Privacy policy

Effective October 23, 2026

lasttap helps home decor brands on Shopify get more sales from the ad traffic they already pay for. This policy explains what we collect on lasttap.co and while working with clients, why we collect it, and what you can do about it.

What we collect

When you request a free teardown

Your store URL, your answers to the form's questions (monthly ad spend, typical order value, what's going on, and when you want it fixed), your first name, your email, and your phone number if you add it. We also record the page you sent the form from, any campaign tags in the link you followed (like utm_source), and the numbers you entered in the calculator.

When you pay or book a call

Payments go through Stripe. We never see or store your full card number. Stripe shares your name, email, billing details and what you bought with us. Calls are booked through Cal.com, which shares your name, email and the time you pick.

When you hire us

For an audit or a fix, you approve our collaborator request in your Shopify store and add us as a partner in your Meta business account. For an audit we ask only for reporting, analytics and product access in Shopify, not your orders or customer records, and, in Meta, view access to your ad results plus access to your pixel (dataset) data, which shows what visitors do after they click. Through that access we see data such as visits, conversion rates, sales totals, products and ad results. For a Sprint or fix, we also ask for theme access so we can build on a copy of your theme. Reports can occasionally include customer details; we work with totals and trends, not individual customers. We don't copy your customer lists, and we never contact your customers. You can remove our access in Shopify and Meta at any time.

When you email us

Your messages and anything you attach.

Cookies and the Meta pixel

lasttap.co uses the Meta pixel, a small piece of code from Meta. It sets cookies (_fbp, and _fbc when you arrive from a Meta ad) and tells Meta when you view the page, open the teardown form, use the calculator, send the form, or click to book or pay. After you pay, our confirmation page also tells Meta what you bought and the amount. Meta uses this to show us how our ads perform, and may also use it under its own privacy policy. We save the cookie values and an event ID with your form so we can match ad results to requests. We don't send your name, email or phone number to Meta.

To limit this, block third-party cookies in your browser or change your ad settings in your Facebook or Instagram account. We don't use other advertising or analytics cookies. After you pay, our confirmation page saves a small note in your browser with your checkout ID, so the same purchase isn't counted twice. Our typefaces load from Google Fonts, so Google receives your IP address when the page loads.

How we use it

• To record and send your teardown, and to reply to you
• To suggest the offer that fits your store
• To deliver the work you hire us for and report what changed, including the onboarding answers you send after you pay
• To bill you and keep tax and accounting records
• To measure and improve our ads and this website
• To keep the site secure and filter out spam

We only email you about your teardown or your project. Tell us to stop and we will.

Who we share it with

Only the services that help us run lasttap, and only what each one needs:

• Stripe, for payments and invoices
• Meta, for ad measurement through the pixel
• Cal.com, for booking calls
• Apple iCloud and Google Gmail, for our email
• Our website host and form service, to run the site and deliver your form
• Google Fonts, for our typefaces

We also share information when the law requires it, or with a buyer if lasttap is ever sold or merged, who must follow this policy. We don't sell your personal information.

How long we keep it

• Teardown requests and emails: up to 2 years after we last hear from you.
• Client store and ad data: deleted within 90 days after your project or Leak Watch ends. The plan and report you received are yours to keep.
• Payment and billing records: as long as tax law requires, usually 7 years.

Your choices

Email hello@lasttap.co to see what we hold about you, correct it, delete it, or get a copy. We reply within 30 days. Depending on where you live, such as California, the EU or the UK, local law may give you more rights, including the right to complain to a data protection authority. We honor these requests wherever you live, and using them won't change how we treat you.

Security

Only the people doing your work can reach your accounts. We use two-factor sign-in wherever it's offered, and we give up store access when a project ends. No system is perfectly secure. If a breach affects your information, we'll tell you.

Children

lasttap is a service for businesses. It isn't meant for anyone under 16, and we don't knowingly collect their information.

Where your information is processed

We're based in the United States. Our service providers may process information in the US and in other countries.

Changes to this policy

When we change this policy, we'll update the date at the top. If a change is significant, we'll also email current clients.

Contact

Questions or requests: hello@lasttap.co