Draft for attorney review · last updated November 1, 2026

Privacy policy

TapFrame is a work-in-progress service, operated by Ross McCalla (the operating company is to be confirmed), that turns labels on artworks, cards and collectibles into live pages. This page explains, in plain language, what we collect and why. Questions: privacy@tapframe.ai.

When you tap or scan a label

We record that the label was opened: the label's id, the work shown, the time, and your browser's user-agent string (for example "iPhone, Safari"). To estimate how many different phones visited, we keep a one-way, scrambled code made from your connection details; we don't store your IP address with your taps, and we can't use the code to identify you. We don't use advertising trackers or cookies on tap pages.

Cards and collectibles with their own chip

Some chips are attached to one specific card or collectible. When you tap one, we add the tap to that item's public history: the date, whether the chip was verified, and an approximate place (city, region and country) worked out from your connection by our host, Vercel. We never store your IP address, and the place is never more precise than a city. The item's owner can hide places from the public page. NFC chips are passive: nothing is recorded unless someone holds a phone to the chip.

When you give us your email

If you choose "Save this piece", the waitlist, or the partner form, we keep your email address, which form you used, and which work or label it was about. We use it to send you what you asked for (for example, the piece you saved) and, for the waitlist, occasional news. Every email has an unsubscribe link, and we honor it.

Who helps us run this

We use a small number of service providers, only to run the service: Vercel (hosting), Upstash (database), Resend (sending email), HubSpot (contact database, which receives the emails you submit), and Cloudflare (domain and email forwarding). We don't sell your information.

How long we keep it

Tap records are kept for the pilot and its follow-up reporting. Email contacts are kept until you unsubscribe or ask us to delete them.

Your choices

You can unsubscribe at any time from any email. To see, correct or delete what we hold about you, email privacy@tapframe.ai.

Children

TapFrame isn't directed to children under 13, and we don't knowingly collect their email addresses.

Changes

If we change this policy, we'll update this page and the date above.