Last updated: April 5, 2026
TreeTap LLC ("TreeTap," "we," "us") operates the TreeTap website and web application. This Privacy Policy explains what data we collect, why, and how we handle it. By using the Service you acknowledge this policy.
If you sign in with Google, we receive your name, email address, and profile picture from Google. If you create a username, bio, or upload a profile photo, we store those too.
When you tap an NFC tag, we automatically create an anonymous session so you can log your find without signing up. This stores a session token, your IP address, and user agent. If you later sign in, your anonymous data merges into your account.
Each tap sends us the tag's unique identifier (UID), a read counter, and a cryptographic signature. We use this to verify the tap is authentic and prevent replay attacks.
Some caches require GPS verification. If so, your browser will ask for location permission before we collect coordinates. This is optional. You control it through your browser settings. We never collect location data in the background.
We collect basic analytics (page views, performance metrics) through Vercel Analytics and Speed Insights. These services do not use cookies and do not track you across sites.
Photos you upload, notes you write, and cache descriptions you create are stored on our servers.
We collect your IP address, browser type, operating system, and user agent as part of standard web requests and authentication sessions.
If you are in the EU/EEA, we process your data under the following bases:
We share data with these providers to operate the Service:
We may also disclose data if required by law, to protect rights or safety, or in connection with a business transfer (merger, acquisition).
TreeTap LLC is based in Texas, USA. Our infrastructure providers (Vercel, Neon, AWS) may process data in the United States. Where personal data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses or other approved transfer mechanisms to protect your data.
If you are in the EU/EEA, you have the right to:
To exercise any of these rights, email us at support@treetap.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (e.g. the AEPD in Spain).
Regardless of your location, you can update your profile information in your account settings or request account deletion by contacting us.
The Service is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe we have, please contact us and we will delete it promptly.
We use HTTPS, encrypted sessions, and cryptographic NFC verification to protect your data. However, no system is 100% secure, and we cannot guarantee absolute protection.
We use a small number of cookies, all either strictly necessary or functional. See our Cookie Policy for the full list.
We may update this policy from time to time. When we do, we will update the date at the top. Continued use of the Service after changes means you acknowledge the updated policy.
Data controller: TreeTap LLC, Texas, USA
Email: support@treetap.com