Privacy policy

The short version

• You can play Tapster without an account. Your progress then stays on your phone.
• If you choose to sign in, we store only what leaderboards and syncing need: a nickname, an optional country, your scores and progress.
• No ads, no ad tracking, no selling of data.
• Crash reports and play stats in the app, and analytics on this website, run only if you say yes. You can change your mind at any time.
• Our database runs in the EU (Frankfurt, Germany).
• You can delete your account in the app at any time, or ask us to delete anything by email.

Who is responsible for your data

The controller is Code Growers s.r.o., třída Míru 2800, 530 02 Pardubice, Czech Republic, company ID (IČO) 09546766, VAT ID CZ09546766. For anything about privacy, write to [email protected]. We have not appointed a data protection officer, as the law does not require one for us; the address above reaches the people who look after Tapster.

What we collect and why

Waitlist on this website

When you join the waitlist we store your email address, the language of the page you used and the time you signed up. We use it only to tell you when Tapster launches and, if you're interested, to invite you to the beta.

• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.
• How long: until you unsubscribe or ask us to delete it, and at the latest 12 months after Tapster launches.

Playing without an account

Your progress, settings and scores are stored only on your device. We don't receive them. Ranked leaderboards need an account, because scores have to belong to someone.

Optional account

If you sign in (with Apple, Google or an email link), we store:

• an account identifier from the sign-in provider, and your email address if you sign in by email or the provider shares it;
• the nickname you choose and, if you want, your country;
• your progress, stars and unlocked items;
• your ranked pours: the score, the time and a record of how you moved the glass during the pour. We replay that record on our server to check the score is genuine. It contains only angles and timings, nothing else from your phone.

• Legal basis: providing the features you asked for (Art. 6(1)(b) GDPR).
• How long: until you delete your account. Deletion is immediate.

Public data: leaderboards show your nickname, country (if set), score, time and date to other players. Nothing else about you is public.

Purchases

Purchases (the Tapster licence and cosmetics) are handled by Apple App Store or Google Play. We never see your card or payment details. RevenueCat checks the store's confirmation of the purchase for us, keeps it under a random identifier (or your account identifier, if you sign in), so you can restore what you bought, and tells our server so we can store it with your account.

• Legal basis: performing the contract (Art. 6(1)(b)) and, for records we must keep, our legal obligations (Art. 6(1)(c)).
• How long: as long as you have the account, and records required by Czech tax and accounting law for the period that law sets.

Support emails

If you write to us, we use your email address and whatever you tell us to answer you.

• Legal basis: our legitimate interest in answering your questions (Art. 6(1)(f)).
• How long: as long as needed to sort out your request, then at most 2 years in case you follow up.

This website

Like every website, this one is delivered by a hosting provider (DigitalOcean) that processes technical data such as your IP address, browser type and the page you requested, to deliver the page and protect it from attacks. The fonts are loaded from Google Fonts, so your browser connects to Google's servers, which see your IP address.

• Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f)).

Analytics and cookies on this website

On your first visit a bar asks whether we may count visits with Google Analytics. Until you choose Allow, the site sets no cookies and loads nothing from Google Analytics. If you allow it, Google Analytics sets the cookies _ga and _ga_<ID> (they expire after 13 months) and records the pages you view, the page you came from, your browser and device type, and your approximate location (country and city), which it works out from your IP address. Google Analytics does not store your IP address. We have turned off Google signals and every advertising feature.

Your answer stays in your browser's local storage for 12 months, so the bar does not ask on every page. It is not a cookie, and your browser does not send it to us. To change your answer, choose Cookie settings at the bottom of any page. Saying no deletes the Analytics cookies.

• Legal basis: your consent (Art. 6(1)(a) GDPR and § 89(3) of the Czech Electronic Communications Act). You can withdraw it at any time.
• How long: Google Analytics keeps the data about single visits for 2 months; after that we see only totals.

Crash reports and play stats in the app

After the age question, the app asks whether it may send crash reports and anonymous play stats. Both stay off until you say yes, and you can switch each one on or off in Settings → Privacy.

• Crash reports (Firebase Crashlytics): when the app crashes or hits an error, it sends what went wrong (the error and where in the code it happened), the app version, the phone model, the operating system version and a random installation identifier. They help us find and fix bugs.
• Play stats (Google Analytics for Firebase): which screens you open, which levels you start and finish, with the stars and score, whether you play with touch or tilt, purchases in the app, the app version, phone model, operating system, language and approximate location (country), plus a random app identifier. They show us which levels feel too hard and what to improve. The app never reads the advertising identifier (IDFA or Android advertising ID), and we use none of it for ads.

Neither contains your name, email, nickname or account identifier.

• Legal basis: your consent (Art. 6(1)(a) GDPR and § 89(3) of the Czech Electronic Communications Act). Switching it off in settings withdraws it and deletes reports not yet sent.
• How long: crash reports for 90 days; play stats about single players for 2 months, after that only totals.

Age confirmation

On first launch the app asks whether you are of legal drinking age. Your answer is stored only on your device, in the app's settings; it is not sent to us. We don't ask for your birth date.

What we don't collect

No real name, no birth date, no location, no contacts, no photos, no advertising identifiers. There are no ads in Tapster, and we don't sell or rent anyone's data.

Age

Tapster has an alcohol theme and is only for adults of legal drinking age (18+). It is not aimed at children. If we learn that we hold data about someone under 18, we delete it.

Who helps us process data

These providers act on our instructions under data processing agreements. Apple and Google also process data as independent controllers under their own privacy policies when you download the app, buy something or sign in with them.

Transfers outside the EU

Our database is stored in the EU. RevenueCat keeps purchase records in the United States, Google may process crash reports and analytics data in the United States, and some of the other providers above are US companies that may access data from outside the European Economic Area, for example for support or security. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

Your rights

You have the right to:

• see what data we hold about you and get a copy of it;
• have it corrected or deleted;
• restrict or object to how we use it;
• receive it in a machine-readable format (portability);
• withdraw your consent at any time, without affecting anything done before;
• complain to a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

Write to [email protected] to use any of these rights. We reply within one month.

How to delete your data

• Account: in the app, open your profile and choose Delete account. Your account, progress, pours and leaderboard entries are deleted straight away.
• Waitlist: use the unsubscribe link in any email from us, or write to [email protected].
• Anything else: email [email protected] from the address you used and we'll delete it within 30 days, except records the law requires us to keep.

Security

All connections are encrypted (HTTPS). Database access is locked down table by table, so the app and website can only do what they need: the website, for example, can add an address to the waitlist but cannot read it back. Only the people who run Tapster can access personal data.

Changes

If we change this policy, we'll update the date below and, for significant changes, tell you in the app or by email.

Last updated: 18 October 2026