Everything about how Yori-Tap works, what we collect, and how we protect it —
written to be read, not to hide behind.
Last revised: January 2026
01
Terms of Service
The rules for using Yori-Tap
These terms govern your use of Yori-Tap, a platform for creating and sharing digital
business cards ("V-Cards"). By registering an account or using any part of the service,
you agree to these terms. If you do not agree, please do not use Yori-Tap.
Your account
You must provide accurate, current information when you register.
You are responsible for keeping your password secure and for all activity under your account.
You must be at least 18 years old, or the legal age of majority in your jurisdiction, to create an account.
One person or organisation per account. Sharing credentials is not permitted.
New accounts receive a free trial of the length shown at signup. During the trial you can
create the number of V-Cards included with your tier and share them publicly. When the
trial ends without a purchase, your free card is taken offline and your account moves to
expired status. You can restore it at any time by purchasing a package.
Packages and payment
Paid access is sold as slots — each slot covers one active V-Card for the
duration of a package. Packages come in 1, 2 and 3 year lengths.
You request slots through your dashboard, upload a payment proof, and our team approves the request.
Once approved, slots are allocated to your account and your package's end date is set.
When a package approaches its end date, a 7-day grace period begins. Cards remain visible during grace. After grace, cards tied to that package are taken offline.
Extending an existing package adds months to the current end date. You can extend at any time.
Your content
You own everything you upload — profile pictures, gallery images, service descriptions,
testimonials, business hours, links, and any text you write.
You grant Yori-Tap a limited licence to store, display and serve your content solely to run the service. This licence ends when you delete your account or your content, minus backups that are already in transit.
You confirm that you have the right to publish everything you upload and that it does not infringe anyone else's rights.
You are solely responsible for the accuracy of your contact details, offers and claims.
Acceptable use
You may not use Yori-Tap to:
Publish false, misleading, defamatory or illegal content.
Distribute malware, phishing links, or content that harms others.
Impersonate another person, business or brand.
Scrape, crawl or automate access to the platform without written permission.
Attempt to bypass security, rate limits or access controls.
Resell or sublicense Yori-Tap except where we explicitly permit it in writing.
We may remove content or suspend accounts that violate these rules. Where practical,
we'll tell you why.
Yori-Ads
The platform may display promotional popups ("Yori-Ads") on the public homepage and on
V-Card pages. These ads are managed by Yori-Tap administrators, not by card owners.
Ads shown on your card are chosen based on your subscription tier and can be dismissed
by any visitor. Yori-Tap does not receive payment on your behalf for these ads, and no
revenue is shared.
Suspension and termination
We may suspend or terminate an account that violates these terms, poses a security risk,
or has been reported for abuse. Where reasonable, we'll attempt to notify you first.
You may close your account at any time from your profile settings. Deleting your account
removes your V-Cards and their files within 30 days. Backup archives may retain your data
for up to 180 days before being purged.
Disclaimers and liability
Yori-Tap is provided "as is." We do our best to keep it fast and reliable, but we cannot
guarantee uninterrupted service. Scheduled maintenance, upstream outages and unforeseen
issues may interrupt access.
To the maximum extent permitted by law, Yori-Tap is not liable for indirect, incidental
or consequential damages arising from your use of the service. Our total liability for
any claim is limited to the amount you paid us in the 12 months before the claim.
Updates. If we make material changes to these terms, we'll post an
announcement in your dashboard and update the "last revised" date at the top of this
page. Continued use after the change counts as acceptance.
This policy describes what Yori-Tap collects when you use our website, dashboard, or
any of the public V-Cards hosted on the platform — and what we do with that information.
What we collect
Account information
When you register, we store your business name, full name, email address, phone number,
address, city, country and postal code. We also store a securely hashed version of your
password — never the password itself.
V-Card content
Everything you add to a card is stored on our servers and displayed publicly on the
card's URL. This includes names, job titles, biographies, contact details, gallery
images, services, testimonials, business hours, social links and QR settings.
Technical data
Like almost every website, we receive basic technical data on each request — your IP
address, browser user-agent, the page you requested, and the time of the request. Card
view events are logged in aggregate to power the analytics shown to card owners. For
ad frequency tracking, we hash your IP address with a daily-changing salt so it cannot
be reversed.
Payment information
When you request a package, you upload a payment proof (bank receipt or screenshot).
This is stored on our servers and shown only to our admin team for verification. We do
not process card payments ourselves and never see your card or bank credentials.
Messages sent to card owners
When a visitor submits the contact form on a V-Card, the message, name, email and phone
(if provided) are stored on our servers and delivered to the card owner. Yori-Tap staff
do not read these messages unless investigating abuse or a report.
How we use your information
To operate the service — authentication, cards, subscriptions, backups.
