Privacy policy

Before you sign in

You can build a page without an account. Your draft is saved in your own browser’s storage on your device, not on our servers. Clearing your browser data removes it, so download a backup from the studio if you want to keep a copy.

What we store when you sign in or publish

• Your email address, to identify your account. If you sign in with Google or Apple, we receive the email and name your account shares with us, plus an account identifier from that provider. Apple may give us a private relay address instead of your real email.
• Your name, if you or your sign-in provider gives us one.
• Your page: address, name, bio, theme and links. A published page is public, so anyone with the link can see it, and search engines may list it.
• Uploaded profile photos, hosted by Cloudflare Images. Uploading sends the photo to the image service immediately. These images have public URLs even before you publish your page. Unused uploads older than 24 hours are cleaned up automatically. Photos referenced by your saved draft, published page, or version history are kept. Account deletion queues all your uploaded photos for permanent removal. Temporary image-service outages may delay file removal.
• Sign-in codes, stored only as a one-way hash and valid for 10 minutes.
• Sign-in sessions, so you stay signed in on a device for up to 90 days or until you sign out.
• A hashed form of your IP address, kept for about a minute to limit repeated requests and protect sign-in from abuse.

Activity on public pages

Published pages record page visits and link clicks, the time, and the IP address of the connecting visitor. Only the page owner can view these records in their workspace. An IP address identifies a connection and may be shared by several people or masked by a VPN.

Activity history covers 30 days, with older records automatically removed. We do not use analytics cookies. The activity recorder respects browser Do Not Track and Global Privacy Control signals. Test clicks in the editor stay on that device.

Who helps us run TapMore

These services process data only to provide TapMore:

• Vercel hosts the website and studio.
• Railway hosts our API and database.
• Resend sends sign-in and email-change verification codes.
• Anthropic processes page addresses and content you submit when using AI import or writing suggestions.
• Google and Apple handle sign-in if you choose them.
• Google Fonts serves the typefaces on our pages.
• Cloudflare Images stores and serves uploaded profile photos.

Like most websites, our hosting providers keep standard request logs, such as IP address and browser type, for security and reliability.

Your choices

• Unpublish your page at any time from the studio.
• Sign out on any device to end that session.
• Delete your account from Account settings in the studio. This removes your saved page, history, activity, and sign-in connections, and queues uploaded photos for permanent deletion. You can also email agosh.space@gmail.com from the address you signed in with for help. We handle emailed deletion requests within 30 days. Copies in other browsers and downloaded backups remain until you remove them.

Changes and contact

TapMore is new and still changing. If this policy changes, we’ll update this page and the date above. Questions: agosh.space@gmail.com.