Security & Privacy

All payments are processed through Stripe, a globally trusted payment platform. Stripe is PCI DSS Level 1 certified—the highest level of security certification in the payments industry. Your card details are encrypted and transmitted directly to Stripe; we never see or store your full card numbers.

All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). Your banking information is encrypted at rest and stored securely by Stripe, not on our servers.

TippyTip runs on secure, modern cloud infrastructure with automatic security updates. We regularly review and update our security practices to protect your data.

We collect only the information necessary to provide our service: your name, email, profile details, and event information. For payment processing, Stripe collects your banking details directly—this sensitive financial data never touches our servers.

We offer multiple secure authentication methods: Google OAuth, magic link email login, and traditional email and password. Passwords are securely hashed using industry-standard algorithms and are never stored in plain text.

We never sell your data to third parties. Your information is only used to provide and improve our tipping service. Tipper details (names, emails, messages) are shared only with the artist they tipped.