DyeTub.com Privacy Policy

Last updated: June 8, 2026.

We try to collect as little as possible, be honest about what we do collect, and give you a simple way to opt out. This policy explains what we gather when you use DyeTub.com, why, and the choices you have.

The short version

  • What you type on a certificate stays with you. The recipient's name, the signatures, and the award description you enter in the certificate maker are never sent to us or stored on our servers. They live only in your own browser and on the page you print.
  • We collect basic, mostly-anonymous analytics to see what's popular and keep the site working.
  • You can opt out of analytics at any time — see "Your choices" below — and we honor your browser's Global Privacy Control signal automatically.

What we collect automatically

When you visit, we record a small "engagement" entry for actions like opening the certificate maker, printing a certificate, or clicking through to the troubleshooting page. With it we may store:

  • A hashed version of your IP address. We do not keep your raw IP address in our records. It is converted with a one-way hash so we can tell repeat activity apart and limit abuse, without storing the address itself.
  • A device identifier. We use an open-source library (FingerprintJS) to generate an identifier from your browser and device characteristics. It helps us count unique visitors for features like "how many people printed this certificate." Unlike a cookie, this identifier is derived from your device. If you opt out, it is not generated.
  • Approximate location. Your country, region, and city are estimated from your IP address using an offline database on our own servers — your IP address is not sent to any third party for this. We keep only this coarse location; we do not store precise coordinates with your activity.
  • Basic technical and usage information such as your browser type, the page you were on, and the action you took (including the generic award title on a printed certificate — but never the recipient or signer names).

When you contact us or submit a testimonial

If you use our contact form, we collect the name, message, and (optional) email address you provide, so we can read your feedback and respond. We keep this to handle your request and improve the site.

If you submit a testimonial, we may publish it on the site. You choose at submission whether to show your name or appear anonymously ("A DyeTub customer"), and we honor that choice — you can also ask us to change it or remove the testimonial entirely via our contact page. We never publish your email address.

Cookies and similar technologies

We use Google Analytics, which sets cookies to measure visits and pages viewed. We also use the device identifier described above, which is not a cookie. Refusing cookies will not affect your ability to use DyeTub.com.

How we use this information

To understand which certificates and pages are popular, to show site-activity features, to diagnose printing problems, to prevent abuse, and to make the site better. We do not sell your personal information, and we do not use it to build advertising profiles about you.

Your choices

  • Opt out any time. Use the privacy banner shown on your first visit, or the "Your Privacy Choices" link in the footer of any page. When you opt out, we stop loading analytics, stop generating the device identifier, and stop recording engagement entries on your browser.
  • Global Privacy Control. If your browser or an extension sends a GPC signal, we treat you as opted out automatically — you don't need to do anything.
  • Google Analytics opt-out. You can also install Google's browser opt-out add-on.

Service providers

We rely on a few third parties to run the site. They process data on our behalf and have their own privacy policies:

Approximate location is derived on our own servers from an offline database, so your IP address is not shared with any geolocation provider.

Where the data goes (international transfers)

DyeTub is operated from the United States, and the service providers above process data in the U.S. If you visit from outside the U.S. — including the EEA, the UK, or Switzerland — your information is transferred to and processed in the United States. Our providers rely on recognized safeguards for such transfers (for example, the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses); you can review the details in each provider's privacy policy linked above.

How long we keep it

We don't tie engagement records to a fixed deletion date. Instead, they are retained as long as needed for analytics and abuse-prevention, then aggregated or removed. Because IP addresses are hashed and certificate content is never stored, these records cannot be tied back to your identity by us.

Children

DyeTub is intended for adults — teachers, parents, coaches, and managers — who create certificates for others. We do not knowingly collect personal information from children under 13. Because the recipient's name and other certificate text are never sent to or stored by us, making a certificate for a child does not share that child's information with us.

Your rights

Depending on where you live, you may have the right to access, correct, or delete personal information we hold, and to opt out of its "sale" or "sharing." We do not sell personal information. To make a request or ask a question, contact us through our contact page; we'll respond within the timeframe your local law requires.

For California residents

In the past 12 months we have collected the following categories of personal information, all for the business purposes described above (analytics, social-proof features, troubleshooting, and security), from the listed sources:

  • Identifiers — a hashed IP address and a device identifier. Source: automatically, from your device.
  • Internet or other electronic network activity — pages viewed and actions taken (e.g. printing a certificate). Source: automatically.
  • Geolocation data — approximate (city-level) location derived from your IP. Source: an offline database on our servers (no third-party lookup). We do not collect precise geolocation.
  • Inferences — aggregate popularity and activity counts. Source: derived from the above.

We do not sell your personal information, and we have configured Google Analytics for measurement only (no advertising signals), so we do not "share" it for cross-context behavioral advertising. You have the right to know, access, delete, and correct your information, to opt out of any sale/sharing, and not to be discriminated against for exercising these rights. We honor the Global Privacy Control signal as an opt-out. Use the "Your Privacy Choices" link in the footer, or our contact page.

For the EEA, UK & Switzerland

If you are in the EEA, the UK, or Switzerland, we ask for your consent before running analytics, the device identifier, or engagement tracking — nothing non-essential runs until you accept, and you can withdraw consent at any time via the "Your Privacy Choices" link. Our legal basis for that processing is your consent (GDPR Art. 6(1)(a)); for keeping the site secure and preventing abuse we rely on our legitimate interests (Art. 6(1)(f)). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority. The data controller is DyeTub Media; reach us via our contact page.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date above and post the new version on this page.

Contact

Questions about your privacy? Get in touch and we'll help.