1. Who we are
This app ("TapTrap") is operated by Dené Kok ("we", "us", "our"), established in South Africa. We are the data controller for the personal data described in this notice.
2. What personal data we collect
| Category | Examples |
|---|---|
| Account & identity | Internal user id, email (if you sign in with Google), display name |
| Gameplay | High score, total games played, owned cosmetics, in-game inventory, leaderboard rank |
| Telemetry | Game-session duration, anti-cheat metrics, error logs, IP address |
| Support communications | Messages you send to us |
| Purchase records | Order ids, amounts, currency, refund status (the underlying card and billing details are processed by Google Play, not by us) |
3. Why we collect it & legal basis
- Provide the Service. We process account, gameplay, and inventory data to run TapTrap. Legal basis: performance of contract.
- Security & fraud prevention. Telemetry, anti-cheat metrics, and IP addresses help us detect cheating, automated abuse, and payment fraud. Legal basis: legitimate interests.
- Customer support. Where you contact us we process your message and any account context needed to reply. Legal basis: legitimate interests.
- Legal compliance. We retain limited records to comply with tax, accounting, and regulatory obligations. Legal basis: legal obligation.
- Product improvement. Aggregated, non-identifying gameplay statistics inform balance and feature changes. Legal basis: legitimate interests.
4. Who we share it with
- Service providers / subprocessors that host the application, run our database, and provide error tracking. These providers process data on our behalf under written agreements.
- Google Play — the seller of record for all in-app purchases — for processing payments, calculating tax, producing receipts, and handling refunds and chargebacks. Google's processing is governed by its own privacy policy at policies.google.com/privacy.
- Professional advisers (legal, accounting) where strictly necessary.
- Authorities when required to do so by law.
We do not sell personal data and do not share it with advertising networks for cross-site tracking.
5. International transfers
Some of our service providers operate outside your country of residence. Where data is transferred to a country without an adequacy decision we use Standard Contractual Clauses or equivalent safeguards.
6. How long we keep it
- Account & gameplay data: while your account exists, then deleted within 90 days of account closure.
- Purchase records: at least the period required by tax and accounting law in our jurisdiction (typically 6–10 years).
- Security event logs: up to 24 months for fraud and abuse investigations.
- Aggregated, non-identifying statistics: indefinitely.
7. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict, port, or object to our processing of your personal data, and to withdraw any consent you have given. EEA / UK users have the right to lodge a complaint with their supervisory authority. To exercise any of these rights contact us at denekok@gmail.com; we will respond within one month.
8. Security
We use industry-standard technical and organisational measures including encryption in transit, access controls, and audit logging to protect personal data against unauthorised access, loss, or disclosure. No system is perfectly secure; we encourage you to use a strong password and to keep your sign-in provider account secure.
9. Cookies & local storage
We use only essential local storage and cookies to keep you signed in, preserve your in-game preferences (sound, animation mode), and keep track of purchases awaiting delivery. We do not use analytics or marketing cookies.
10. Children
The Service is not directed at children under the age required by law in your jurisdiction (commonly 13 in the US, 16 in much of the EEA). If you believe a child has provided us personal data please contact us so we can delete it.
11. Contact
Questions about this notice can be sent to denekok@gmail.com.