Privacy Policy

Leaf a Tip (leafatip.com) is operated by TYPICAL LLC, a Missouri limited liability company doing business as REQS TECH. Where this policy says “we” or “us,” it means TYPICAL LLC.

Account information. When you create an account we store your email address and the display name you choose. Your password is handled by Google Firebase Authentication and is never visible to us.

Creator profile information. If you set up a page to receive support, we store the page name you pick, plus whatever you choose to add: a display name, bio, profile picture URL, and links to your social accounts or other sites. All of this is public by design — see below.

Transaction records. When you buy credit or send support, we record the amount, the date, which account sent and received it, and any message you attached. We keep these records for accounting and dispute resolution.

Limited payment details. If you save a card for later, we store only what is needed to show it back to you — the card brand, last four digits, and expiration date — along with an identifier that lets us ask Stripe to charge it again. See the next section for what we deliberately do not hold.

We do not collect, transmit, or store full card numbers, CVC codes, or bank account details. Payment pages are hosted by Stripe, and card data goes from your browser directly to Stripe without passing through our servers.

Creators receiving money complete identity verification directly with Stripe. Government ID numbers, tax identification numbers, dates of birth, and bank account details are collected and held by Stripe under their own privacy policy. We receive only a yes/no signal about whether an account is cleared to accept payments and receive payouts.

A creator page is a public web page. Anyone with the link — and search engines — can see the page name, display name, bio, profile picture, and any links added to it. Do not put anything on a creator page that you are not comfortable being publicly visible and indexed.

When you send support to a creator, the display name on your account and any message you write are shown to that creator. Your email address is not shared with them.

• To operate your account and keep you signed in.
• To process purchases, track your credit balance, and deliver support to creators.
• To pay creators and let them see what they have received.
• To respond to support requests, investigate disputes and chargebacks, and detect fraud or abuse.
• To meet legal, tax, and accounting obligations.

We do not sell personal information. We do not share it with advertisers, and we do not run third-party advertising or analytics trackers on the site.

We rely on two service providers, and only these two receive your information:

• Stripe — payment processing, card storage, creator identity verification, and payouts. Stripe acts as an independent controller of the payment data it collects, under its own privacy policy.
• Google Firebase — authentication, database storage, and hosting. Data is stored on Google Cloud infrastructure in the United States.

We may also disclose information if required by law, valid legal process, or where necessary to protect our rights or the safety of others.

We use browser storage and cookies for one purpose: keeping you signed in. These are set by Firebase Authentication and Stripe. There are no advertising cookies, no tracking pixels, and no cross-site profiling. Blocking these will prevent you from staying logged in.

Account and profile information is kept while your account is open. Transaction records are retained after account closure where we are required to keep them for tax, accounting, and dispute purposes — generally seven years — because financial records cannot simply be erased on request.

You can edit or remove your display name, bio, profile picture, and links at any time from your dashboard. You can remove saved cards at any time. To request access to your information, correction of it, or deletion of your account, contact us using the details below.

Depending on where you live, you may have additional rights over your personal information, including the right to request a copy of it, ask that it be corrected or deleted, or object to certain processing. We honor these requests regardless of where you live, subject to the retention obligations described above.

Traffic is encrypted in transit. Account balances, transaction records, and payment identifiers are writable only by our server, never directly by a browser, and are protected by database rules that prevent one account from reading another’s private records. No system is perfectly secure, and we cannot guarantee absolute security.

Leaf a Tip is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a minor has created an account, contact us and we will remove it.

If we make material changes we will update the date at the top of this page and, where the change is significant, notify account holders by email. Continuing to use the site after a change means you accept the updated policy.

Questions, requests, or complaints about privacy: privacy@leafatip.com.

See also our Terms of Service.