Privacy
What we store, what we do not, and how to change your mind.
The short version
When you tap a YalaTap stand you open that business's page. We ask, once, whether we may count your visit. If you say no — or say nothing — nothing optional is stored on your device and no visit is recorded against you. The page works either way.
There is no advertising technology on any YalaTap page. No Google Analytics, no Meta or TikTok pixel, no tag manager, no session recorder. Not 'none at the moment' — there is none in the product.
What we store if you say yes
| An identifier | A random value in a cookie. It is not derived from anything about you and cannot be turned back into anything about you. |
| What you tapped | Which stand, and which button you pressed on the page. |
| Device category | iOS, Android or other. Not a model, not a fingerprint. |
| Browser | A one-way hash of your browser's user-agent, never the text itself. |
| Network | A shortened and then one-way-hashed form of your address. We do not store your address. |
| Time | When it happened. |
We do not collect your name, email, phone number or location from a page visit. We do not build a profile, we do not follow you to other sites, and we do not sell anything about you.
If you write to a business
Feedback you type on a business's page goes to that business, with whatever contact details you choose to include. That is the only place a page asks you for anything.
How long we keep it
| Your choice about cookies | 180 days, then we ask again. |
| The analytics identifier | 400 days, or until you withdraw. |
| Individual visit records | 90 days, then deleted automatically. |
| Counts and totals | 24 months. These are aggregates — they are not about any one person. |
Changing your mind
Cookie settings at the foot of any YalaTap page. Withdrawing stops the counting immediately and deletes the identifier from your browser in the same step.
Counts already added to a business's totals before you withdrew are not individually identifiable and cannot be picked out again. We would rather say that plainly than imply we can undo something we cannot.
If you run a business with us
Your account holds your business details, your page's content, and a record of security-relevant actions on the account. Your password is stored hashed; nobody at YalaTap can read it and no part of the system returns it.
When we need to look at your dashboard to help you, we open it through a recorded support session. It never uses your password, it shows a banner on screen for as long as it lasts, and it is written into a record we cannot edit.
Only YalaTap can change the payment details shown on your page. You can see them in full at any time and you can ask us to change them, but the dashboard will not let you — or anyone who gets into it — edit them directly. That is a protection, not a restriction: if somebody obtains your password, redirecting your money is the first thing they would try, and the page would look completely normal afterwards.
Other companies
Links a business puts on its own page — WhatsApp, Google Maps, Instagram, InstaPay — go to those companies only when you tap them, and are governed by their terms rather than ours.
Our own pages load their typefaces from our servers, not from a font service, so opening a YalaTap page does not tell anyone else that you did.
Talking to us
hello@yalatap.com — or WhatsApp, from any page on this site.