Tap Links — Tap Privacy Notice

For people who tap a Tap Links device

Operator: Mace Design LLC (a New York limited liability company) d/b/a “Tap Links”
Effective date: 2026-05-18 · Version: 1.1

Summary

• Tapping a Tap Links device does not sign you in, does not ask for personal details, and does not set cookies on your device.
• We log routine web-request metadata (IP address, timestamp, device ID, browser type) for analytics and abuse prevention, retained only as long as needed for those purposes.
• The owner of the device sees only tap counts and the most recent tap time; they do not see your IP address or any identifier.

This summary is informational and subject to change. In a conflict between this summary and the formal text below, the formal text controls.

Who is Tap Links?

Tap Links is a brand of Mace Design LLC, a New York limited liability company headquartered in Brooklyn. Tap Links manufactures NFC-enabled devices and pucks and operates the cloud service that routes device taps to a destination URL chosen by the device’s owner.

What happens when you tap a device

1. Your phone reads the device’s NFC chip and is given a URL like https://<owner-subdomain>.taplinks.com/<unique-device-id>.
2. Your phone opens that URL.
3. Our infrastructure receives the request, looks up the destination URL the owner has configured, and either:
   • Redirects you to that destination (typically a website, an SMS message draft, a phone call, or a similar action), or
   • Displays an interstitial page hosted by us if the destination requires confirmation (e.g., an SMS link), or
   • Displays a holding page if the owner has not yet configured the device.

What we collect when you tap

What we do NOT collect when you tap

• Your name.
• Your email address.
• Your phone number.
• Your precise GPS location.
• Your phone’s hardware identifier, advertising identifier, push token, or any other persistent device identifier.
• Biometric information (fingerprints, face data, etc.).
• Any account information (you do not have an account with Tap Links unless you are a device owner).

We also do not set any cookies on your phone when you tap. The interstitial and holding pages we render are cookieless.

How long we keep the tap record

We retain tap records, including the IP address, for as long as the service operates. We do not currently run an automated process that deletes or aggregates tap records on a fixed schedule.

We may keep specific tap records longer when required to do so by legal hold, subpoena, an ongoing fraud or abuse investigation, or an insurance claim. We will not retain a tap record longer than necessary for the purpose that requires the longer retention.

What the device’s owner sees

The owner of the device (the business that configured it) sees the following in their dashboard:

• The total number of taps the device has received.
• The date and time of the most recent tap.
• Aggregate trends (taps per day, taps per week).

The owner does not see your IP address, your User-Agent, your approximate region, or any other identifier of any individual tap. The owner cannot tell whether you specifically tapped their device, and they cannot trace any single tap back to a person.

If the owner configured the device to redirect to their website, their SMS line, or their phone number, then your interaction with that destination is governed by the owner’s privacy practices, not ours. We do not control what happens after the redirect.

Vendors involved

We use a small number of vendors to deliver the redirect. None of them receive your personal information for their own purposes:

• Cloudflare routes the request and powers our edge compute.
• Resend sends email to Tap Links customers; it is not involved in tap routing.

For the complete vendor list, see Subprocessors.

Your rights

If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know what we have collected about you, the right to delete that information, and the right to correct inaccuracies. See section 7.1 of our Privacy Policy for the full list and the request procedure.

To exercise a right relating to a tap, email hello@taplinks.com. Because we collect very little information about taps, we may not be able to verify a specific tap unless you can tell us approximately when and where the tap happened and which device owner’s business is involved. We will work with you in good faith.

How to avoid being recorded

You can avoid being recorded by:

• Not tapping the device.
• Disabling NFC on your phone (settings vary by phone).
• Closing the browser tab before it loads (the tap will still have been recorded by the time the URL loaded, but no further data is collected after).

We do not offer a per-person opt-out that survives across taps, because we do not maintain a persistent identifier for any individual person who taps a device.

Children

Tap Links is not designed for use by children under 13. Device owners sometimes use devices in retail environments where children are present. We do not knowingly collect personal information from children under 13. If you believe a child under 13’s information was collected, please contact hello@taplinks.com and we will delete the record.

Reporting abuse

If you believe a Tap Links device is being misused, for example, redirecting to malicious software, scam websites, illegal content, or content that infringes copyright, please email hello@taplinks.com with the device’s URL (the full https://<subdomain>.taplinks.com/<UID> from your browser’s address bar) and a brief description of the problem. We investigate every abuse report.

For copyright-specific complaints, follow the procedure in our DMCA Policy.

Contact

• Privacy questions or requests: hello@taplinks.com
• Mailing address: Mace Design LLC Attn: Privacy 276 Greenpoint Ave., Unit 9306 Brooklyn, NY 11222

For the full Privacy Policy, see Privacy Policy.