Privacy Policy

Effective date: May 27, 2026

This Privacy Policy explains how tinytag Inc. ("tinytag," "we," "us," or "our"), a Delaware corporation, collects, uses, and shares information when you visit tinytag.com, our online store, and any related sites or services we operate (the "Site"). By using the Site, you agree to this Policy.

1. Information We Collect

We collect information in the following ways:

• Information you give us. When you place an order, we collect your name, email address, shipping address, the text you want printed on your labels (such as a child's name), and any photo you upload to personalize your labels. Payment card details are collected and processed directly by our payment processor (Stripe) and are not stored on our servers. If you sign up for launch or restock updates, we collect your email address. If you contact us by email or messaging service (including WhatsApp), we receive whatever information you choose to share.
• Uploaded photos. Photos you upload to design your labels are stored securely with our infrastructure provider and used solely to produce and ship your order. We do not sell them or use them for advertising. You may ask us to delete an uploaded photo at any time (see Section 7).
• Information collected automatically. When you visit the Site, we and our infrastructure providers automatically receive standard log data such as IP address, browser type and version, device and operating system information, referring page, pages viewed, and timestamps.
• Cookies and similar technologies. The Site uses a minimal set of cookies and similar technologies necessary to operate the Site, prevent abuse, and measure aggregate traffic. You can disable cookies in your browser settings; some parts of the Site may not function without them.

2. How We Use Information

We use the information we collect to:

• Process, fulfill, and ship your orders, including printing your personalized labels, arranging delivery, and sending you order confirmations, shipping notifications, and other transactional messages about your purchase;
• Provide customer support and respond to your inquiries, including messages you send through our contact form or on WhatsApp;
• If you opt in through our signup form, send you occasional updates about new releases, restocks, and offers. These are separate from order-related messages, and you can unsubscribe from them at any time using the link in our emails;
• Operate, maintain, and secure the Site, including preventing spam, abuse, and fraud (for example, using IP-based rate limiting on our forms);
• Measure and improve the Site and our products;
• Comply with applicable laws and enforce our Terms of Service.

We do not use your information for cross-context behavioral advertising, and we do not sell or share it as those terms are defined under U.S. state privacy laws.

3. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers. We use third-party vendors to host the Site, store data, process payments (Stripe), send email, fulfill and ship orders, and provide analytics and abuse prevention. These providers may process information on our behalf and are bound by confidentiality and data-protection obligations.
• Legal requirements. We may disclose information when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of tinytag, our users, or others.
• Corporate transactions. If tinytag is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

4. International Data Transfers

tinytag is based in the United States. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Site you consent to such transfers.

5. Data Retention

We keep email addresses and related signup records for as long as your subscription is active or as needed to provide the services you have requested. We retain other information for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. You may ask us to delete your information at any time (see Section 7).

6. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

• Unsubscribe. Every marketing email we send includes an unsubscribe link. You may also email us to stop receiving messages.
• Access, correction, deletion. Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you through our contact form (select the "Privacy" topic). We may need to verify your identity before acting on your request.
• California residents (CCPA / CPRA). If you are a California resident, you have specific rights regarding the personal information we collect, including the right to know, the right to delete, the right to correct, and the right to opt out of "sales" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, submit a request through our contact form.
• EU/UK residents (GDPR). If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights of access, rectification, erasure, restriction, portability, and objection regarding your personal data. Our legal bases for processing are your consent (which you may withdraw at any time) and our legitimate interests in operating the Site.

7A. Additional State Privacy Rights

If you are a resident of a U.S. state with a comprehensive privacy law in effect (including but not limited to California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, New Jersey, Delaware, New Hampshire, Maryland, Minnesota, Rhode Island, or Kentucky), you may have some or all of the following rights, depending on your state of residence:

• Right to know / access: request confirmation of whether we process your personal information and a copy of the personal information we hold about you.
• Right to correct: request that we correct inaccurate personal information.
• Right to delete: request that we delete personal information we have collected about you, subject to legal exceptions.
• Right to data portability: request a copy of your personal information in a portable, machine-readable format.
• Right to opt out of targeted advertising, sale, or profiling: tell us not to use your personal information for cross-context behavioral advertising, sale, or profiling that produces legal or similarly significant effects. We do not currently engage in any of these activities, but this right applies if we ever do.
• Right to non-discrimination: we will not deny you our services, charge you a different price, or provide a different level of service because you exercised any of these rights.
• Universal opt-out signals: where required by law (for example, Colorado and California), we honor the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing.
• Sensitive personal information: we do not knowingly collect sensitive personal information as defined under any state law.
• Appeals: if we deny a privacy rights request, you may appeal that decision by replying to our denial within sixty (60) days. We will respond within forty-five (45) days. If you remain dissatisfied, you may contact your state Attorney General.

To exercise any of these rights, submit a verifiable request through our contact form and select "Privacy" as the topic. We will respond within the timeframe required by your state's law (typically 45 days, with a possible extension).

An authorized agent may submit a request on your behalf with written permission that we can verify.

8. Children's Privacy (COPPA Notice)

tinytag's products are designed to be purchased by parents, guardians, and caregivers on behalf of their children. The Site is not directed to children under the age of 13, and tinytag complies with the United States Children's Online Privacy Protection Act ("COPPA"). When personalizing labels, a parent or guardian may choose to provide a child's first name and upload a child's photo. That information is supplied by the adult account holder, is used solely to produce and ship the order, is stored securely, and is never used for advertising or sold to third parties. You can ask us to delete an uploaded photo at any time.

• We do not knowingly collect personal information from children under 13.
• The signup form on this Site is intended for adults. We ask that children not submit their email addresses or any other personal information through the Site.
• If a child wishes to learn about tinytag, they should do so only with the involvement of a parent or guardian, who is solely responsible for any information provided to us.
• If you are a parent or guardian and you believe that your child under 13 has provided personal information to us, please contact us immediately via our contact form and select the "Privacy" topic. We will promptly delete the information from our records and terminate any associated subscription.

9. Third-Party Links

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Site and update the effective date above. Material changes may also be communicated to you by email. Your continued use of the Site after we post changes constitutes your acceptance of the updated Policy.

11. Contact Us

The fastest way to reach us is through our contact form, which routes messages to the right inbox based on the topic you select. For privacy-specific requests (access, correction, deletion, COPPA, GDPR, CCPA), choose the "Privacy" topic.

tinytag Inc. · 1007 N Orange St, 4th Floor #3738, Wilmington, DE 19801, USA