Privacy
Last updated: 18 October 2026
Short version: we keep only what we need to run your TAPD page, we never sell your data, and we do not track visitors across the web.
Who we are
TAPD is a small independent service that makes NFC cards linked to personal and business profile pages at tapd.cards. For anything about your data, write to [email protected].
What we store about customers
- Your email address and your password. The password is stored only as a salted hash, never in plain text.
- What you put on your page: name, username, bio, links, photo or logo, opening hours, address, phone, and any pictures, backgrounds or music you upload.
- Your card number and whether the card is switched on or off.
- Your settings, including optional two-step sign-in, your language, and your privacy choices.
- Messages you send us through the support form, and reports about pages.
- A short activity log of account actions, kept for up to one year to keep the service safe.
Anything on your public page is visible to everyone who opens it. Only put on your page what you want people to see. If you set a PIN, the page stays hidden until the PIN is entered. You can also ask search engines not to list your page.
What visitors to a page leave behind
- Counters. We count page views, card taps, link clicks, saved contacts and the visitor’s country, as totals per page per day. We do not store IP addresses and we do not use tracking cookies.
- Repeat visits. To avoid counting a refresh as a new visit, a one-way hash made from the visitor’s address and browser is kept for a short time (minutes). It cannot be turned back into an address.
- Bots and link previews are not counted.
- Share your details back. This is off unless the page owner turns it on. If a visitor chooses to use it and ticks the box to agree, the name and details they type are sent to the page owner by email and shown in the owner’s dashboard. These contacts are deleted automatically after 400 days. The page owner is responsible for what they do with them.
Cookies
We only use cookies that the site needs to work: a sign-in cookie (kept up to 7 days), a PIN cookie on private pages (one day), and a language choice. None are used for advertising or tracking.
Who else handles data
- Cloudflare hosts the site and stores its data.
- Resend sends our emails (welcome, password reset, support replies, alerts and optional weekly summaries).
- Google Fonts supplies the fonts used on our pages, so your browser contacts Google to load them.
- Spotify and Discord. If a page owner adds a Spotify player or a Discord server card, the page loads content from those services, which have their own privacy policies.
We do not sell your data, rent it out, or share it with advertisers.
How long we keep things
We keep your account and page for as long as you are a customer. When your account is deleted, your page, uploads and saved contacts are removed. Backups we make for safety are kept only as long as needed. Support messages are kept as long as needed to help you.
Your rights
You can see, correct or delete most of your data yourself in your dashboard. You can also ask us for a copy of your data, to fix something, or to delete your account, and we will reply by email. If you are in the EU, you also have the right to complain to your national data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).
Changes
If we change this page in a meaningful way, we will update the date above and tell customers by email.