AllergyPassIntroduction
This Privacy Policy explains how AllergyPass collects, uses, and protects information when you use this website, its tools, or its resources. It applies to all pages under allergypass.me.
AllergyPass is operated by Abe Alatieh, an individual based in Bangkok, Thailand, who is responsible for the data described in this policy. Questions and data requests can be sent to support@allergypass.me.
AllergyPass collects minimal data, uses it only for what's described here, and doesn't sell or share it with advertisers. Your card's contents stay on your device until you send, buy, or share it.
If you have questions after reading this, use the Contact page.
Information collected
What gets collected depends on how you use the site:
| What | When | Why |
|---|---|---|
| Email address | You sign up for updates or a newsletter | To send the content you asked for |
| Browser and device type, pages visited, time on site | You visit any page | Site analytics via Google Analytics and Microsoft Clarity to understand usage |
| Approximate country (not precise location) | You open the allergy card builder | To route Canadian visitors to the compatible full-page checkout. The country code expires from your browser after one hour. |
| Message content | You contact via email or a form | To respond to your inquiry |
| Payment details | You make a purchase | Handled entirely by third-party processors. Not stored here. |
| Your allergen list, destination, and optional traveler name | You ask us to email your card, not while you build it | To render the card, email it, and let that email's link reopen it. Free-card records are deleted after 90 days. |
| Order reference, confirmation email, country, and estimated digital-delivery date | The Google Customer Reviews choice appears after a completed purchase | To offer Google's optional purchase-experience survey. Google sends the survey only if you opt in. |
Your card's contents stay on your device until you send, buy, or share it. While you are building a card, your allergens, warnings, and destination live in your browser's local storage, and if you clear your browser data they are gone. Site analytics (Google Analytics and Microsoft Clarity, where they run) record how the builder is used, such as the destination you pick and the general type of restriction you add (allergy, sensitivity, or dietary). They are not sent which allergens, conditions, or presets you choose, or whether you marked an allergy as severe, and card content is masked in Clarity session recordings. Allergens in a link that opens the builder are removed from the address bar before analytics loads.
Starting a paid checkout sends the card you are buying (destination, allergens, and warning choices) to our payment provider as order details, so the card can be delivered after payment. Asking us to email the card is the other moment that changes. To render the image and send it, your allergen list, email address, destination, and optional traveler name are transmitted to our server. Free-card records are kept for 90 days so the link in that email can reopen your card where you left off, then deleted automatically. Paid orders are kept longer because they carry your purchase and have to survive an access recovery.
How information is used
Information collected is used only for:
- Delivering digital products or resources you've purchased or requested
- Sending newsletters or updates you've opted into
- Responding to questions or support requests
- Understanding how the tools are used and improving the site experience
- Detecting and preventing spam or abuse
Your information is not used for advertising profiling, sold to third parties, or shared with anyone who doesn't need it to deliver a service you've specifically requested.
Cookies and analytics
AllergyPass uses two analytics tools: Google Analytics 4 (page views, session data, device type) and Microsoft Clarity (session replays and heatmaps to understand how people use the tools). Both use cookies and may share data with their respective parent companies under their own privacy policies.
Neither tool is used for advertising profiling or cross-site tracking for commercial purposes. The data is used to understand how the site is used and to improve it.
The card builder stores your card state in your browser's localStorage. When a paid checkout starts, it also stores a random one-time return nonce in sessionStorage; that nonce contains no email, order, or card details and is used only to prove that the returning browser started the checkout. Card state is transmitted only in the circumstances described in the Information collected section above.
Cloudflare derives an approximate two-letter country code from the card-builder request. AllergyPass keeps that code in a first-party, builder-only cookie for one hour so Canadian visitors use the full-page checkout instead of the embedded checkout. It is not used for analytics, advertising, or precise-location tracking.
If you prefer not to be tracked, browser extensions such as uBlock Origin or your browser's built-in privacy settings can block these scripts. The site works without them.
Email communications
If you sign up for updates, a newsletter, or any email resource from AllergyPass, you will only receive what you signed up for.
Every marketing email includes an unsubscribe link. You can opt out at any time, immediately, without needing to contact anyone. Transactional emails (such as purchase receipts) are not marketing and are sent only when necessary.
When you request the free Food Allergy Travel Checklist, we use Resend to send the download and schedule two practical follow-ups over the next five days. We retain the email address, source, and a random unsubscribe token for up to 35 days solely to prevent duplicate sequences and cancel those scheduled follow-ups if you opt out. Resend also stores your address on our mailing list, and the unsubscribe link in any of these emails removes you from it.
When you request a free card by email, your address is also added to our mailing list: that is the exchange for the free card. You get the same welcome email with the checklist, then allergy travel tips every two weeks. This is stated next to the send button, and one click on any email's unsubscribe link removes you. Buying a card is different: a checkbox before checkout ("Send me occasional allergy travel tips") starts ticked, and if you untick it your purchase never adds you to the list.
Email addresses are never sold. After a purchase, Google Customer Reviews is offered on the confirmation page. To display that choice, your order reference, confirmation email address, billing or delivery country, and estimated digital-delivery date are passed to Google. Google sends a purchase-experience survey only if you choose to opt in.
Third-party services
AllergyPass uses a few third-party services to operate. Depending on how you use the site, they may include:
- Payment processors (such as Stripe or Lemon Squeezy): handle all purchase transactions. Payment card information is processed directly by them and is never seen or stored by AllergyPass.
- Email platform (Resend): manages our mailing list, email signups, checklist delivery, opted-in follow-ups, and transactional messages such as your card and purchase emails.
- Google Customer Reviews: receives limited order details to display the post-purchase choice, and sends a survey only when the purchaser opts in.
- Content delivery and hosting: may log basic request data as part of standard server operation.
Each of these services operates under its own privacy policy. AllergyPass selects providers with strong data practices, but is not responsible for their independent actions. Links to their policies are available on their respective websites.
Data security
Technical and operational measures are taken to protect information that passes through this site. This includes using HTTPS, working with providers that maintain their own security standards, and keeping data collection minimal by design.
No system connected to the internet can guarantee perfect security. What can be controlled is controlled. If you have reason to believe your information has been compromised in connection with this site, please get in touch immediately.
Your rights
Depending on where you are, you may have rights over your personal data. You can:
- Unsubscribe from any email list at any time using the link in any email
- Request deletion of any personal data held about you
- Ask what data is held and receive a straightforward answer
- Correct any inaccurate information
To exercise any of these, use the Contact page. Requests are handled personally and promptly.
Children's privacy
AllergyPass is not directed at children under the age of 13, and does not knowingly collect personal information from children. If you believe a child has submitted personal information through this site, please contact us and it will be removed promptly.
Policy changes
This policy may be updated occasionally, to reflect changes in how the site operates, new services, or evolving legal requirements. When changes are made, the "Last Updated" date at the top of this page is revised.
Continuing to use the site after an update means you accept the revised policy. If the changes are significant, a notice will be placed prominently on the site.
Contact
Questions, data requests, or corrections can be sent through the Contact page.
For privacy questions or data requests, use the Contact page. We aim to respond within 1–2 business days.