Privacy

What TapIn keeps, and what it does not.

Short version: nothing about you. The long version is below, because a page that makes wallet passes from membership numbers should say exactly where those numbers go.

Your member number and name

They travel to the server in one request, are written into the pass, and are gone when the response is sent. They are not logged, not written to a database, and not kept in any cache. The only copy is the pass in your wallet.

Photos you scan

The camera frames and any photo you choose are decoded in your browser. The picture never leaves your phone. Only the characters the scanner found are sent, and only when you submit the form.

Logos and profile photos

For an Apple Wallet pass, the logo and your photo are embedded in the pass file and nothing is stored. For a Google Wallet pass, Google loads the logo by web address, so the logo tile you made is stored under a random name derived from its contents, with no link to you. If you add a photo to a Google Wallet pass, the same applies to the photo, and the builder says so before you upload it. Stored images are removed on request.

Analytics and ads

There is no analytics script on this site. Ads, when they appear, are served by Google AdSense, which may set cookies and use your interests to pick an ad; Google's advertising policy describes what it collects and how to opt out. Ads appear only on the web pages, never on a pass.

Referral links

Links to Rivian, Tesla and Starlink in the footer are referral links belonging to WattReach, the site's owner. Ordering through them passes the program's current perk to you and credits WattReach; it costs you nothing extra.

Rate limits

To keep the free tier free, the server counts requests per IP address for one minute at a time. The count is kept by Cloudflare's rate limiter and is not stored beyond that window.

Contact

Questions and removal requests go through the WattReach contact page.