Privacy Policy for SurprizeTap.com

1. Who We Are

Our website address is: https://surprizetap.com
Contact Email: [email protected]
WhatsApp: +86 159 7147 0520

2. Data We Collect & Why

Comments

When visitors leave comments, we collect:
- Data shown in the comments form
- Visitor’s IP address
- Browser user agent string (for spam detection)
An anonymized hash of your email may be sent to Gravatar (see Gravatar’s Privacy Policy). Approved comments display your profile picture publicly.

Media

Avoid uploading images with embedded location data (EXIF GPS). Visitors may extract location data from images.

Contact Forms

Submitted data is stored for customer service purposes but not used for marketing unless explicitly consented.

Cookies

Comment cookies: Save name/email/website for 1 year (convenience).
Login cookies:
- Temporary cookie checks browser cookie acceptance (deleted when you close browser).
- Login cookies last 2 days; screen options cookies last 1 year.
- “Remember Me” extends login to 2 weeks.
Editing cookies: Saves post ID of edited articles (expires in 1 day).

Embedded Content

Articles may include embedded content (e.g., videos, social media). These third-party sites may track interactions if you’re logged into their platforms.

Analytics

We use [Google Analytics/Facebook Pixel/etc.] to analyze traffic. You may opt out via browser settings.

3. Data Sharing

Spam detection: Comments may be processed by automated services (e.g., Akismet).
Password resets: Include your IP address in reset emails.
Third parties: We do not sell data but may share with:
- Payment processors (for transactions)
- Hosting providers (necessary for operations)

4. Data Retention

Comments and metadata are retained indefinitely for auto-approval of follow-ups.
Registered users: Personal data in profiles is stored until deleted by user/admin.

5. Your Rights

Request an exported file of your personal data.
Request erasure of personal data (excludes data required for legal/security purposes).

6. Data Protection

SSL encryption, regular security audits, and restricted data access.
Breach procedures: Immediate investigation + notification to affected users within 72 hours.

7. Third-Party Services

We may receive data from:
- Payment gateways (e.g., PayPal, Stripe)
- Social platforms (if you interact with embedded content)

8. Updates

Policy changes will be posted here with updated “Last Revised” dates.

Contact Us:
For GDPR/CCPA requests or questions, reach us at [email protected] or via WhatsApp (+86 159 7147 0520).

For full compliance, consult a legal professional—this template covers general requirements but may need adjustments based on your jurisdiction (e.g., GDPR, CCPA).