Privacy Policy

YayTip ("we", "us", "our") operates the yaytip.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using YayTip, you consent to the practices described herein.

2.1 Information You Provide

• Account information: When you sign up via OAuth providers (GitHub, Google, X, Mixin), email, or EVM wallet, we receive your public profile information (display name, avatar, email address, and provider-specific identifiers)
• Profile information: Username, display name, bio, and avatar that you set in your dashboard
• Wallet addresses: Cryptocurrency wallet addresses you configure for receiving settlement payments
• Tip page settings: Preset amounts, greeting messages, and other tip page customizations

2.2 Information Collected Automatically

• Transaction data: Tip amounts, payment status, settlement details, and associated identity information
• Usage data: Pages visited, features used, and interactions with the Service
• Device information: Browser type, operating system, and IP address

2.3 Information from Third Parties

• OAuth providers: Public profile data from GitHub, Google, X, or Mixin when you authenticate
• MixPay: Payment confirmation data, order status, and settlement information

We use collected information to:

• Provide, operate, and maintain the Service
• Process tips and settle payments to your configured wallet
• Create and manage your account and linked identities
• Send transactional notifications (tip received, settlement completed)
• Match tips to recipients via identity resolution (email, GitHub, X, etc.)
• Detect and prevent fraud, abuse, and violations of our Terms
• Improve and develop new features for the Service

YayTip's core feature allows tipping by identity (email, GitHub username, X handle, etc.). When someone sends a tip to an identity:

• An identity record is created if one does not already exist
• The identity is associated with the tip for claiming purposes
• Tip notifications may be sent to the associated email address
• No account is created until the recipient actively claims the tip by authenticating

If you receive a tip notification and do not wish to use YayTip, you may contact us to have your identity record removed.

We do not sell your personal information. We may share information with:

• Payment processors: MixPay receives transaction data necessary to process tips and settlements
• Blockchain networks: Wallet addresses and transaction amounts are recorded on public blockchains during settlement
• Service providers: Hosting (Vercel), database (Neon), storage (Cloudflare R2), and email (Lark SMTP) providers that help us operate the Service
• Legal requirements: When required by law, regulation, legal process, or governmental request

Certain information is publicly visible by design: your tip page (username, display name, avatar, greeting), and tip history on public blockchains. Wallet addresses used for settlement are recorded on-chain and publicly viewable. Do not use the Service if you do not consent to this public visibility.

Your data is stored in PostgreSQL databases hosted by Neon. Avatar images are stored on Cloudflare R2. We implement reasonable security measures to protect your information, including:

• HTTPS encryption for all data in transit
• Secure, httpOnly session cookies
• Database-backed sessions with 30-day expiry
• No storage of OAuth tokens beyond what is needed for authentication

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

YayTip uses cookies for:

• Session management: An httpOnly session cookie to maintain your authenticated state
• OAuth flow: Temporary cookies to manage the authentication process

We do not use third-party tracking cookies or advertising cookies.

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information via your dashboard
• Deletion: Request deletion of your account and associated data. Note that blockchain transaction records cannot be deleted
• Withdrawal of consent: Stop using the Service at any time. Unlink identities via your dashboard
• Data portability: Request your data in a machine-readable format

To exercise these rights, contact us at hello@yaytip.com.

YayTip is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using YayTip, you consent to the transfer of your information to these countries.

We retain your account information for as long as your account is active. Transaction records are retained for legal and accounting purposes. If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of YayTip after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us at hello@yaytip.com.