We do not surveil you.

The summary card tells you the whole story in plain language; the full policy follows below it. The binding detail for the app is the exact data-flow table on the trust page: if something is not in the Sends column, we do not send it.

TL;DR

The website

Cloudflare Web Analytics counts page views. It is cookieless, sets nothing on your device, and cannot follow you to another site. When you download the app we add one to a counter: the date, the release version, and which button. Nothing about you. A few key clicks are counted the same way: a number goes up, nothing about you is stored. Nothing else: no tracking pixels, no ad tech, no tracking cookies. Fonts are self-hosted. The only data the site collects from you is the email you type into the waitlist form, if you choose to.

The app

The app sends a normalized agent-activity signal, an ad-slot ID, a coarse targeting bucket computed on your machine, and impression and click events. It never sends your code, file paths, repository names, prompts, agent output, or any auth token. The complete table is on the trust page.

Signing in

If you sign in to your dashboard, we store your email and set one strictly functional session cookie that keeps you signed in. It is never used for tracking, it expires, and signing out deletes it.

The waitlist

If you join the waitlist, we store your email address and the date, and nothing else. We email you once, when it opens. Ask us and we remove it.

Claiming earnings

If you claim earnings, we store the email you provide linked to your install ID, used only for payout processing and payout notifications. Until you claim, the install ID is never connected to an identity.

The full policy

Last updated: August 10, 2026

1. Introduction

This Privacy Policy describes how Achieve Total Marketing LLC DBA Tipbar (“Tipbar”, the “Company”, “we”, “us”) collects, uses, and protects personal data across the tipbar.ai website, the waitlist, the Tipbar macOS application (the “App”), and the advertising marketplace (together, the “Service”). The Service is built to collect as little as possible; this policy lists everything it does collect.

2. Definitions

“Personal Data” means information that identifies or can reasonably be linked to you. “Usage Data” means data generated by using the Service, such as the App's activity signal and impression and click events. Definitions apply in singular or plural.

3. What the website collects

The website uses Cloudflare Web Analytics to count page views. It is cookieless, sets nothing on your device, records no personal data, and cannot follow you across sites; Cloudflare processes it for us as our infrastructure provider. When you download the App, the site increments an aggregate download counter recording only the date, the release version, and which download link was used. It records no IP address, no device information, and no identifier of any kind, so a download can never be linked to you. A small number of interactions (such as clicking a download button) are counted the same way: one aggregate number per day, event, and page, with nothing recorded about you and no way to link an event to a person. We also count which kind of site sent you here, so we can tell whether a post or a link is working. That is one aggregate number per day and channel, where the channel is a single word from a short fixed list such as “reddit”, “google”, or “direct”. The referring web address itself is never stored, and neither is anything else about you. To keep that one word consistent as you move between pages, your browser holds it in session storage: it is not a cookie, it is never sent to anyone else, it cannot follow you to another site, and it is erased when you close the tab. The site also counts visits from known AI crawlers and search bots, as one aggregate number per day, bot name, and page, so we can tell whether AI answer engines are reading the site. Those counts describe software fetching pages, not people: nothing about a visitor is recorded, a browser never matches the bot list, and a request that does not name a known bot records nothing at all. Beyond that the site runs no analytics, no tracking pixels, no ad tech, and sets no tracking cookies. Fonts are self-hosted. If you join the waitlist, or ask us to email you the download link because you are not on a Mac, we store the email address you enter, the date, which of those two forms you used, and the date we last sent you a download link, nothing else; that last date exists only to stop the same address being mailed repeatedly. An address given for the download link is used to send you that link and nothing else. If you request an advertiser slot, we store the business contact details you submit in the form. If you claim earnings, we store the email address you provide linked to your install ID; we use that pairing only to process payouts and send payout notifications, and the install ID remains a random identifier not connected to your name, machine, or code. If you sign in to your dashboard, we store your email address and set a single strictly functional session cookie that keeps you signed in; that cookie is never used for tracking, sessions expire, and signing out deletes them. Our infrastructure provider (Cloudflare) processes network requests to serve the site, as any host does.

4. What the App collects

The App sends four things: a normalized agent-activity signal (whether an agent is working, and in which coarse state), an ad-slot ID (which sponsor slot rendered), a coarse targeting bucket computed entirely on your machine, and impression and click events (that a labeled sponsor line was shown or clicked, with deduplication metadata). The App never reads or transmits your code, file paths, repository names, prompts, agent output, or any authentication token or credential, for any vendor. Operating the endpoints that receive these events, like running any online service, involves processing standard network metadata such as your IP address; we use it only to deliver responses and to validate events and prevent fraud and abuse, never for advertising or to profile you. The complete, binding sends/never table is published on the trust page. When payouts launch, paying you will additionally require the information a payment processor legally needs (such as a payout account identifier and tax information); that data is collected by the payment processor directly (we do not store your bank details or tax identity) and it is never used for ad targeting.

5. How we use data

We use the data above to operate the Service: serving and counting sponsor placements, validating impressions and clicks and preventing fraud, calculating and publishing aggregate payouts in the public ledger, sending the single waitlist email when the App opens, responding to advertiser requests, and meeting legal obligations. We do not use your data for third-party marketing, we do not build advertising profiles of individuals, and we do not sell personal data.

6. Sharing

We share data only with service providers strictly needed to run the Service: our infrastructure provider (Cloudflare, which hosts the site, waitlist database, and event endpoints) and a payment processor for payouts and advertiser billing, and where required by law. No personal data is shared with third parties or affiliates for marketing or promotional purposes. Aggregate, non-identifying figures (such as total payouts) are published in the ledger.

7. Retention

We retain personal data only as long as necessary for the purposes above: waitlist emails until the launch notification is sent or you ask us to remove yours; impression, click, and activity events for the period needed for fraud validation, the payout holdback, and the accuracy of the public ledger; advertiser records for the life of the account plus any legally required period.

8. Security

We protect data with commercially reasonable measures, and the App's design keeps the most sensitive data (your code, prompts, and credentials) from ever leaving your machine in the first place. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International transfers

The Service is operated from the United States and data is processed on infrastructure that may be located in multiple countries. By using the Service you consent to this processing.

10. Your rights

Email us and we will tell you what we hold about you, correct it, or delete it (including removing your waitlist email), subject to records we must keep by law (such as payout and billing records). We honor these requests regardless of where you live.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Third-party links

Sponsor lines and site links may lead to third-party websites. We screen advertiser links against our published policy before they can serve, but we do not control third parties' content or privacy practices, so review their policies.

13. Changes to this policy

Updates are posted on this page with a revised “Last updated” date. If a change would expand what the App sends, it will also be reflected in the trust page's sends/never table, and that table never lags this policy.

14. Contact

Privacy questions or data requests: hello@tipbar.ai.