Privacy Policy

Last updated: March 2026

1. Introduction

Taplup ("we", "us", "our") operates the website taplup.com (the "Website"). This Privacy Policy explains how we collect, use, store, and protect information when you visit our Website. By using our Website, you agree to the practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

Entity: Taplup
Email: privacy@taplup.com
Website: https://taplup.com

For any data protection inquiries, please contact us at privacy@taplup.com.

3. Information We Collect

We are committed to minimizing data collection. Here is what you should know:

We do not require user registration or account creation.
We do not collect personal information such as names, email addresses, or phone numbers directly through our Website.
We use localStorage in your browser to store data locally on your device. This data is never transmitted to our servers. The specific data stored includes:
- Favorite games list
- Recently played games
- Game ratings you have submitted
- Achievement progress and unlock status
- Login streak (consecutive visit days)
- Categories you have explored
- Game play time records
- Anonymous nickname and avatar color (used for comments)
- Cookie consent preference
When you post a comment, we store your comment text, randomly generated nickname, avatar color, and timestamp in our database. No personally identifiable information is collected.
We may collect anonymous, aggregated usage data through analytics tools (only with your consent) to help us understand how visitors use our Website.

4. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies. Non-essential cookies (analytics and advertising) are only activated after you provide explicit consent through our cookie consent banner.

Essential Cookies

These cookies are necessary for the website to function properly. They include cookies for session management and storing your cookie consent preferences. These cookies do not collect personal information and cannot be disabled without affecting site functionality.

Analytics Cookies (Consent Required)

With your consent, we use Google Analytics (GA4) to collect anonymous data about how visitors interact with our Website. This includes information such as:

Pages visited and navigation paths
Time spent on each page and session duration
Device type, operating system, and screen resolution
Browser type and version
Approximate geographic location (country and city level only)
Referral source (how you arrived at our Website)

Google Analytics cookie names include: _ga, _ga_*. These cookies are only set if you accept cookies through our consent banner.

Advertising Cookies (Consent Required)

With your consent, Google AdSense and our advertising partners use cookies to serve advertisements on our Website. These cookies may track your browsing activity across different websites to deliver ads relevant to your interests. Advertising cookie names include: __gads, __gpi, _gcl_*. If you decline cookies, only non-personalized or no ads will be displayed.

5. Google AdSense

We use Google AdSense to display advertisements on our Website. Google AdSense scripts are only loaded after you provide consent through our cookie banner. Google and its advertising partners may use cookies to serve ads based on your prior visits to our Website and other websites on the internet.

You can opt out of personalized advertising by visiting Google Ad Settings. You can also opt out of third-party vendor cookies for personalized advertising by visiting www.aboutads.info.

6. Google Analytics

We use Google Analytics 4 to understand website usage patterns and improve our services. Google Analytics scripts are only loaded after you provide consent. The data collected is aggregated and anonymous and does not personally identify individual users.

Data collected through Google Analytics is retained for 14 months, in accordance with our GA4 configuration. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by declining cookies through our consent banner.

7. Third-Party Games

Games available on our Website are provided by third-party developers and are embedded via iframe technology with sandbox restrictions. Please be aware of the following:

Each game runs in a sandboxed iframe environment, which provides a layer of isolation between the game and our Website.
We do not control or have access to the data practices of third-party game developers.
Third-party game developers may have their own cookies, tracking mechanisms, and data collection practices.
We encourage users to review the individual privacy policies of third-party game developers when available.

8. Data Storage and Retention

localStorage data (favorites, ratings, play history, achievements, preferences): Stored entirely on your device and never transmitted to our servers. You can clear this data at any time through your browser settings.
Comment data: Stored in our database indefinitely, or until you request deletion. Comments contain only a randomly generated nickname, avatar color, comment text, and timestamp.
Analytics data: Data collected through Google Analytics is retained for 14 months.
Advertising data: Managed by Google in accordance with their data retention policies.

9. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your data:

Access information we hold about you
Request correction of inaccurate data
Request deletion of your data
Opt out of personalized advertising
Withdraw cookie consent at any time by clearing your browser cookies and revisiting our Website
Clear localStorage data at any time via your browser settings
Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at privacy@taplup.com. We will respond to all legitimate requests within 30 days of receipt.

