Privacy

Who we are

taptag is operated by [legal entity name and address]. For anything about your data, contact [contact email].

What we store, and why

If you create an account:

• Your email address — it is how you sign in. We send no marketing.
• Your profile content — name, headline, bio, photo URL, links, socials, and any contact-card details you enter. You chose to publish this; it is served to anyone who opens your profile.
• Your tags — which codes belong to you and where each currently points.
• Billing records — if you buy something, we store the amount, currency, and shipping address for the order. Card details never reach our servers; Stripe handles payment.

Visitors to a profile

When someone taps a tag or opens a profile link, we record the time, the country, the browser user-agent, the referring site, and a hashed IP address.

The IP address is hashed with a secret salt before it is written and the raw address is never stored. The hash lets us estimate how many distinct people visited without retaining an identifier we could reverse. It is an estimate, not a precise count.

Visit records are deleted automatically after roughly 13 months. Aggregate totals survive that deletion; the individual rows do not.

We use no advertising trackers and no third-party analytics.

Cookies

One cookie, holding your sign-in session. There are no analytics or advertising cookies, which is why you are not being shown a consent banner.

Who else processes it

• Supabase — database and authentication, hosted in the EU.
• Stripe — payments, if you buy something.
• Our hosting provider — runs the application server.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Ask us to delete your account and we remove your profile, tags and visit records; billing records are kept as long as tax law requires. Email [contact email] and we will respond within 30 days.

If you are in the EU or Switzerland you may also complain to your local data protection authority.