Privacy
Tapmy.link sets two cookies, runs no third-party scripts on public pages, and never stores a visitor's IP address. This page says exactly what is kept, for how long, and how to get it back or delete it.
Who this covers
Two different people appear in this document. A creator has an account and a page. A visitor opens somebody’s page without an account. Almost everything below applies only to creators, because visitors leave almost no trace.
Questions, requests and complaints: privacy@tapmy.link.
What is stored about a creator
| Data | Why | Kept until |
|---|---|---|
| E-mail address | Identifies the account, used for sign-in and service notices | Account deletion |
| Password hash | Sign-in. The password itself is never stored and cannot be recovered from the hash | Account deletion |
| Page content | Name, bio, links and blocks — this is the page itself | Account deletion |
| Uploaded images | Avatar, card images, background. Re-encoded on upload and stripped of EXIF | Account deletion |
| Interface language | So the panel opens in the language you signed up in | Account deletion |
What is stored about a visitor
Page views and link clicks are recorded on the server at the moment they happen. Each record holds the page, the block that was clicked, the referring site’s hostname, a coarse device type, and a pseudonym in place of the visitor.
That pseudonym is a salted hash of the IP address where the salt changes every day at midnight Kyiv time. It cannot be reversed into an address, and the same visitor produces a different pseudonym tomorrow — so it can count distinct visitors within a day and nothing beyond that. The raw IP address is never written to storage.
Records are deleted automatically after 90 days. That is not a policy we promise to apply; it is enforced by the database itself.
Cookies
There are two, and there is no consent banner because neither of them needs consent under the ePrivacy exemptions.
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session | Keeps a signed-in creator signed in. Strictly necessary — without it there is no way to edit your own page. | 30 days |
| Language | Remembers a language you chose yourself from the switcher. Interface customisation, set only by your explicit action. | 1 year |
Both are set on tapmy.link only, with no Domain attribute. They are never sent to a creator’s subdomain, which is why a visitor to somebody’s page receives no cookie at all.
Public pages load no third-party scripts: no analytics tag, no advertising pixel, no font or widget served from another company. Nothing on a public page can set a cookie or read one.
Where the data is
The application runs on Railway in the United States. The database is MongoDB Atlas. Uploaded images are stored on Amazon S3 in the eu-central-1 region in Frankfurt.
For visitors and creators in the European Economic Area this means some data is processed outside the EEA. That transfer relies on the European Commission’s standard contractual clauses as incorporated in the providers’ data processing terms.
Legal basis
- Running your account and serving your page — performance of a contract.
- Aggregate page statistics and abuse prevention — legitimate interests, specifically keeping the service usable and keeping the shared domain out of blocklists. Because no cross-site identifier is created, the impact on any individual is minimal.
- Service e-mails such as a password reset — performance of a contract. There is no marketing mailing list.
Your rights
- Access and portability. Export your profile and statistics as JSON from the panel at any time.
- Deletion. Deleting your account removes the records from the database and the files from storage. It is a real deletion, not a hidden flag. There is a 30-day window in which you can change your mind, after which it cannot be undone.
- Correction. Every field of your page is editable by you directly.
- Objection and restriction. Write to privacy@tapmy.link.
- Complaint. You can complain to the data protection authority where you live.
A released address is not handed to somebody else immediately. It is held for a quarantine period first, so a link printed last year cannot start pointing at a stranger the week after you leave.
Age
You must be at least 16 to hold an account. If we learn that an account belongs to someone younger, it is removed.
Changes
The date at the top of this page is the date it last changed. A change that materially affects creators is announced by e-mail to the address on the account before it takes effect.