Privacy Policy.

Privacy Policy.

Last updated: 2026-07-21

1. What We Collect

We collect the following data to operate TapShift:

• Account data: email address and a bcrypt-hashed password when you sign up. We never store plain-text passwords.
• Click events: every tap on a /r/:code short link is recorded in link_events with timestamp, referrer, user agent, device type, and IP-derived geo country.
• UTM parameters: utm_source, utm_medium, and utm_campaign you provide (or that TapShift auto-appends as tapship / affiliate / tapshift-link) on every redirect.
• Conversion events: when a tap turns into a downstream conversion you report, we record it in conversion_events along with earnings in cents.

2. Cookies We Set

• tapshift_uid — session cookie that keeps you logged in across pages. Signing out clears this cookie.
• tapshift_ab — sticky 30-day cookie that assigns you to one of three A/B-test variants (v1, v2, or v3) on the landing page so we can measure which headline converts.
• _fbp / _fbc — Meta Pixel cookies (Pixel ID 1786943249385059) set when you load any page with the Meta Pixel script. Used to measure PageView, Lead, and Purchase events.

3. How We Use Your Data

• Provide the Service: generate short links, redirect taps, attribute conversions to affiliates.
• Pay commissions: Stripe connected accounts hold the payout balance; we mark commissions as paid in the commissions table.
• A/B test headlines: the tapshift_ab cookie lets us measure conversion rate per variant and write to ab_events.
• Transactional emails: first-link milestones and commission-earned notifications are sent through Polsia's authenticated email proxy.
• Aggregate analytics: Polsia Analytics records anonymous pageviews with a randomly-generated visitor ID stored in localStorage under polsia_vid.

4. Third-Party Services

• Stripe — payment processing for premium features and commission payouts. Stripe's privacy policy governs data they handle.
• Meta Pixel 1786943249385059 — conversion measurement on Meta ad platforms; sets _fbp and _fbc cookies as described above.
• Polsia — platform analytics (polsia_vid) and authenticated email proxy for transactional mail.
• Google Fonts — served from Google's CDN; Google may log requests from your browser. We do not send personal data to Google Fonts.

5. Your Choices

You can control your data in the following ways:

• Click Sign Out in the navigation bar to clear the tapshift_uid session cookie.
• Clear your browser cookies to reset the tapshift_ab A/B variant assignment.
• Block third-party cookies in your browser to prevent Meta Pixel from setting _fbp / _fbc.
• Email support@umbrella-marketing-co.com to delete your account and all associated link data.

6. Data Retention

Click events in link_events are retained for the life of the link. Account data is retained until you delete your account. Aggregated anonymous analytics (Polsia) are retained indefinitely.

7. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be reflected by updating the "Last updated" date above. Continued use of TapShift after a change indicates acceptance of the updated policy.

8. Contact

Privacy questions or data-deletion requests: support@umbrella-marketing-co.com. We read every message and reply within one business day.