Privacy policy

taap.at, the service described on this site. For privacy questions, email hola@taap.at.

• — Name and email, to identify and contact you.
• — A bcrypt hash of your password; we never store the plain password.
• — Content you create: links, destinations, QR codes, bio pages, and events.
• — For paid plans, Stripe stores billing data. We keep only a customer identifier and subscription status, and never see or store your card number.

• — Approximate country and city inferred from the IP address.
• — Device type, browser, operating system, and language.
• — Referring site and time of the visit.
• — The IP address is used immediately to infer location and is not stored with the click. We use no tracking cookies, build no profiles of clickers, and do not combine their data across accounts.
• — Unique visitors are counted with a fingerprint derived from IP, browser, and link ID using a secret that changes daily. It cannot be reversed to the IP and cannot track anyone across days or different links.

• — Necessary cookies: your signed-in session and a temporary cookie on account-free creation pages so an asset can be attributed if you later register.
• — Measurement cookies: Google Tag Manager and Google Analytics help us understand acquisition and page usage. Advertising personalization and Google ads-data features are disabled.
• — Measurement cookies are not loaded on users’ bio or event pages; we do not send that traffic to Google.

• — Stripe, for payments and payment methods.
• — Google Tag Manager and Analytics, for the usage statistics described above.
• — No one else. We do not sell or transfer data. The service and email run on our own infrastructure.

• — Account data while the account exists.
• — Click records while their link exists.
• — Unclaimed account-free assets are deleted after 30 days.
• — Billing records for as long as applicable tax rules require.

Request access, correction, export, or deletion by emailing hola@taap.at from your account email. Deleting the account also deletes its links and analytics, and redirects stop working.