Last updated September 23, 2026
The short version: Tin Tally works without an account, and then your codes never leave your browser. If you choose to sign in with Google to sync across devices, Tin Tally stores your Google email, name and your code list so it can sync them. Nothing is sold, shared or used for ads, and you can delete it all at any time. Community totals are anonymous and can be switched off.
Your codes, stats, rewards goal and settings are saved only in your browser's local storage on that device. Tin Tally's server never receives them. Clearing your browser data removes them.
Signing in is optional and only used to sync your data between your own devices. When you sign in, Tin Tally receives from Google:
Tin Tally then stores, linked to that account:
Tin Tally does not receive your Google password, your contacts, or anything else from your Google account, and it never receives your ZYN Rewards password. Tin Tally never submits codes to ZYN on your behalf.
Synced data is stored in a database hosted by Cloudflare, which also serves the website. Data is sent over encrypted connections (HTTPS).
If you join or create a crew, the other members of that crew can see the display name you choose for it and your counts: codes scanned and redeemed this month and in each recent month, and your total points. They never see your email, your Google name, or your codes. You can leave a crew any time, and deleting your account removes you from every crew.
If you send feedback, Tin Tally stores your message, the optional email you add for a reply, and which tab you were on. It is only used to improve Tin Tally and reply to you.
Tin Tally shows anonymous totals of how many codes everyone has scanned and redeemed. To count a code without ever sending it, your browser turns each code into a one-way fingerprint (a SHA-256 hash) and sends only that fingerprint plus the scan and redeem dates. The fingerprint cannot be turned back into the code and is not linked to your account, name, or email. To limit abuse, the server keeps a scrambled, day-specific hash of your IP address for up to two days, never the IP address itself. You can turn this off with the "Count my scans in community stats" switch on the Stats tab. Deleting your account does not remove these anonymous counts, since they cannot be tied back to you.
Tin Tally uses Cloudflare Web Analytics to count page visits. It does not use cookies for this and does not track you across other websites.
Your data is not sold, rented, or shared with anyone, including ZYN, and is not used for advertising. It would only be disclosed if required by law.
Open the account menu in Tin Tally and choose More options, then Delete my synced data. This permanently deletes your account, your synced codes and your sessions from the server. Codes saved in your own browser stay there until you clear them.
Tin Tally is for adults 21 and over, which matches the ZYN Rewards program's age requirement.
Tin Tally is an independent fan-made tool. It is not affiliated with, endorsed by, or sponsored by ZYN or Philip Morris International.
Questions or deletion requests: message the developer through buymeacoffee.com/connormckay.
If this policy changes, the date at the top will be updated.