Privacy policy

Effective September 26, 2026. Contact: tagbackofficial@gmail.com

What we collect

• Account email address.
• Password hash (PBKDF2). We never store your password itself.
• Codes and labels you create.
• Chat messages in your conversations, both yours and your visitors'.
• Two strictly necessary cookies: a login session and an anonymous visitor id. See Cookies.

We run no analytics, no tracking pixels, and no ads.

Why we collect it

To run your account, store your codes and chats, keep you logged in, and recognize returning anonymous visitors. That is all.

Who processes it

Cloudflare hosts this app and delivers new-message notification emails, Neon hosts the database, and Google verifies your email address when you use Sign in with Google. We do not sell data and share nothing for marketing.

Retention and your rights

Account data stays until you ask us to remove it. Email us for access, export, or deletion of your data and we will handle it promptly.

Security

Passwords are hashed, traffic runs over HTTPS, and database access stays server side. No system is perfect, so use a unique password.

Changes

Policy updates are posted on this page with a new effective date.