Privacy Policy

Last Updated: October 12, 2026

This Privacy Policy explains how Splatboard LLC (“Splatboard,” “we,” or “us”) collects, uses, and shares information about you when you use our websites (including taplist.io, splatboard.com, and mymug.club), our TV, mobile, and native applications (including the Taplist.io Display app), and our hosted membership pages and member portal, through which you can join and manage memberships, clubs, and other subscription programs offered by our customers (together, the “Services”).

Contents: 1. Our two roles · 2. Information we collect · 3. How we use information · 4. How we share information · 5. Cookies and advertising · 6. How long we keep information · 7. Where we process information · 8. Security · 9. Your choices · 10. Your privacy rights · 11. Children · 12. Changes · 13. Contact us

1. Our two roles

We handle personal information in two capacities, and it matters which one applies to you:

• As a provider. When you visit our websites, create a Taplist.io account, or buy something from us, we decide how the information is used and this Privacy Policy describes what we do. This includes payments for memberships you buy from a Business, because we are the merchant of record for those charges and keep the payment and billing records ourselves.
• As a processor for our customers. The bars, breweries, and other businesses that use Taplist.io (each a “Business”) can keep records about their own customers and members — for example, the member list of a membership, club, or other subscription program they offer (each a “Program,” such as a mug club). We call this “Customer Data.” We process it on the Business’s behalf and under its instructions; the Business is responsible for it, including for having any required consent to collect it. A member-focused summary of these practices, our Member Privacy Notice, is shown on each hosted membership page.

We do not sell personal information in either role, and we never use one Business’s Customer Data for the benefit of another Business or for advertising.

2. Information we collect

Information you provide

• Account information: your name, email address, and business details when you create a Taplist.io account, and any profile information you publish, such as your venue’s name, location, and description. Published profile and menu information is public.
• Transaction and billing information: when you buy a Taplist.io plan or a membership in a Business’s Program, your name, contact information, and payment details. Payment card details are collected and processed by our payment processor, Stripe; we do not store your full card number. When you provide payment or payout information, Stripe receives it and processes it in accordance with Stripe’s Privacy Policy.
• Membership information: when you join a Program, the information you provide when enrolling — your name, email address, phone number, and any additional fields the Business asks for — along with your membership details (program, tier, and billing cycle).
• Communications: a copy of your messages when you contact our support team, respond to a survey, or sign up for a newsletter.

Information Businesses provide about you

A Business may add information about you to its Customer Data — for example, by entering or importing its existing member list — even if you have never interacted with us directly. This can include your name, contact information, membership details, and custom fields the Business chooses to track. The Business controls this information; we process it on the Business’s behalf as described in Section 1.

Information we collect automatically

• Log and device information: browser type, IP address, device identifiers, language, referring site, date and time of access, and operating system, collected when you use the Services — for example, when you change your account or sign in to the member portal.
• Usage information: the actions account users take in the Taplist.io dashboard (who did what, and when), page views, features enabled, and interactions with our support team, which we use to provide and improve the Services.
• Membership activity: if you are a Member, activity the Business records on its behalf — such as check-ins, reward and perk redemptions, and membership changes — and the delivery status of messages sent to you through the Services (for example, whether an email was delivered, bounced, or opened).
• Approximate location: derived from your IP address, used for aggregate statistics about where the Services are used.
• Device storage: our applications access information stored on your TV or mobile device only with your permission through the device’s operating system — for example, photos you choose to upload.
• Cookies and similar technologies: described in Section 5.

Information from other sources

If you create or sign in to your Taplist.io account through another service (such as Google), we receive the information that service provides through its authorization process, such as your name, email address, and basic profile information.

Summary by category

In summary, we collect the following categories of personal information, from you, from your device, and (for Members) from the Business you joined:

• Identifiers (name, email address, phone number, IP address, device identifiers) — used to provide the Services, communicate with you, and secure the Services; disclosed to our service providers and, for Members, to the Business you joined; not sold. Cookie identifiers on our public websites are used for advertising as described in Section 5.
• Commercial information (plans, memberships, purchases, and refunds) — used to provide the Services and process payments; disclosed to our payment processor and, for Members, to the Business; not sold.
• Internet activity (log, usage, and cookie data) — used to provide, secure, and improve the Services and measure our marketing; disclosed to our analytics and advertising providers; used for advertising on our public websites only.
• Approximate geolocation (from IP address) — used for aggregate statistics; disclosed to our analytics providers; not sold.
• Payment information — collected by Stripe on our behalf; we retain only a record of the charge; not sold.

Third parties such as Google may collect information about your activity on our public websites over time and across other sites through the advertising cookies described in Section 5.

3. How we use information

We use information about you to:

• Provide the Services — set up and maintain your account, host your menus and pages, and charge you for Paid Services;
• Provide memberships — enroll you in a Business’s Program, process subscription payments and refunds, maintain your membership records, and send transactional messages about your membership (receipts, renewal reminders, and one-time sign-in codes);
• Improve the Services — understand how they are used, fix problems, and develop new features;
• Protect the Services — monitor for and prevent security problems, fraud, spam, and abuse, which may result in us declining a transaction or use of the Services;
• Communicate with you — respond to support requests and, unless you opt out, tell you about offers and updates from Splatboard; and
• Market the Services — measure the effectiveness of our marketing and show ads for our Services to people who have visited our websites.

