Skip to content

Privacy

Last updated August 2026

TapMart is built to need as little about you as possible. You can browse the board and open links without an account.

What we store

  • An account holds your email address and the display details you enter for your links.
  • A first-party anonymous visitor identifier is set in a cookie. It exists to stop the same person being billed twice for the same link and to attribute creator referrals.
  • For each open we record the placement, a coarse timestamp, the user agent string, and a keyed one-way hash of the IP address. We do not store raw IP addresses.
  • Payment records from Stripe: an amount, a status, and Stripe’s own identifiers.

What we do not do

  • We do not build behavioural profiles or browser fingerprints.
  • We do not sell or share personal data with third parties for advertising.
  • We do not track you across other websites.
  • We never fetch or preload the destinations people submit.

Cookies

Two cookies: a session cookie when you are signed in, and the anonymous visitor identifier described above. Both are first-party and httpOnly. There are no advertising cookies.

Processors

Supabase hosts the database, authentication, and uploaded images. Stripe processes payments. Vercel serves the site. Each receives only what it needs to perform that role.

Your rights

You can request a copy of your data or ask us to delete your account by contacting us. Deleting an account removes your profile, links, and unspent credit records; ledger rows needed for financial and fraud records are retained in anonymised form.

These are starter product documents written for an early build. Have them reviewed by a lawyer before operating at any scale.