10. GDPR Compliance (EU/EEA Users)

If you are located in the European Union (EU) or European Economic Area (EEA), you are entitled to certain rights under the General Data Protection Regulation (GDPR):

Legal basis for processing: We process data based on consent (for analytics and advertising cookies). Essential cookies are processed based on legitimate interest for website functionality.
Data controller: Taplup is the data controller. Contact: privacy@taplup.com.
International transfers: Data processed by Google Analytics and Google AdSense may be transferred to and stored on servers outside the EU/EEA. Google maintains appropriate safeguards including Standard Contractual Clauses (SCCs).

Under the GDPR, you have the right to:

Access your personal data
Rectification of inaccurate data
Erasure of your data ("right to be forgotten")
Restriction of processing
Data portability
Object to processing
Withdraw consent at any time without affecting the lawfulness of prior processing

To lodge a complaint, you may contact your local Data Protection Authority (DPA). To request data deletion or export, email privacy@taplup.com.

11. CCPA/CPRA Compliance (California Users)

If you are a resident of California, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

Right to Know: You have the right to know what personal data is being collected about you.
Right to Delete: You have the right to request the deletion of your personal data.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt-Out: We use Google AdSense and Google Analytics, which may share data with Google for advertising purposes. Under CCPA/CPRA, this may constitute "sharing" of personal information. You can opt out by declining cookies through our consent banner.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.
Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by CPRA.

To submit a CCPA/CPRA request, please contact us at privacy@taplup.com. We will respond to all valid requests within 45 days of receipt.

12. LGPD Compliance (Brazilian Users)

If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) provides you with specific rights regarding your personal data:

Legal basis: We process data based on consent (LGPD Article 7, I) for analytics and advertising cookies.
International transfers: Data processed by Google services may be transferred outside of Brazil. Google provides adequate safeguards for such transfers.
Your rights under LGPD: You have the right to confirmation of processing, access, correction, anonymization, portability, deletion of data processed with consent, information about shared data, and the right to revoke consent.

To exercise your LGPD rights, contact us at privacy@taplup.com. You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

13. PIPL Compliance (Users in China)

If you are located in China, the Personal Information Protection Law (PIPL) provides you with specific rights:

International transfers: Our Website uses Google Analytics and Google AdSense, which may transfer data outside of China. These services may be unavailable in certain regions. By consenting to cookies, you explicitly agree to such cross-border data transfers.
Your rights under PIPL: You have the right to know about, access, copy, correct, and delete your personal information. You also have the right to withdraw consent.
Data minimization: We collect the minimum amount of data necessary to operate our Website.

To exercise your PIPL rights, contact us at privacy@taplup.com.

14. PIPA Compliance (South Korean Users)

If you are located in South Korea, the Personal Information Protection Act (PIPA) provides you with specific rights:

Purpose of collection: We collect cookie data solely for website analytics and advertising, with your consent.
Retention period: Analytics data is retained for 14 months. Comment data is retained until deletion is requested.
Your rights under PIPA: You have the right to access, correct, delete, and suspend processing of your personal information.
International transfers: Data may be transferred to Google servers outside South Korea for analytics and advertising purposes, subject to your consent.

To exercise your PIPA rights, contact us at privacy@taplup.com. You may also lodge a complaint with the Personal Information Protection Commission (PIPC).

15. Children's Privacy

Our Website is intended for users aged 13 and above. We do not knowingly collect personal information from children under the age of 13. If you are under 13, please do not use features that submit data to our servers (such as the comment section).

If you are a parent or guardian and believe that your child under 13 has provided personal information through our Website, please contact us immediately at privacy@taplup.com. We will take steps to delete such information promptly.

For users between 13 and 18, we recommend parental supervision when browsing the internet.

16. Data Security

We implement appropriate technical and organizational measures to protect the data we process. However, no method of transmission over the Internet or electronic storage is 100% secure. In the event of a data breach that affects your rights, we will notify affected users and relevant authorities as required by applicable law.

17. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will post the updated policy on this page and revise the "Last updated" date at the top. We encourage you to review this page regularly. Your continued use of the Website after any changes constitutes your acceptance of the updated terms.

18. Contact

For any privacy-related inquiries, data access requests, data deletion requests, or concerns, please contact us at:

Privacy inquiries: privacy@taplup.com
General inquiries: contact@taplup.com

We take your privacy seriously and will respond to all legitimate requests within 30 days of receipt.