Privacy policy

Last updated 30 September 2026

Who we are

Tappy (tappy.dog) checks websites for broken links, errors, phone layout, accessibility and dark mode. This page says what data Tappy collects, why, and who else handles it.

Questions about your data: hello@tappy.dog.

What we collect

Your email address, when you sign in. We email you a sign-in link. There is no password.

The sites you add, the addresses you ask us to send reports to, your settings, the goals you give us, and the issues you mute.

What Tappy finds on your site: page addresses, page text, errors and screenshots.

A test login for your site, if you give us one on the paid plan. The password is encrypted before we store it.

Your IP address and the site you typed, when you check a site without an account. We use these only to limit how many free checks one person can start.

Billing details go to Polar, not to us. We receive only whether a subscription is active and which site it pays for. We never see your card number.

Google sign-in

If you sign in with Google, we receive your name, email address and profile picture from Google. We use them only to create your account and sign you in.

We do not sell Google user data, use it for ads, or share it with anyone except the services below that run Tappy. Tappy's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Google API Services User Data Policy

How we use it

To check your site, show you what we found, send you sign-in links and reports, and bill the paid plan.

We do not sell your data. We do not show ads. We do not run analytics or tracking scripts.

Who else handles it

Supabase stores accounts, site data and screenshots.

Railway hosts the website and the checker.

Resend sends sign-in links and reports.

Polar runs checkout and billing. Polar is the merchant of record for the paid plan.

Google Gemini and OpenRouter provide the AI models that read page text and screenshots from your site to find problems.

Firecrawl fetches pages when a site blocks our browser.

Proxylang translates tappy.dog into other languages in your browser.

Google Fonts serves the fonts on tappy.dog.

Cookies

Tappy sets cookies only to keep you signed in. There are no advertising or tracking cookies.

How long we keep it

We keep your data while your account exists.

Delete your account from any site's settings and we delete your sites, findings, screenshots and saved logins right away. Polar keeps its billing records under its own policy.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to hello@tappy.dog and we will answer within 30 days.

Children

Tappy is not for children under 16, and we do not knowingly collect their data.

Changes

When this policy changes, the date at the top changes. For a big change we email account holders first.