To show your V-Cards to visitors at the URL you choose.
To calculate analytics for card owners (aggregate views over time).
To detect fraud, abuse and abuse-adjacent traffic patterns.
To measure the effectiveness of ads shown on the platform (aggregate impressions and clicks).
Who sees your information
Your account data is visible to you and to Yori-Tap administrators. Your card's public
content is visible to anyone with the card's URL or QR code.
We do not sell or rent your data. We share it only with:
Your card's visitors — the content you publish is public by design.
Yori-Tap administrators — for support, abuse investigation and platform operations.
Service providers — see below for the third-party services loaded by our pages.
Legal authorities — only when legally compelled and after review.
Third-party services
The following external services are loaded when you visit Yori-Tap or a V-Card:
Google Fonts — serves the fonts used on our pages. Google may log the request IP.
Cloudflare CDN — serves Font Awesome and, on demand, PDF export libraries (html2canvas, jsPDF).
QR Server — generates QR code images for cards. The URL being encoded is visible to this service.
We do not run our own analytics trackers and do not embed advertising SDKs. Every third-party request is a normal browser request — no hidden calls, no fingerprinting scripts.
How long we keep information
Account data: for as long as your account exists, plus 30 days after deletion.
Card content: for as long as the card exists, then removed within 30 days.
Card view events: aggregated over time; individual rows are pruned after 180 days.
Ad impressions: pruned after 180 days.
Payment proofs: retained for 3 years for accounting records.
Activity logs: retained for 1 year.
Your rights
You have the right to:
Access the data we hold about you.
Correct inaccurate information — most of it directly from your dashboard.
Export your card data. Use the Backup page in your dashboard to download a ZIP or JSON archive of everything.
Request deletion of your account and its data.
Object to processing or request that we restrict it.
Lodge a complaint with your local data protection authority.
Passwords are hashed with bcrypt. Sessions use HTTP-only cookies with SameSite protection.
All write endpoints require a CSRF token. Uploaded files are validated by MIME type and
size, and PHP execution is disabled in upload directories. We do not store payment card
details.
No system is perfect. If you find a security issue, please disclose it responsibly to
yoridigitalsolution@gmail.com.
Cookies are tiny text files that a website stores in your browser so it can remember
something about your visit — that you're logged in, that you chose dark mode, that you
have already dismissed a popup.
Yori-Tap uses as few as possible. We do not run advertising networks, cross-site
trackers or fingerprinting scripts. Every cookie we set exists to make the site work
correctly or to remember a choice you made.
What they are
Cookies fall into two categories: session cookies, which expire when you
close your browser, and persistent cookies, which stay on your device for
a set period. Yori-Tap uses both.
Cookies we set
Name
Purpose
Duration
PHPSESSID
Session cookie. Keeps you logged in while you browse and remembers form state. Required for the dashboard and login to work at all.
Session (or 30 days if "remember me" was used)
yori_remember_token
Set only if you tick "Remember me" on the login page. Lets you skip the password on your next visit.
30 days
yta_visitor
Anonymous visitor identifier. Used to enforce popup ad frequency rules — for example, "show this ad once per day." Contains no personal data and is not linked to your account.
365 days
Local storage is not a cookie. Theme preference (dark or light mode)
is stored in your browser's local storage under the key
yori-tap-theme. It never leaves your device and we cannot read it.
Third-party services
When a Yori-Tap page loads, your browser makes requests to the following services. They
may set their own cookies or log your request, independent of us.
Google Fonts (fonts.googleapis.com) — serves the fonts you see on the page.
Cloudflare CDN (cdnjs.cloudflare.com) — serves Font Awesome icon fonts, and on demand the html2canvas and jsPDF libraries when you export a card as PDF.
QR Server (api.qrserver.com) — generates QR code images on V-Card pages.
We have no control over these services' cookie behaviour. See their own policies for
details. If you're concerned, browser extensions like uBlock Origin or Privacy Badger
can block them without breaking Yori-Tap's core functionality.
Managing cookies
You have full control over cookies in your browser. Every major browser lets you:
View the cookies a site has set.
Delete individual cookies or clear all cookies at once.
Block cookies from specific sites, or block all third-party cookies globally.
Enable a private or incognito mode that discards cookies when you close the window.
If you disable the PHPSESSID cookie, you cannot log in. If you disable
yta_visitor, you may see the same popup ad more than the intended frequency
— everything else works normally.
Do Not Track
Some browsers send a "Do Not Track" header. Because Yori-Tap does not track you across
other websites or build a behavioural profile, we do not respond to this header
differently — there is nothing to switch off.
Changes to this policy
If we add a new cookie or change how an existing one behaves, we'll update this page and
the "last revised" date at the top.
