up.
When it genuinely matters — a leak, a tow truck, a child locked in — paper waits for you to come back. That is the one case the sticker existed for.
How it works
A page opens in whatever browser is already on their phone. They pick how urgent it is and type — or record a voice note. No app, no signup, no email address.
Scanning a photo of your tag is not the same as standing next to it. The relay scores several independent signals before it decides how seriously to treat the message.
Wallet pass, then push, then a text, then a second contact you nominated — on a clock, in order, stopping the moment you reply. A routine note never does any of that.
Presence
That difference is the whole product. A stranger at your car deserves to interrupt your evening; the same code screenshotted in a car park last Tuesday does not. So the relay scores it rather than taking anyone's word.
The tag answers with a token that rotates. A screenshot from last week carries a stale one.
The camera decodes the tag in real time. You cannot do that from an image saved to the roll.
Compared against the tag's own position, which is never sent to the person scanning.
A radio that only carries across a driveway, so hearing it is itself evidence of being close.
The phone itself can confirm the visit began at a physical tag rather than a forwarded link.
Two scans of the same tag minutes apart and a continent away cancel each other out. This one subtracts.
Enough independent evidence to interrupt you. Critical messages can escalate all the way.
Probably there. Slower ladder, longer gaps, less disclosed at every step.
Delivered quietly to your inbox and nowhere else. It never rings anything.
Signals are weighted and added, not ticked off, so no single one can be faked into a high score. Which signals a given phone can offer depends on the phone and the browser; the tag works either way.
Patent pending
Escalation and disclosure
A message does not simply arrive and hope. It climbs, one channel at a time, and stops the instant you reply. This is one tag's ladder for something critical from someone checked present.
Three channels at once, because at this severity the point is not to be polite about it.
Someone you nominated and who accepted. They were asked, never assigned.
Only now, only for something critical, and only after every channel you own has gone unanswered.
That it was delivered. Nothing else. No name, no object, no place. This is where nearly every message stays from beginning to end.
Your display name. Unlocked by you answering, not by them asking, and it is whatever name you chose to show.
What the tag is on and roughly where. Critical messages only, after the whole ladder has run out. It is the fire-and-tow-truck case, and nothing less.
Each tag has its own settings. Turn channels off, cap how much can ever be disclosed, stretch the clocks, or forbid voice notes — per tag, not per account.
Where to put one
Blocked in, lights left on, a knock while you are parked in a stranger's street. The reason most people want one.
Deliveries, contractors and neighbours reach whoever is actually on duty, without a name plate telling everyone who that is.
Things that sit unattended for weeks in places you are not. A dragging mooring is worth a phone call at 2am.
The finder writes to the owner without either of them learning who the other is, which is exactly why people bother returning things.
Every guest reaches you the same way and none of them keeps your number after checkout.
A carer, a lone worker, a teenager's bike. The tag reaches an adult who chose to be reachable, and nobody has to hand out a mobile number.
What neither side gives up
The same person writing to two different tags is two unrelated strangers. There is no account behind them to join up, because they never made one.
A set number of days after a thread closes, its contents are stripped — messages, voice notes, photos, location. Two days by default, up to thirty, and never "keep forever".
Some things are faster said than typed, and an accent is easier to hear. Voice notes work in the browser without an app on either end.
If a tag is used to harass someone, the person being harassed can report it — on a path the tag's owner can never see or silence.
Beyond messaging
The same presence check produces a signed visit receipt, small enough to travel inside a QR code and verifiable offline by any standard library — no call back to us, so we never learn when a receipt is checked or by whom.
Two organisations holding receipts about the same person cannot tell that they do. Which is why this part interests people who will never deploy anonymous messaging: home care visit verification, field service, inspections, adjusters, custody handovers.
Scan this. Say what's wrong. No number, no app.
K7MD · 4QXA
Patent pending
The relay and the browser side are live and in daily use on real tags. The iPhone app is with Apple. We would rather tell you that than let a feature grid imply otherwise.
If you want a tag on your own windshield while it is still early, say so and we will send you one.
Questions
No. The tag opens a page in whatever browser is already on their phone. They can read, write, send a voice note and follow the conversation without installing or signing up for anything.
Not from the tag. It carries a code and nothing else — no name, no number, no plate, no address. What a sender is shown depends on how far the conversation gets, and by default that is only that the message was delivered.
Three things. A message from someone who cannot be shown to be at the tag never rings anything — it waits in your inbox. You can block a sender for that tag. And a tag that is misused can be reported by the person on the other end, on a channel its owner cannot see.
That depends on how urgent the sender said it was. A routine note waits. An urgent one tries your phone, then texts you. A critical one runs the full ladder, including a second contact you nominated, and only then releases the last details.
No. The tag's position is held by the relay, never sent to the phone scanning it. That is what lets the relay check how close someone is without telling them where your car lives.
Contents are erased a set number of days after a conversation closes — two by default, adjustable between one and thirty. There is no "keep forever" setting, because a sender's words were given to a relay that promised to be temporary.
Yes, per tag. Drop channels you never want used, cap how much can ever be disclosed, lengthen the clocks, or switch voice notes off. A tag with everything turned down still collects messages in your inbox.
We are handing out tags to a small beta group while the iPhone app clears review. Email [email protected] and tell us what you would put it on.
Tell us what you would put a tag on and we will send you one from the beta batch, along with the settings that make sense for it.