Last updated October 27, 2026

Privacy

TipPool collects tips for a business and splits them between its staff. It keeps only what that job needs, and it never sells or shares data for advertising.

If you leave a tip

• You pay through PayPal or Venmo. Your card and bank details stay with PayPal; TipPool and the business never see them.
• TipPool keeps the amount, the time, the table if the code had one, the person you tipped if you picked someone, and the payer name PayPal sends back. That is how the tip reaches the right shift and the right people.
• If you pick a language, a cookie remembers it. There are no ads and no tracking cookies.

If you work at a business that uses TipPool

• Your manager adds your name, your role, the email or Venmo phone your tips are paid to, and your hours or clock-ins.
• TipPool uses these to work out your share and to send it to you with PayPal Payouts. Your private staff link shows only your own shifts and shares.
• When you leave, a manager can erase your personal details. The amounts stay, without your name, because the business has to keep its pay records.

If you manage a business

• We keep your name, email, password (hashed, never readable) and, if you turn it on, your two-step sign-in key.
• Your PayPal API secret is stored encrypted and is only used to take tips and send payouts for your business.
• A change history records who changed rules, team members and payouts, so every split can be checked later.
• To protect accounts, sign-in attempts are counted for a short time, and a security email (for example after many wrong passwords) includes the internet address the attempts came from.

Who else sees data

• PayPal handles every payment and payout.
• The AI service this site uses (Anthropic's Claude, Google's Gemini, OpenAI's ChatGPT, DeepSeek, Moonshot's Kimi or Mistral; the person running the site chooses one) reads your tip rules, and for a shift the staff first names, roles, hours and amounts, to turn rules into a split, explain shares and check a close-out. Anthropic does not use API data to train its models. On Gemini's free tier, Google may use what it receives to improve its products.
• Cloudflare Turnstile, if the site has its bot check on, checks that a visit to a tip page comes from a person and not a script. It sees your browser and network address, not your tip or payment.
• An email service (for example Brevo) delivers TipPool's emails: codes, reset links, invites, staff links, alerts and summaries. It receives the address and the email's content.
• Our host and database provider store the data. Google Fonts serves the typefaces, so your browser contacts Google when a page loads.

How long we keep it

Business data stays while the business has an account, because tip and pay records have to be kept. Demo businesses, and everything in them, are deleted after 7 days.

Your choices

Ask the business you work for, or tipped, to see, correct or erase your details. A manager can close their business account and have its data removed.

If you live in the EU or the UK, you also have the right to complain to your data protection authority.

Questions? Ask the business that uses TipPool, or open an issue on the project's public repository.