Introduction
This Privacy Policy explains how AllergyPass collects, uses, and protects information when you use this website, its tools, or its resources. It applies to all pages under allergypass.me.
AllergyPass collects minimal data, uses it only for what's described here, and doesn't sell or share it with advertisers. The card builder stores all card data on your device. Nothing is sent to a server.
If you have questions after reading this, use the Contact page.
Information collected
What gets collected depends on how you use the site:
| What | When | Why |
|---|---|---|
| Email address | You sign up for updates or a newsletter | To send the content you asked for |
| Browser and device type, pages visited, time on site | You visit any page | Site analytics via Google Analytics and Microsoft Clarity to understand usage |
| Message content | You contact via email or a form | To respond to your inquiry |
| Payment details | You make a purchase | Handled entirely by third-party processors. Not stored here. |
Card builder data stays on your device. The AllergyPass card builder stores allergy card information in your browser's local storage only. It is never transmitted to or stored on any server. If you clear your browser data, it is gone. This is intentional.
How information is used
Information collected is used only for:
- Delivering digital products or resources you've purchased or requested
- Sending newsletters or updates you've opted into
- Responding to questions or support requests
- Understanding how the tools are used and improving the site experience
- Detecting and preventing spam or abuse
Your information is not used for advertising profiling, sold to third parties, or shared with anyone who doesn't need it to deliver a service you've specifically requested.
Cookies and analytics
AllergyPass uses two analytics tools: Google Analytics 4 (page views, session data, device type) and Microsoft Clarity (session replays and heatmaps to understand how people use the tools). Both use cookies and may share data with their respective parent companies under their own privacy policies.
Neither tool is used for advertising profiling or cross-site tracking for commercial purposes. The data is used to understand how the site is used and to improve it.
The only locally-stored data is the allergy card state you build in the card builder, written to your browser's localStorage and never sent to any server. See the Information collected section above.
If you prefer not to be tracked, browser extensions such as uBlock Origin or your browser's built-in privacy settings can block these scripts. The site works without them.
Email communications
If you sign up for updates, a newsletter, or any email resource from AllergyPass, you will only receive what you signed up for.
Every marketing email includes an unsubscribe link. You can opt out at any time, immediately, without needing to contact anyone. Transactional emails (such as purchase receipts) are not marketing and are sent only when necessary.
Email addresses are never shared or used for anything beyond what you provided them for.
Third-party services
AllergyPass uses a few third-party services to operate. Depending on how you use the site, they may include:
- Payment processors (such as Stripe or Lemon Squeezy): handle all purchase transactions. Payment card information is processed directly by them and is never seen or stored by AllergyPass.
- Email platforms (such as ConvertKit, Beehiiv, or Mailchimp): manage newsletter delivery and email signups.
- Content delivery and hosting: may log basic request data as part of standard server operation.
Each of these services operates under its own privacy policy. AllergyPass selects providers with strong data practices, but is not responsible for their independent actions. Links to their policies are available on their respective websites.
Data security
Technical and operational measures are taken to protect information that passes through this site. This includes using HTTPS, working with providers that maintain their own security standards, and keeping data collection minimal by design.
No system connected to the internet can guarantee perfect security. What can be controlled is controlled. If you have reason to believe your information has been compromised in connection with this site, please get in touch immediately.
Your rights
Depending on where you are, you may have rights over your personal data. You can:
- Unsubscribe from any email list at any time using the link in any email
- Request deletion of any personal data held about you
- Ask what data is held and receive a straightforward answer
- Correct any inaccurate information
To exercise any of these, use the Contact page. Requests are handled personally and promptly.
Children's privacy
AllergyPass is not directed at children under the age of 13, and does not knowingly collect personal information from children. If you believe a child has submitted personal information through this site, please contact us and it will be removed promptly.
Policy changes
This policy may be updated occasionally, to reflect changes in how the site operates, new services, or evolving legal requirements. When changes are made, the "Last Updated" date at the top of this page is revised.
Continuing to use the site after an update means you accept the revised policy. If the changes are significant, a notice will be placed prominently on the site.
Contact
Questions, data requests, or corrections can be sent through the Contact page.
For privacy questions or data requests, use the Contact page. We aim to respond within 48 hours.