Legal

Website Privacy Policy

This policy describes how the getbananaapps.com website, operated by Banana Apps LLC, handles visitor information. Native Banana Apps products (for example RetroLens, HS & College Calculator, and PDF Homework Scanner) are covered by their own product privacy policies and are not governed by this document.

Effective July 24, 2026Last Updated July 24, 2026
01

Operator and scope

Banana Apps LLC operates the getbananaapps.com website. This policy applies only to the website. See each product's own Privacy Policy for how the app handles information.

02

Request and network data

When you visit the site, your browser sends standard request data — IP address, browser and device headers, timestamps, requested pages, and referrer — that our hosting and delivery infrastructure receives to serve the site and protect it from abuse.

03

Website analytics

The site loads a first-party analytics script (/~flock.js) proxied through /~api/analytics. The client is Tinybird-derived. It sets a first-party session-id cookie with a Max-Age of 1800 seconds and transmits, per page view, the timestamp, session id, user agent, locale, timezone-derived country, referrer, pathname, and full URL.

Downstream operator, storage, raw IP handling, retention, and access controls: a Tinybird-derived first-party analytics pipeline operated by Banana Apps LLC aggregated analytics events are retained for up to 13 months raw IP addresses are used only transiently for delivery, security, and abuse prevention and are not stored alongside analytics events primarily processed in the United States

04

Cloudflare delivery, security, and network error reporting

Cloudflare provides delivery, bot protection, and security. Cloudflare sets a __cf_bm secure HttpOnly bot-management cookie observed at approximately 30 minutes. Response headers also configure Cloudflare network error reporting (NEL), which can cause your browser to send network-level error reports to a Cloudflare reporting endpoint. Cloudflare and origin request logs are retained for up to 30 days for security and debugging

05

Google Fonts

The site loads Instrument Serif, Inter, and JetBrains Mono from Google-hosted domains (fonts.googleapis.com, fonts.gstatic.com). Your browser makes requests Google can log per Google's policies.

06

Support and business email

If you email [email protected] or [email protected], our email provider receives your message, sender address, metadata, and any attachments. support email is retained for up to 24 months

07

Purposes

We use website information to serve the site, protect it from abuse, understand aggregate usage, debug issues, and respond to messages you send.

08

Providers and recipients

Cloudflare (delivery, security, NEL). Google (Google Fonts). A Tinybird-derived analytics pipeline (exact contractual configuration unverified). Our email provider (support messages). We do not sell website visitor data. we do not sell or share website visitor data and do not use it for targeted advertising

09

Cookies and browser storage

See the Cookie Policy for the full list of cookies and session-storage keys the site sets today.

10

Security

We use reasonable safeguards including TLS delivery, Cloudflare protection, and standard secure-cookie flags where applicable. No system is perfectly secure, and we do not guarantee security.

11

Retention

The session-id analytics cookie expires client-side after approximately 30 minutes. The __cf_bm Cloudflare cookie expires at approximately 30 minutes. Downstream server-side retention: aggregated analytics events are retained for up to 13 months Cloudflare and origin request logs are retained for up to 30 days support email is retained for up to 24 months

12

Visitor rights and contact

Depending on your region, you may have rights to access, correct, delete, or object to processing of information the website holds about you. Email [email protected] for privacy questions. We do not operate an automated visitor-facing privacy portal today.

13

International processing

Website delivery, analytics, and email may be processed outside your country of residence. the website is available worldwide; visitors from regions with consent requirements are shown the applicable cookie and analytics banner

14

Children

The website is intended for a general audience and is not directed to children under 13. Do not use the website's contact addresses to submit children's personal information.

15

Changes

If we change this policy materially, we will update the Last Updated date and, where practical, provide additional notice.