Last updated October 2, 2026
The short version: Tin Tally works without an account, and then your codes never leave your browser. If you choose to sign in with Google to sync across devices, Tin Tally stores your Google email, name and your code list so it can sync them. Nothing is sold, shared or used for ads, and you can delete it all at any time. Community totals are anonymous and can be switched off.
Your codes, stats, rewards goal and settings are saved only in your browser's local storage on that device. Tin Tally's server never receives them. Clearing your browser data removes them.
Signing in is optional and only used to sync your data between your own devices. When you sign in, Tin Tally receives from Google:
Tin Tally then stores, linked to that account:
Tin Tally does not receive your Google password, your contacts, or anything else from your Google account, and it never receives your ZYN Rewards password. Tin Tally never submits codes to ZYN on your behalf.
Reminders are optional and off until you turn them on with the bell.
Synced data is stored in a database hosted by Cloudflare, which also serves the website. Data is sent over encrypted connections (HTTPS).
If you join or create a crew, the other members of that crew can see the display name you choose for it and your counts: codes scanned and redeemed this month and in each recent month, and your total points. They never see your email, your Google name, or your codes. You can leave a crew any time, and deleting your account removes you from every crew.
If you send feedback, Tin Tally stores your message, the optional email you add for a reply, and which tab you were on. It is only used to improve Tin Tally and reply to you.
Tin Tally shows anonymous totals of how many codes everyone has scanned and redeemed. To count a code without ever sending it, your browser turns each code into a one-way fingerprint (a SHA-256 hash) and sends only that fingerprint plus the scan and redeem dates. The fingerprint cannot be turned back into the code and is not linked to your account, name, or email. To limit abuse, the server keeps a scrambled, day-specific hash of your IP address for up to two days, never the IP address itself. You can turn this off with the "Count my scans in community stats" switch on the Stats tab. Deleting your account does not remove these anonymous counts, since they cannot be tied back to you.
Tin Tally counts page visits and a few anonymous actions (like opening a tab, scanning a code or marking one redeemed, never the code itself) with two cookie-free tools: Cloudflare Web Analytics, and OpenAnalytics, which runs on Tin Tally's own server. Neither uses cookies or tracks you across other websites. OpenAnalytics never stores your IP address; it recognises a returning visitor only for one day, using a scrambled code that changes daily. If your browser sends Global Privacy Control or Do Not Track, your visit is not recorded.
Your data is not sold, rented, or shared with anyone, including ZYN, and is not used for advertising. It would only be disclosed if required by law.
Open the account menu in Tin Tally and choose More options, then Delete my synced data. This permanently deletes your account, your synced codes and your sessions from the server. Codes saved in your own browser stay there until you clear them.
Tin Tally is for adults 21 and over, which matches the ZYN Rewards program's age requirement.
Tin Tally is an independent fan-made tool. It is not affiliated with, endorsed by, or sponsored by ZYN or Philip Morris International.
Questions or deletion requests: message the developer through buymeacoffee.com/connormckay.
If this policy changes, the date at the top will be updated.