AllergyPassIntroduction
This Privacy Policy explains how AllergyPass collects, uses, and protects information when you use this website, its tools, or its resources. It applies to all pages under allergypass.me.
AllergyPass is operated by Abe Alatieh, an individual based in Bangkok, Thailand, who is responsible for the data described in this policy. Questions and data requests can be sent to support@allergypass.me.
AllergyPass collects minimal data, uses it only for what's described here, and doesn't sell or share it with advertisers. The card builder stores all card data on your device. Nothing is sent to a server.
If you have questions after reading this, use the Contact page.
Information collected
What gets collected depends on how you use the site:
| What | When | Why |
|---|---|---|
| Email address | You sign up for updates or a newsletter | To send the content you asked for |
| Browser and device type, pages visited, time on site | You visit any page | Site analytics via Google Analytics and Microsoft Clarity to understand usage |
| Message content | You contact via email or a form | To respond to your inquiry |
| Payment details | You make a purchase | Handled entirely by third-party processors. Not stored here. |
| Your allergen list, destination, and optional traveler name | You ask us to email your card, not while you build it | To render the card, email it, and let that email's link reopen it. Free-card records are deleted after 90 days. |
| Order reference, confirmation email, country, and estimated digital-delivery date | The Google Customer Reviews choice appears after a completed purchase | To offer Google's optional purchase-experience survey. Google sends the survey only if you opt in. |
Card builder data stays on your device until you ask us to send it. While you are building a card, your allergens and destination live in your browser's local storage only. Nothing is transmitted while you browse, preview, or change your selection, and if you clear your browser data it is gone. This is intentional.
Asking us to email the card is the one moment that changes. To render the image and send it, your allergen list, email address, destination, and optional traveler name are transmitted to our server. Free-card records are kept for 90 days so the link in that email can reopen your card where you left off, then deleted automatically. Paid orders are kept longer because they carry your purchase and have to survive an access recovery.
How information is used
Information collected is used only for:
- Delivering digital products or resources you've purchased or requested
- Sending newsletters or updates you've opted into
- Responding to questions or support requests
- Understanding how the tools are used and improving the site experience
- Detecting and preventing spam or abuse
Your information is not used for advertising profiling, sold to third parties, or shared with anyone who doesn't need it to deliver a service you've specifically requested.
Cookies and analytics
AllergyPass uses two analytics tools: Google Analytics 4 (page views, session data, device type) and Microsoft Clarity (session replays and heatmaps to understand how people use the tools). Both use cookies and may share data with their respective parent companies under their own privacy policies.
Neither tool is used for advertising profiling or cross-site tracking for commercial purposes. The data is used to understand how the site is used and to improve it.
The card builder stores your card state in your browser's localStorage. When a paid checkout starts, it also stores a random one-time return nonce in sessionStorage; that nonce contains no email, order, or card details and is used only to prove that the returning browser started the checkout. Card state is transmitted only in the circumstances described in the Information collected section above.
If you prefer not to be tracked, browser extensions such as uBlock Origin or your browser's built-in privacy settings can block these scripts. The site works without them.
Email communications
If you sign up for updates, a newsletter, or any email resource from AllergyPass, you will only receive what you signed up for.
Every marketing email includes an unsubscribe link. You can opt out at any time, immediately, without needing to contact anyone. Transactional emails (such as purchase receipts) are not marketing and are sent only when necessary.
When you request the free Food Allergy Travel Checklist, we use Resend to send the download and schedule two practical follow-ups over the next five days. We retain the email address, source, and a random unsubscribe token for up to 35 days solely to prevent duplicate sequences and cancel those scheduled follow-ups if you opt out. Resend also stores your address on our mailing list, and the unsubscribe link in any of these emails removes you from it.
Email addresses are never sold. After a purchase, Google Customer Reviews is offered on the confirmation page. To display that choice, your order reference, confirmation email address, billing or delivery country, and estimated digital-delivery date are passed to Google. Google sends a purchase-experience survey only if you choose to opt in.
Third-party services
AllergyPass uses a few third-party services to operate. Depending on how you use the site, they may include:
- Payment processors (such as Stripe or Lemon Squeezy): handle all purchase transactions. Payment card information is processed directly by them and is never seen or stored by AllergyPass.
- Email platform (Resend): manages our mailing list, email signups, checklist delivery, opted-in follow-ups, and transactional messages such as your card and purchase emails.
- Google Customer Reviews: receives limited order details to display the post-purchase choice, and sends a survey only when the purchaser opts in.
- Content delivery and hosting: may log basic request data as part of standard server operation.
Each of these services operates under its own privacy policy. AllergyPass selects providers with strong data practices, but is not responsible for their independent actions. Links to their policies are available on their respective websites.
Data security
Technical and operational measures are taken to protect information that passes through this site. This includes using HTTPS, working with providers that maintain their own security standards, and keeping data collection minimal by design.
No system connected to the internet can guarantee perfect security. What can be controlled is controlled. If you have reason to believe your information has been compromised in connection with this site, please get in touch immediately.
Your rights
Depending on where you are, you may have rights over your personal data. You can:
- Unsubscribe from any email list at any time using the link in any email
- Request deletion of any personal data held about you
- Ask what data is held and receive a straightforward answer
- Correct any inaccurate information
To exercise any of these, use the Contact page. Requests are handled personally and promptly.
Children's privacy
AllergyPass is not directed at children under the age of 13, and does not knowingly collect personal information from children. If you believe a child has submitted personal information through this site, please contact us and it will be removed promptly.
Policy changes
This policy may be updated occasionally, to reflect changes in how the site operates, new services, or evolving legal requirements. When changes are made, the "Last Updated" date at the top of this page is revised.
Continuing to use the site after an update means you accept the revised policy. If the changes are significant, a notice will be placed prominently on the site.
Contact
Questions, data requests, or corrections can be sent through the Contact page.
For privacy questions or data requests, use the Contact page. We aim to respond within 1–2 business days.