Privacy Policy

Last updated: June 28, 2026

This Privacy Policy explains how tapa. ("we", "us", "our") collects, uses and protects information when you use our website and link-in-bio platform at tapa.ink (the "Service").

1. Who we are

tapa. is a link-in-bio builder that lets creators and businesses publish a public page with links, contact forms, booking blocks and analytics. If you have questions about this policy, contact us at privacy@tapa.ink.

2. Information we collect

Account holders. When you register, we collect your email, username, password (stored as a secure hash), profile details you provide (name, bio, avatar) and page content you create.

When you use your account (sign in, visit the dashboard, change settings, publish content), we also log account activity for security, fraud prevention and platform operations. This may include:

• Date and time of each action
• Action type (e.g. login, register, page view in dashboard)
• Pages or sections you open within the Service
• IP address
• Browser user agent, parsed browser name, operating system and device type
• Referrer URL and session identifier where available

Visitors to public pages. When someone views a tapa. page, we may collect:

• Anonymous visitor and session identifiers stored in the browser (only with your consent)
• IP address and a one-way hash of the IP address
• Browser user agent, referrer and event type (page view, link click, form submission, booking)
• Information submitted through contact or booking forms (name, email, message)

Platform site visits. When anyone browses tapa.ink (homepage, login, register, etc.), we record page views with IP address, browser data and referrer. If you are signed in, these events may be linked to your account.

3. How we use information

• Provide, operate and improve the Service
• Authenticate users and secure accounts
• Show page owners analytics about views, clicks, leads and bookings
• Detect bots and suspicious traffic to protect analytics integrity
• Investigate abuse, enforce our terms and respond to legal requests
• Respond to support requests and legal obligations

4. Admin access to activity data

Authorized platform administrators can access detailed activity records for registered users and visitors, including IP addresses, browsers, pages visited and action history. This access is limited to staff with admin privileges, used for security monitoring, support, fraud prevention and platform administration, and is disclosed here so you are informed before using the Service.

5. Legal bases (EEA/UK users)

We process data based on: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, product improvement, admin oversight) and consent (optional analytics cookies on public pages).

6. Data sharing

We do not sell your personal data. We may share data with infrastructure providers (hosting, database, email) who process it on our behalf under contractual safeguards, or when required by law.

7. Retention

Account data is kept while your account is active. Activity logs and analytics events are retained for security, reporting and administration and may be deleted or aggregated according to our internal retention schedule. You may request deletion of your account and associated data.

8. Your rights

Depending on your location, you may have the right to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent for optional cookies at any time via our cookie banner or browser settings.

9. Security

We use industry-standard measures including encrypted connections, password hashing and access controls on admin tools. No method of transmission over the internet is 100% secure.

10. International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

11. Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

12. Changes

We may update this policy from time to time. We will post the revised version on this page with an updated date.

13. Related documents

See also our Cookie Policy for details on cookies and local storage.