Last updated: 2026-06-13
1. Image processing
TapCrop crops, resizes, compresses, watermarks, and converts images in your browser. Image content is not uploaded to TapCrop servers. For performance diagnostics, we may record metadata such as file type, file size, and image dimensions, but not the image itself or its filename.
2. Data we collect
- Account data: Firebase UID, email, sign-in method, registration time, and recent login time.
- Synced data: templates and preferences you save, subscription status, and daily usage.
- Product analytics: route, referring page, session or anonymous identifiers, feature actions, device type, browser, operating system, country or region, and performance metrics.
- Error diagnostics: error details, route, device, operation, file type, file size, image dimensions, and recovery outcome. Error text is sanitized to reduce accidental personal-data capture.
- Billing data: Creem customer, product, and subscription identifiers, payment status, amount, currency, subscription dates, and cancellation state. We do not store full card details.
- Feedback data: the name, email, message, country or region, and hashed network address you submit.
3. How we use data
We use this data for sign-in and sync, Free and Pro limits, billing and cancellation, customer support, error detection, service security, and product and retention analysis. TapCrop does not sell personal data or use advertising-profile cookies.
4. Local storage
Your browser stores editing settings, theme, language, an anonymous identifier, and some experience state. You can clear this through browser settings. Server-enforced quotas do not rely only on local storage.
5. Service providers
- Vercel: hosting, network analytics, and performance monitoring.
- Firebase: authentication and Firestore storage.
- Creem: Pro subscriptions, payments, billing portal, and webhooks.
- Buy Me a Coffee: voluntary support payments.
6. Retention
Account profiles and templates are generally retained until account deletion. Detailed usage, raw analytics, errors, rate-limit, and webhook idempotency records have limited operational or security retention and are cleaned through Firestore TTL; aggregate statistics may be retained longer. Payment, refund, cancellation, and audit records may be retained for accounting, tax, fraud prevention, or dispute requirements, but UID and email are removed after account deletion.
7. Account deletion
You can start deletion from the Account page. TapCrop requires recent authentication, stops automatic renewal for an active subscription, and then removes the Firebase Auth account, profile, templates, usage, linked analytics, and error records. Legally required billing and audit records are anonymized. If a subscription cannot be canceled automatically, deletion pauses and directs you to support to prevent future charges.
8. Your choices and rights
You can access your account details, clear local data, manage or cancel a subscription, delete your account, or contact us to request access, correction, or deletion of related data.
9. Children and updates
TapCrop does not knowingly collect personal information from children under 13. Policy changes will be reflected by a new update date on this page.
10. Contact
For privacy questions, contact humphrey1114@gmail.com.