Tallypin Privacy Policy

Effective date: 23 August 2026

Tallypin (“Tallypin,” “we,” “us”) is a free web app that lets you track and share the venues you’ve visited. This policy explains what we collect, why, and the choices you have. We keep data collection deliberately minimal.

Who we are

Tallypin is a small independent project, not a company. You can reach whoever is behind it using the form at the bottom of this page.

What we collect

• Account information: When you sign in with Google, we receive your name, email address, and a Google account identifier. We do not receive or store your Google password.
• Display name: A name you choose to show on your profile (you may edit it).
• Your map: Which venues you mark as visited, and the date/time you marked them.
• Groups you join: Which groups you are a member of, and when you joined.
• Usage analytics: Aggregate, non-identifying information about how the site is used (for example, page views and button clicks), collected in a privacy-friendly way that does not track you across other websites.

We do not collect your location history, and we do not ask for or store photos in this version of the app.

How we use it

To sign you in; to save your map and sync it across your devices; to show your counts and badges; to generate a shareable image you choose to create; and to understand overall usage so we can improve the app.

Groups, and what other people can see

If you join a group, everyone else in that group can see your maps in full — not just your totals, but every venue you have marked — along with your display name and the badges you have earned. You can see theirs on the same terms. This is the entire point of a group, and it is worth being clear that it is not a summary: it is your marks.

Anyone holding a group’s invite link can join it, so treat that link the way you would treat an invitation to a private conversation. Group owners can rotate the link, which immediately stops every copy already sent from working, and can remove members. Leaving a group, or being removed from one, ends the other members’ access to your maps straight away. Outside a group you share with them, nobody can see your marks at all.

Sharing a map by link is different and does not involve an account: those links carry only the marks you chose to include, encoded in the address itself, plus a display name if you are signed in. Anyone with such a link can see what it contains.

How we share it

We do not sell your personal information. We share it only with service providers that operate the app on our behalf: Supabase (authentication, database, hosting), Vercel (application hosting), our analytics provider, and Google (only for sign-in). These providers process data solely to provide their service to us.

Cookies

We use only the cookies necessary to keep you signed in. Our analytics do not use tracking cookies.

Your choices and rights

You can edit your display name, leave any group from its page, and delete your account at any time from the account menu. Deleting your account permanently removes your profile, your marked venues, your earned badges, and your group memberships. Depending on where you live, you may have additional rights (such as to access, correct, or delete your information, or to object to certain processing); contact us using the form at the bottom of this page to exercise them. Choose “My data” as the topic and we will treat it as a formal request.

Data retention

We keep your information until you delete your account, after which it is removed from our active systems.

Security

We use industry-standard measures to protect your information, including not storing passwords (sign-in is handled by Google). No system is perfectly secure, but we work to keep your data safe.

Children

Tallypin is not directed to children under 13, and we do not knowingly collect personal information from them. Sign-in requires a Google account, which Google requires users to be old enough to hold. If you believe a child under 13 has provided us information, contact us using the form at the bottom of this page and we will delete it.

Changes

We may update this policy. If we make material changes, we’ll update the effective date above and, where appropriate, provide additional notice.

Questions

Ask anything about this policy, your data, or the app. It goes to a queue that gets read rather than to a mailing list. A reply address is optional — leave it blank and the question is anonymous.

Want the short version of what we keep? It is on the front page.