Privacy Policy

What OnTap collects

Public browsing and product events

OnTap records allowlisted events such as a visit, search, category view, Tool impression, Tool open, interaction start/completion, and a second Tool opened in the same session. Stored fields can include the event name, Tool, time, source section, result position, category, result count, and pseudonymous session and visitor identifiers.

Normalized search queries may be stored for product research. Queries resembling email addresses, telephone numbers, government identifiers, URLs, control characters, or markup are rejected. Do not place personal or confidential information in search.

Browser storage

OnTap uses session storage for a random session identifier and the list of Tools opened in that session. Local storage holds a random pseudonymous visitor identifier with a rolling 90-day expiry and, if selected, your analytics opt-out preference. OnTap does not currently set an advertising cookie.

Tool inputs

Client-side Tool inputs—including pasted JSON, text, calculations, Base64 values, and conversion values—stay in your browser and are not included in analytics. The UUID Tool calls a server route but sends no user input.

Requests, feedback, and reports

Tool requests store the requested task, optional use case, category, normalized demand key, source page, time, and optional pseudonymous identifiers. Contact submissions store the selected message type and message. Tool reports store the Tool, report category, details, and moderation status. These MVP forms do not request a name or email, so OnTap cannot reply personally or notify requesters yet.

Infrastructure data

Cloudflare processes requests at the edge and may process IP addresses, security signals, and operational logs to deliver and protect the site. Cloudflare Web Analytics receives performance and page-view measurements and describes the product as not collecting or using visitors’ personal data. Supabase stores OnTap’s catalog, product events, and submissions in the United States.

Why data is used

OnTap uses this limited data to operate and secure the service, understand whether people find and complete useful tasks, prioritize missing Tools, diagnose problems, respond operationally to reports, and meet legal obligations.

Retention

• Raw product events: 90 days.
• Tool requests and contact submissions: 12 months.
• Tool abuse reports: 24 months.
• Browser identifiers: a rolling 90 days unless cleared or disabled sooner.
• Cloudflare operational and Web Analytics data: retained under Cloudflare’s applicable service settings; Web Analytics currently exposes six months of reporting.

A daily database retention job deletes expired OnTap rows. Aggregated, non-identifying counts may be retained longer.

Sharing and subprocessors

OnTap does not sell personal information or run behavioral advertising. Cloudflare provides DNS, security, hosting, logs, and Web Analytics. Supabase provides the hosted Postgres database. Data may be disclosed when required by law or needed to protect users and the service.

Your choices

You can use the local Tools without an account, clear OnTap site data in your browser, disable first-party product analytics below, or submit a privacy request through Contact. Because the current form is anonymous, identity-dependent access or deletion requests may require a separate verified process once accounts exist.

Children

OnTap is a general-audience utility service, not a children’s service, and is not directed to children under 13. OnTap does not intentionally collect age or date of birth. If the operator learns that personal information was collected from a child under 13, it will investigate and delete it where required.

International and legal decisions

The operator’s legal identity, address, launch jurisdictions, controller contact details, and any jurisdiction-specific lawful basis or appeal language require founder/legal confirmation before broad marketing.