Your details, and what happens to them
Plain English, no small print. Last updated 26/10/2026.
Who I am
tapps.vip is run by me, Tommy Evans, a one-person app builder in the UK. I decide what happens to the details you send through this site. To ask about any of it, email contact@tapps.vip.
What I keep, why, and for how long
| What | Why | How long |
|---|---|---|
| What you type in the enquiry form: your name, business (if you give one), email address, what you're after and your message, plus where you came from (as in visits, below) | So I can reply to you and, if you want, work with you | 12 months in this site's database, then deleted automatically (Cloudflare can restore deleted data for up to a month after, then it's gone). A copy arrives in my email inbox and stays there as ordinary correspondence. |
| What you type on the feedback page, whether it's a problem or an idea, and which page of this site you came from. No name or email is asked for. | To fix what's broken and improve the site | 12 months in this site's database, then deleted automatically. It also becomes an issue on my private to-do list (GitLab), closed once I've dealt with it and deleted on request, and a note to my phone (Telegram) that I clear from time to time. |
| A scrambled code made from your internet address, using a secret key. Without the key it can't be turned back into the address. | To stop spam: anyone can send 5 enquiries and 5 feedback messages an hour | Cleared once it's a day old |
Visits to this site: the date, the page, where you came from (the site that sent you, or the name in a shared link, like ?ref=linkedin), and a scrambled code that changes every day, made from your internet address and browser details with a secret key, so I can count each visitor once a day. I can't use it to identify you or follow you from one day to the next. Your browser also keeps where you came from until you close the tab, so other pages and the enquiry form know it. If your browser sends Global Privacy Control, your visit isn't counted at all. | To see whether the site is working: how many people visit, from where, and how many get in touch (my legitimate interest) | The code is cleared once its day is over (UTC); the counts are kept 12 months |
| Your day/night choice, if you tap the sun/moon button | So the page remembers it | Saved in your own browser only; never sent to me |
There are no adverts on this site, nothing follows you to other sites, and I never sell or share your details for marketing. Cloudflare keeps a short log of errors on the site (no record of who visited) for a few days, so I can fix problems.
Cookies
The public pages set no cookies, so there's no cookie banner. Cloudflare Turnstile runs in its own frame from Cloudflare and sets none on this site either. What the site does keep is in your own browser, and you can clear it any time in your browser's settings:
| Name | What it's for | How long |
|---|---|---|
tapps-theme (local storage) | Your day/night choice | Until you clear it |
tapps-source (session storage) | Where you came from, so the visit count and the enquiry form know it | Until you close the tab |
tapps-v2 (cache storage) | An offline copy of the home page, a font and an icon, so the installed app opens without a connection | Until you clear it; refreshed as you visit |
The admin pages are for me only. Signing in to them, or to a pitch deck I've invited you to, sets Cloudflare Access's CF_Authorization cookie, which is strictly necessary to keep you signed in and lasts until that sign-in ends. The admin pages also keep two settings in my browser (tapps-dont-count, tapps-dev-board-filter). Other visitors never get any of these.
Who else is involved
- Cloudflare runs the site, stores the enquiries and checks that a person, not a bot, sent the form (Cloudflare Turnstile looks at signals from your browser to do that). Cloudflare's privacy policy.
- Google (Gmail) holds my inbox, where your enquiry arrives.
- GitLab holds my private to-do list, where feedback becomes an issue. GitLab's privacy statement.
- Telegram carries a note to my phone that feedback has arrived (with the message) and that an enquiry has arrived: your name, business, what you're after and the start of your message. If the email to me ever fails, it carries the whole enquiry instead, so it isn't missed.
Some of these companies may handle data outside the UK; they do so under the safeguards UK law requires.
Why I'm allowed to
You ask me to get in touch, so I use your details to answer you and, if we go ahead, to agree the work (taking steps at your request before a contract). Feedback is used to fix and improve the site (my legitimate interest in a site that works). Keeping spam out uses the scrambled code above (my legitimate interest in a working inbox), and counting visits is my legitimate interest in knowing whether the site works.
Your rights
You can ask to see what I hold about you, to correct it, or to have it deleted, and you can object to how I use it. Email contact@tapps.vip and I'll reply within a month, usually much sooner. If you're unhappy with how I've handled your details, you can complain to the Information Commissioner's Office at ico.org.uk.