Customer Data. We use Customer Data only to provide the Services to the Business it belongs to — storing its member list, delivering the messages it sends, recording membership activity, and producing reports for that Business — and as needed to secure the Services, comply with the law, or follow the Business’s instructions. We do not use Customer Data for our own marketing, we do not sell it, and we do not combine it across Businesses.

4. How we share information

We do not sell personal information. Our public websites use advertising cookies to show ads for our own Services on other sites; Section 5 explains how to opt out. We never use Customer Data or member information for advertising. Otherwise, we share information only as follows:

• Service providers who process information on our behalf under written privacy commitments: payment processing (Stripe), email delivery (Postmark), text message delivery (Twilio), cloud hosting and infrastructure, fraud prevention, customer support tools, analytics, and advertising measurement. Our employees and contractors who need the information to do their jobs are bound by the same commitments.
• Businesses: if you join a Business’s Program, sign up for its customer list, or otherwise interact with it through the Services, we share the information you provide and your related activity (such as membership status, check-ins, and reward redemptions) with that Business. The Business’s use of your information is governed by its own practices and any privacy notice it provides, not by this Privacy Policy.
• Legal requirements: in response to a subpoena, court order, or other governmental request, or when we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of Splatboard, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, in which case this Privacy Policy continues to apply to your information.
• With your consent or at your direction, and as aggregated or de-identified information that cannot reasonably identify you.

Information you choose to publish — your public menus, location pages, and Program pages — is public and may be indexed by search engines or used by others.

5. Cookies and advertising

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Services are used, measure the effectiveness of our marketing, and show ads for our Services on other sites (remarketing). Advertising cookies are used on our public websites only — not in the Taplist.io dashboard, the member portal, or hosted membership pages.

You can opt out of advertising cookies at any time: set your browser to remove or reject cookies (some features may then not work properly), turn off ad personalization in Google’s Ads Settings, use the Digital Advertising Alliance opt-out tool at optout.aboutads.info, or contact us. We do not currently respond to browser-based signals such as Global Privacy Control or “Do Not Track”; please use the opt-out tools above instead.

6. How long we keep information

• Account information is kept while your account is active and deleted or de-identified within 90 days after you close it, except as noted below.
• Customer Data is kept on behalf of the Business that controls it until the Business deletes it or its account ends; after that we delete it following a reasonable export window, except for backups deleted in the ordinary course.
• Payment, billing, and transaction records — including records of membership purchases we process as merchant of record — are kept for as long as required for tax, accounting, fraud prevention, and other legal purposes, generally seven years.
• Message and delivery logs are kept for a limited period to provide message history, handle deliverability issues, and demonstrate compliance with messaging laws.
• Other information is discarded when we no longer need it for the purposes described above and are not legally required to keep it, including where it is reasonably needed to comply with or demonstrate compliance with legal obligations or to resolve disputes.

7. Where we process information

We are based in the United States and process information there. If you use the Services from outside the United States, your information will be transferred to and processed in the United States, which may not provide the same data protections as your home jurisdiction.

8. Security

No online service is completely secure, but we take reasonable administrative, technical, and physical measures to protect information against unauthorized access, use, alteration, or destruction, including monitoring the Services for potential vulnerabilities and attacks.

9. Your choices

• Marketing communications: you may opt out of promotional messages from us, or from a Business messaging you through the Services, by following the instructions in the message — for example, the unsubscribe link in an email or replying STOP to a text — or by contacting us. We may still send you messages about your account or membership and legal notices.
• Your membership: if you are a Member, sign in to the member portal to review and update your contact information, manage your memberships, and review or revoke your active sign-in sessions.
• Cookies and advertising: see Section 5.
• Device permissions: your device’s operating system lets you withdraw our applications’ access to stored information.
• Close your account: you can close your Taplist.io account at any time; Section 6 describes what we keep afterward.

10. Your privacy rights

Depending on where you live, you may have the right to know what personal information we have collected about you and to access it, to correct inaccurate information, to delete your information, to receive a portable copy, and to opt out of the use of your information for targeted advertising. We do not sell personal information; to opt out of advertising cookies, see Section 5.

To exercise any of these rights, contact us at https://taplist.io/support or by email at support@taplist.io. We will verify your request using the information associated with your account or membership and may ask for more information to do so. Where permitted by law, an authorized agent may submit a request on your behalf. We will not discriminate against you for exercising your rights. If we decline a request, you may appeal by replying to our decision, and, depending on where you live, you may also complain to your local data protection or consumer protection authority.

If your request concerns information in a Business’s Customer Data — for example, your record in a Program’s member list — the Business controls that information. You can contact the Business directly, or contact us and we will route your request and help resolve it; requests handled either way get to the same place.

11. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Program memberships and the member portal are limited to adults, and Programs with alcohol-related benefits to adults of legal drinking age. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Changes

We may change this Privacy Policy from time to time. If we do, we will revise the Last Updated date above and, for material changes, provide additional notice — such as a notice on our website or in the dashboard, or an email — before the change takes effect. Your continued use of the Services after a change means the updated policy applies to your information.

13. Contact us

Questions about this Privacy Policy or requests concerning your information can be sent to https://taplist.io/support or support@taplist.io. This Privacy Policy is provided by Splatboard LLC.

Attribution

Portions of this Privacy Policy are adapted from the legal documents of Automattic (WordPress.com), used under a Creative Commons Attribution-ShareAlike 4.0 International license. This Privacy Policy is likewise made available under the same license.