Privacy policy

The short version

• You can play Tapster without an account. Your progress then stays on your phone.
• If you choose to sign in, we store only what leaderboards and syncing need: a nickname, an optional country, your scores and progress.
• No ads, no ad tracking, no selling of data. The website uses no cookies and no analytics.
• Our database runs in the EU (Frankfurt, Germany).
• You can delete your account in the app at any time, or ask us to delete anything by email.

Who is responsible for your data

The controller is Code Growers s.r.o., třída Míru 2800, 530 02 Pardubice, Czech Republic, company ID (IČO) 09546766, VAT ID CZ09546766. For anything about privacy, write to [email protected]. We have not appointed a data protection officer, as the law does not require one for us; the address above reaches the people who look after Tapster.

What we collect and why

Waitlist on this website

When you join the waitlist we store your email address, the language of the page you used and the time you signed up. We use it only to tell you when Tapster launches and, if you're interested, to invite you to the beta.

• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.
• How long: until you unsubscribe or ask us to delete it, and at the latest 12 months after Tapster launches.

Playing without an account

Your progress, settings and scores are stored only on your device. We don't receive them. Ranked leaderboards need an account, because scores have to belong to someone.

Optional account

If you sign in (with Apple, Google or an email link), we store:

• an account identifier from the sign-in provider, and your email address if you sign in by email or the provider shares it;
• the nickname you choose and, if you want, your country;
• your progress, stars and unlocked items;
• your ranked pours: the score, the time and a record of how you moved the glass during the pour. We replay that record on our server to check the score is genuine. It contains only angles and timings, nothing else from your phone.

• Legal basis: providing the features you asked for (Art. 6(1)(b) GDPR).
• How long: until you delete your account. Deletion is immediate.

Public data: leaderboards show your nickname, country (if set), score, time and date to other players. Nothing else about you is public.

Purchases

Purchases (the Tapster licence and cosmetics) are handled by Apple App Store or Google Play. We never see your card or payment details. RevenueCat checks the store's confirmation of the purchase for us, keeps it under a random identifier (or your account identifier, if you sign in), so you can restore what you bought, and tells our server so we can store it with your account.

• Legal basis: performing the contract (Art. 6(1)(b)) and, for records we must keep, our legal obligations (Art. 6(1)(c)).
• How long: as long as you have the account, and records required by Czech tax and accounting law for the period that law sets.

Support emails

If you write to us, we use your email address and whatever you tell us to answer you.

• Legal basis: our legitimate interest in answering your questions (Art. 6(1)(f)).
• How long: as long as needed to sort out your request, then at most 2 years in case you follow up.

This website

The website sets no cookies and runs no analytics or tracking. Like every website, it is delivered by a hosting provider (DigitalOcean) that processes technical data such as your IP address, browser type and the page you requested, to deliver the page and protect it from attacks. The fonts are loaded from Google Fonts, so your browser connects to Google's servers, which see your IP address.

• Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f)).

Crash reports and analytics in the app

Tapster currently collects neither. If we add them, they will be optional (you'll be asked first) and we will update this policy before they ship.

Age confirmation

On first launch the app asks whether you are of legal drinking age. Your answer is stored only on your device, in the app's settings; it is not sent to us. We don't ask for your birth date.

What we don't collect

No real name, no birth date, no location, no contacts, no photos, no advertising identifiers. There are no ads in Tapster, and we don't sell or rent anyone's data.

Age

Tapster has an alcohol theme and is only for adults of legal drinking age (18+). It is not aimed at children. If we learn that we hold data about someone under 18, we delete it.

Who helps us process data

These providers act on our instructions under data processing agreements. Apple and Google also process data as independent controllers under their own privacy policies when you download the app, buy something or sign in with them.

Transfers outside the EU

Our database is stored in the EU. RevenueCat keeps purchase records in the United States, and some of the other providers above are US companies that may access data from outside the European Economic Area, for example for support or security. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

Your rights

You have the right to:

• see what data we hold about you and get a copy of it;
• have it corrected or deleted;
• restrict or object to how we use it;
• receive it in a machine-readable format (portability);
• withdraw your consent at any time, without affecting anything done before;
• complain to a supervisory authority. In the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

Write to [email protected] to use any of these rights. We reply within one month.

How to delete your data

• Account: in the app, open your profile and choose Delete account. Your account, progress, pours and leaderboard entries are deleted straight away.
• Waitlist: use the unsubscribe link in any email from us, or write to [email protected].
• Anything else: email [email protected] from the address you used and we'll delete it within 30 days, except records the law requires us to keep.

Security

All connections are encrypted (HTTPS). Database access is locked down table by table, so the app and website can only do what they need: the website, for example, can add an address to the waitlist but cannot read it back. Only the people who run Tapster can access personal data.

Changes

If we change this policy, we'll update the date below and, for significant changes, tell you in the app or by email.

Last updated: 18 October 2026