Privacy Policy

Effective Date: June 25, 2026 · Tip Your Cap is operated by Eco York LLC

This Privacy Policy explains how Eco York LLC ("Company," "we," "us," or "our") collects, uses, and shares information about you when you use the Tip Your Cap platform ("Service"). By using the Service, you agree to the practices described in this policy.

Questions or concerns? Contact us at [email protected].

1. Information We Collect

Information you provide directly:

Account information: display name, username, and password (if using username/password sign-in), or OAuth identity (Google, Facebook) including your name, email, and profile photo;
Cap collection data: cap details, notes, wear logs, photos you upload;
Community content: comments, shared caps, and photos you post;
Communications: messages or reports you send to us.

Information collected automatically:

Log data: IP address, browser type, pages visited, timestamps;
Cookies and similar technologies (see Section 4 below);
Device information: operating system, device type.

2. How We Use Your Information

We use the information we collect to:

Create and manage your account;
Operate and improve the Service, including the cap catalog, points system, and community features;
Respond to your support requests and enforce our Terms of Service;
Send you service-related notifications (account security, policy updates);
Detect and prevent fraud, abuse, and security incidents;
Comply with legal obligations.

We do not sell your personal information to third parties.

3. How We Share Your Information

We may share your information in the following circumstances:

Publicly visible content: Your display name, username, shared cap profiles, and comments are visible to other users and, for shared cap pages, to the general public.
Service providers: We use third-party providers (e.g., hosting, analytics, authentication) who access data only as necessary to perform services on our behalf and are bound by confidentiality obligations.
Legal requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Eco York LLC, our users, or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies

We use the following cookies and similar technologies:

Cookie	Purpose	Type
`token`	Authenticates your session (JWT)	Strictly necessary
`csrf-token`	Protects against cross-site request forgery attacks	Strictly necessary
Analytics (third-party)	Aggregate usage statistics to help us understand how the Service is used	Analytics / performance

Strictly necessary cookies cannot be disabled as the Service will not function without them. You can control analytics cookies through your browser settings, though this may limit some functionality.

5. Photos and Image Metadata

When you upload photographs to the Service, we process them with image-handling software that automatically strips embedded metadata, including GPS location data (EXIF), prior to storage. We do not store or use the geolocation data from your photos.

6. Data Retention

We retain your account information and content for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, unless we are required to retain it for legal or compliance purposes. Some information may remain in backup systems for a limited period.

7. Deleting Your Tip Your Cap Account

You may permanently delete your Tip Your Cap account and associated data at any time. Tip Your Cap is operated by Eco York LLC.

How to delete your account from inside the app:

Sign in at tipyourcap.app or in the Tip Your Cap Android app.
Open your Profile & Settings page.
Scroll to the bottom and tap Delete Account.
Confirm the deletion when prompted. The action is immediate and cannot be undone.

If you no longer have access to the app: email [email protected] from the email address associated with your account and request deletion. We will verify the request and complete it within 30 days.

What gets deleted:

Your account credentials (email, OAuth identity, password if applicable).
Your profile — display name, avatar, bio, and settings.
Your cap collection — every cap entry, photo, note, purchase detail, and wear log.
Your comments, mentions, crowns, and reactions on community content.
Your private rotations, notifications, and personalized data.

What may be retained:

Anonymized aggregate data used for catalog statistics (e.g., collector counts, total wears) — no longer linked to your identity.
Records we are legally required to retain (e.g., fraud-prevention or tax records), for the period required by law.
Backup copies for a limited period until backups are routinely overwritten.

Retention period: your data is removed from active systems immediately upon account deletion, and purged from all backups within 30 days.

8. Deleting Specific Data Without Closing Your Account

You can delete individual pieces of content from your Tip Your Cap account at any time without closing the account itself. Tip Your Cap is operated by Eco York LLC.

How to delete specific data inside the app:

Delete a cap from your collection: sign in, open the cap from your collection, tap the edit/menu icon, and choose Delete Cap. All wear logs, photos, notes, and rotation entries for that cap are removed.
Delete a photo: open the cap, tap the photo, and choose Remove photo. The image file is deleted from our servers and from the public gallery if it had been shared.
Delete a wear log entry: open the cap, view its wear history, and tap Remove on any entry.
Delete a comment: open the comment, tap the menu, and choose Delete.
Delete a crown or reaction: tap the crown or reaction again on the cap or photo to remove it.
Make your collection private: open Profile & Settings and toggle Public collection off — your caps remain in your account but no longer appear in public catalog pages or the photo wall.

Requesting deletion by email: if you cannot access the app or want help removing specific items, email [email protected] from the email address on your account. We will verify and complete the request within 30 days.

Retention period: deleted content is removed from active systems immediately and purged from backups within 30 days. Anonymized aggregate statistics (e.g., total wears across the platform) may persist but are no longer linked to your identity.

9. Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. These include JWT-based authentication, CSRF protection, rate limiting on uploads, and HTTPS encryption in transit. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe we may have collected information from a child under 13, please contact us at [email protected].

11. Your Privacy Controls

Depending on applicable law, you may have the following rights regarding your personal information:

Right	How to Exercise
Access your data	Email [email protected]
Correct inaccurate data	Update in your profile settings or email us
Delete your account and data	Email [email protected]
Object to processing	Email [email protected]

We will respond to verifiable requests within a reasonable timeframe.

12. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
Right to Delete: You can request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at [email protected].

13. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (e.g., Google or Facebook for authentication). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information to them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated effective date. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy. If the changes are material, we will make reasonable efforts to provide notice.

15. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at [email protected].