Privacy Policy

Last updated September 28, 2026

TapPony sends data only where you tell it to. The developer never receives anything from the app. This page explains exactly what goes where.

What the app sends, and to whom

When you scan a tag, TapPony builds the request described by your profile and sends it to the server in that profile, which you chose. That request can carry the tag's identifiers, what's written on it, the time, and anything else your templates include. It goes straight from your phone to that server. There is no TapPony server in between, no TapPony account, and no copy sent anywhere else.

TapPony contains no analytics, no crash reporting, no advertising and no tracking of any kind. The only network traffic it makes is the requests your profiles describe.

What stays on your phone

• Profiles, rules and named tags, as files in the app's own storage.
• Secrets such as tokens and passwords, in the iPhone Keychain or behind a key in the Android Keystore. They are tied to that device, never synced, and masked everywhere in the app.
• History: the time, profile, tag identity and outcome of each scan, up to 1,000 scans and for the period you choose in Settings. Request and response bodies are kept only for profiles where you turn that on. You can clear history at any time.
• Scans waiting to send while you're offline, for up to 24 hours. Only the scan's values are stored, never your secrets.

A CSV export of your history is created only when you ask for one, and goes wherever you share it.

NFC, speech and permissions

The app reads tags only while it is open. A tag carrying one of your TapPony launch links can also open the app, through the phone's own tag reading. Spoken results use your phone's own speech engine. On Android, TapPony asks only for NFC and internet access.

Launch links

A tag written with a TapPony launch link holds a random token. Only the phone that wrote the tag knows what the token belongs to. If a phone without TapPony taps it, the link opens a page on this website, which doesn't log the token or the visit.

The website

This website sets no cookies, runs no analytics, and loads no third-party scripts, fonts or trackers. The web server logs each request's method, path, status, size and time, without your IP address, query strings or browser details, to keep the server running and diagnose problems. The Tor and I2P mirrors keep no access logs at all.

Contact

Questions about this policy can go to NorseHorse@norsehor.se.

Changes

If this policy changes, the updated version will be posted here with a new date at the top.