Privacy Policy

Introduction

This Privacy Policy explains how AllergyPass collects, uses, and protects information when you use this website, its tools, or its resources. It applies to all pages under allergypass.me.

AllergyPass is operated by Abe Alatieh, an individual based in Bangkok, Thailand, who is responsible for the data described in this policy. Questions and data requests can be sent to support@allergypass.me.

AllergyPass collects minimal data, uses it only for what's described here, and doesn't sell or share it with advertisers. The card builder stores all card data on your device. Nothing is sent to a server.

If you have questions after reading this, use the Contact page.

Information collected

What gets collected depends on how you use the site:

What	When	Why
Email address	You sign up for updates or a newsletter	To send the content you asked for
Browser and device type, pages visited, time on site	You visit any page	Site analytics via Google Analytics and Microsoft Clarity to understand usage
Approximate country (not precise location)	You open the allergy card builder	To route Canadian visitors to the compatible full-page checkout. The country code expires from your browser after one hour.
Message content	You contact via email or a form	To respond to your inquiry
Payment details	You make a purchase	Handled entirely by third-party processors. Not stored here.
Your allergen list, destination, and optional traveler name	You ask us to email your card, not while you build it	To render the card, email it, and let that email's link reopen it. Free-card records are deleted after 90 days.
Order reference, confirmation email, country, and estimated digital-delivery date	The Google Customer Reviews choice appears after a completed purchase	To offer Google's optional purchase-experience survey. Google sends the survey only if you opt in.

How information is used

Information collected is used only for:

• Delivering digital products or resources you've purchased or requested
• Sending newsletters or updates you've opted into
• Responding to questions or support requests
• Understanding how the tools are used and improving the site experience
• Detecting and preventing spam or abuse

Your information is not used for advertising profiling, sold to third parties, or shared with anyone who doesn't need it to deliver a service you've specifically requested.

Cookies and analytics

AllergyPass uses two analytics tools: Google Analytics 4 (page views, session data, device type) and Microsoft Clarity (session replays and heatmaps to understand how people use the tools). Both use cookies and may share data with their respective parent companies under their own privacy policies.

Neither tool is used for advertising profiling or cross-site tracking for commercial purposes. The data is used to understand how the site is used and to improve it.

The card builder stores your card state in your browser's localStorage. When a paid checkout starts, it also stores a random one-time return nonce in sessionStorage; that nonce contains no email, order, or card details and is used only to prove that the returning browser started the checkout. Card state is transmitted only in the circumstances described in the Information collected section above.

Cloudflare derives an approximate two-letter country code from the card-builder request. AllergyPass keeps that code in a first-party, builder-only cookie for one hour so Canadian visitors use the full-page checkout instead of the embedded checkout. It is not used for analytics, advertising, or precise-location tracking.

If you prefer not to be tracked, browser extensions such as uBlock Origin or your browser's built-in privacy settings can block these scripts. The site works without them.

Email communications

If you sign up for updates, a newsletter, or any email resource from AllergyPass, you will only receive what you signed up for.

Every marketing email includes an unsubscribe link. You can opt out at any time, immediately, without needing to contact anyone. Transactional emails (such as purchase receipts) are not marketing and are sent only when necessary.

When you request the free Food Allergy Travel Checklist, we use Resend to send the download and schedule two practical follow-ups over the next five days. We retain the email address, source, and a random unsubscribe token for up to 35 days solely to prevent duplicate sequences and cancel those scheduled follow-ups if you opt out. Resend also stores your address on our mailing list, and the unsubscribe link in any of these emails removes you from it.

When you request a free card by email, your address is also added to our mailing list: that is the exchange for the free card. You get the same welcome email with the checklist, then allergy travel tips every two weeks. This is stated next to the send button, and one click on any email's unsubscribe link removes you. Buying a card is different: a checkbox before checkout ("Send me occasional allergy travel tips") starts ticked, and if you untick it your purchase never adds you to the list.

Email addresses are never sold. After a purchase, Google Customer Reviews is offered on the confirmation page. To display that choice, your order reference, confirmation email address, billing or delivery country, and estimated digital-delivery date are passed to Google. Google sends a purchase-experience survey only if you choose to opt in.

Third-party services

AllergyPass uses a few third-party services to operate. Depending on how you use the site, they may include:

• Payment processors (such as Stripe or Lemon Squeezy): handle all purchase transactions. Payment card information is processed directly by them and is never seen or stored by AllergyPass.
• Email platform (Resend): manages our mailing list, email signups, checklist delivery, opted-in follow-ups, and transactional messages such as your card and purchase emails.
• Google Customer Reviews: receives limited order details to display the post-purchase choice, and sends a survey only when the purchaser opts in.
• Content delivery and hosting: may log basic request data as part of standard server operation.

Each of these services operates under its own privacy policy. AllergyPass selects providers with strong data practices, but is not responsible for their independent actions. Links to their policies are available on their respective websites.

Data security

Technical and operational measures are taken to protect information that passes through this site. This includes using HTTPS, working with providers that maintain their own security standards, and keeping data collection minimal by design.

No system connected to the internet can guarantee perfect security. What can be controlled is controlled. If you have reason to believe your information has been compromised in connection with this site, please get in touch immediately.

Your rights

Depending on where you are, you may have rights over your personal data. You can:

• Unsubscribe from any email list at any time using the link in any email
• Request deletion of any personal data held about you
• Ask what data is held and receive a straightforward answer
• Correct any inaccurate information

To exercise any of these, use the Contact page. Requests are handled personally and promptly.

Children's privacy

AllergyPass is not directed at children under the age of 13, and does not knowingly collect personal information from children. If you believe a child has submitted personal information through this site, please contact us and it will be removed promptly.

Policy changes

This policy may be updated occasionally, to reflect changes in how the site operates, new services, or evolving legal requirements. When changes are made, the "Last Updated" date at the top of this page is revised.

Continuing to use the site after an update means you accept the revised policy. If the changes are significant, a notice will be placed prominently on the site.

Contact

Questions, data requests, or corrections can be sent through the Contact page.