ValetTap Privacy Policy
Last updated: October 26, 2026
1. Introduction
ClearStack Apps ("we", "us", "our") operates the ValetTap mobile application and the guest ticket pages it serves at valettap.web.app. ValetTap runs a valet parking stand: an attendant issues a ticket with a QR code, the guest opens a ticket page on their own phone and asks for their car from it. This policy explains what is stored, where, who can see it, how long it is kept and how to delete it. It covers ValetTap only; the rest of ClearStack Apps is covered by our main privacy policy.
2. What ValetTap Stores
- The owner's account: an anonymous account is created when the app first opens. If the owner or an attendant adds an email address and password, they are held by Google Firebase Authentication and never seen by us.
- The business's records: the business and lot names, an optional note shown on guest pages, a target time, and the tickets: ticket number, the car's colour, make and model, plate, key tag and parking spot as typed by the attendant, the attendant's name, and the times the car was parked, requested, brought to the curb and handed back.
- Guest alerts: if a guest turns on notifications, their browser's push subscription (an address at the browser maker's push service, with no name or phone number in it), used only to tell that guest their car is at the curb.
- Abuse limits: a hashed, short-lived counter per connection and per ticket that limits how often the ticket page can be used. The raw IP address is not stored.
- Purchase check: if the owner buys a plan from Google Play, the purchase token, used only to confirm the purchase with Google and to renew or end the plan.
ValetTap never asks guests for their name or a phone number, sends no text messages and takes no payments or tips.
3. Intake Photos
Photos of a car taken at intake stay on the phone that took them. They are never uploaded to our servers and are deleted from the phone after 30 days.
4. How Long It Is Kept
- A ticket's guest link and push subscription are deleted two days after the car is handed back.
- Closed ticket records are deleted automatically 120 days after the car was handed back.
- Printed tickets that were never issued are deleted after a year.
- Abuse counters expire within minutes.
5. Crash Reports and Analytics
- Firebase Crashlytics (Google LLC): crash reports, device model, operating system and app version, so we can find and fix bugs.
- Firebase Analytics (Google LLC): basic usage events such as app opens and screen views, tied to a random ID for the app on the phone. The advertising ID is not collected.
These never include ticket or car details. ValetTap shows no third-party ads. The free tier shows a banner for ClearStack's own website service; nothing from the stand is used to choose it. Nothing is sold or shared with advertisers.
6. Guests
Guests do not create an account and install nothing. The ticket page sets no cookies and is marked so search engines do not index it. It shows only that guest's own ticket: number, car colour and make, the lot and the progress of the car. It does not show the plate.
7. Where It Is Stored
On Google Cloud (Firebase) in the United States, encrypted in transit and at rest. The app keeps a local copy on the attendant's phone so the board keeps working through a short signal drop.
8. Who Can See It
- The owner, and on Pro up to five attendants the owner invites, see the business's tickets and shift reports.
- A guest sees only their own ticket.
- We do not read businesses' tickets. Google acts as our processor to store them.
9. Deleting Data
In the app: Settings, then Account and recovery, then Delete account, and confirm. Or email support@clearstackapps.com from the address on the account. When the owner deletes the account, every lot, ticket record, guest link and push subscription of the business is deleted, and its QR tickets stop working. An attendant who deletes their account leaves the business. More detail is on the account deletion page.
Crash reports are kept by Firebase for 90 days and then deleted.
10. Your Copy of the Data
In Settings, Export all records (JSON) saves a copy of every ticket on every plan. On Solo and Pro, shift reports also export as PDF and CSV.