Privacy Policy
Last updated: November 3, 2025
At TanTap, we believe privacy isn't just a feature—it's a fundamental right. This Privacy Policy explains how we collect, use, and protect your information when you use our QR code generation service.
Our Privacy Philosophy
TanTap is designed with privacy at its core. We process your contact information client-side whenever possible, meaning your data stays on your device. We don't sell, share, or harvest your data for marketing purposes.
Definitions
For the purposes of this Privacy Policy:
- Company (referred to as "TanTap", "We", "Us" or "Our") refers to TanTap, the QR code generation service.
- Service refers to the TanTap website and QR code generation tools.
- Personal Data is any information that relates to an identified or identifiable individual.
- Usage Data refers to data collected automatically about how you use our Service.
- Account means a unique account created for accessing premium features of our Service.
- Device means any device that can access the Service such as a computer, mobile phone or tablet.
What Data We Collect
Contact Information You Provide
When you generate QR codes for vCards (digital business cards), you may provide:
- First and last names
- Email addresses
- Phone numbers
- Company names
- Job titles
- Website URLs
Important: For single QR code generation, this information is processed entirely in your browser and is never sent to our servers. For bulk generation features, minimal data may be temporarily processed server-side to generate your QR codes, then immediately deleted.
Account Information (Optional)
If you create an account to access premium features, we collect:
- Email address
- Password (encrypted)
- Account preferences
Usage Data
We automatically collect limited usage data to improve our service:
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring website
- General location (country/region level only)
We use privacy-respecting analytics tools and do not track individual users across the web.
How We Use Your Data
We use your information only for:
- QR Code Generation: Processing contact information to create vCard QR codes
- Service Delivery: Providing you with the tools to generate and download QR codes
- Account Management: Managing your account and authentication (if applicable)
- Service Improvement: Understanding how people use TanTap to make it better
- Security: Detecting and preventing abuse, fraud, and security issues
- Legal Compliance: Meeting our legal obligations
We do NOT use your data for:
- Marketing or promotional emails (unless you explicitly opt-in)
- Selling or sharing with third parties for their marketing
- Tracking you across other websites
- Building advertising profiles
Client-Side Processing
TanTap's core QR generation feature works entirely in your browser using JavaScript. This means:
- Your contact information never leaves your device
- QR codes are generated locally on your computer/phone
- No server sees the personal data you're encoding
- Downloads are created client-side
This is a fundamental privacy feature of TanTap.
Data Retention
- Single QR Generation: No data is stored—everything happens in your browser
- Account Data: Retained while your account is active, deleted within 30 days of account deletion
- Usage Analytics: Aggregated data retained for up to 24 months
- Server Logs: Technical logs retained for up to 90 days for security purposes
Cookies and Tracking
We use minimal cookies:
- Essential Cookies: Required for the service to function (authentication, preferences)
- Analytics Cookies: Help us understand usage patterns (anonymized)
We do NOT use:
- Advertising cookies
- Cross-site tracking cookies
- Social media tracking pixels
You can disable cookies in your browser settings, though some features may not work properly.
Data Security
We implement industry-standard security measures:
- All data transmitted over HTTPS encryption
- Passwords are hashed using bcrypt
- Regular security audits and updates
- Limited access to any stored data
- No storage of credit card information (handled by payment processors)
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but take it very seriously.
Your Rights
Depending on your location, you may have rights including:
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing of your data
- Withdrawal: Withdraw consent at any time
To exercise these rights, contact us at privacy@tantap.com
Third-Party Services
We use select third-party services that may process data:
- Hosting Providers: For website infrastructure
- Payment Processors: For handling payments (they have their own privacy policies)
- Analytics Tools: For understanding usage (anonymized data only)
We carefully vet all third parties and ensure they meet our privacy standards.
International Data Transfers
TanTap is operated from [Your Country/Region]. If you access our service from outside this region, your data may be transferred internationally. We ensure appropriate safeguards are in place for any international transfers.
Children's Privacy
TanTap is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending an email notification (if you have an account)
We encourage you to review this policy periodically.
GDPR Compliance (EU Users)
If you are in the European Union, we comply with GDPR requirements:
- We process data lawfully, fairly, and transparently
- We collect data only for specified, explicit purposes
- We minimize data collection to what's necessary
- We keep data accurate and up-to-date
- We retain data only as long as necessary
- We ensure appropriate security measures
Our legal basis for processing is typically consent or legitimate interest in providing our service.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal data is collected
- Right to know if personal data is sold or disclosed
- Right to opt-out of sale of personal data
- Right to deletion of personal data
- Right to non-discrimination
Note: TanTap does not sell personal data.
Contact Us
For any privacy-related questions, concerns, or requests:
- Email: privacy@tantap.com
- Data Protection Officer: dpo@tantap.com
We will respond to all requests within 30 days.
TanTap is committed to transparency and protecting your privacy. If you have questions about this policy or our practices, please don't hesitate to reach out.