PRIVACY POLICY — TapTo Games

Effective date: 01 January 2026

Last updated: 28 July 2026

This policy explains what information we collect when you play our mobile games, why we collect it, who we share it with, and the choices and rights you have. We've written it in plain language and named every advertising and analytics partner we work with.

THE SHORT VERSION

  • You don't need an account. You can play without giving us your name or email. We only receive contact details if you choose to email our support team.

  • Our games are ad-supported. We show ads through Google AdMob, with Meta Audience Network and Unity Ads served through AdMob's mediation. These partners use device and advertising identifiers to show and measure ads.

  • We use analytics to improve the game. We use Unity's analytics tools to understand how levels and features are played so we can make them better.

  • You're in control of ad tracking. On first launch you'll be asked about tracking (and, in Europe, about personalized ads). You can change your mind any time in your device settings.

  • Purchases go through the stores. Apple and Google process your payments. We never see your full card details.

  • Want your data deleted? Email support@tapto-games.com. See "Deleting your data" below.

1. WHO WE ARE

These games are published by Tapto EOOD ("TapTo", "we", "us", "our"), a company registered in Bulgaria.

This policy covers our mobile games, including “Too Many Orders” and other titles we publish under the TapTo name (each, the "Game"). If you have any question about your privacy, contact us at support@tapto-games.com.

If you do not agree with this policy, please do not play the Game. If you change your mind later, you can stop playing and exercise the rights described below.

2. INFORMATION WE COLLECT

We keep data collection to what the Game actually needs. Most of it is generated automatically as you play — we don't ask you to fill in a profile.

Information you give us directly

  • Support correspondence. If you email us or contact support, we receive your email address and whatever you choose to tell us so we can help.

  • Optional feedback and ratings. If you respond to an in-game rating prompt or survey, we collect your response.

  • Information collected automatically as you play

    • Device and app identifiers. A unique installation ID, and advertising identifiers such as Apple's IDFA and Android's Advertising ID (GAID).

    • Device information. Device model and brand, operating system and version, language and region, screen size, and general performance data (for example available storage, battery, and network type) used to run and debug the Game.

    • Gameplay and event data. Levels started and completed, scores and stars, in-game currency and progress, features used, session length, timestamps, and similar events that tell us how the Game is being played.

    • Country-level location inferred from your IP address. We do NOT collect precise GPS location.

    • Purchase records. Records of in-app purchases you make (what was bought and when), so we can grant your items and keep accurate records.

    • Ad interaction data. Which ads were shown, viewed, or clicked, used to deliver, cap, and measure advertising.

  • Information we receive from third parties

    • From the app stores. When you make a purchase, Apple or Google confirm the transaction to us. We receive a transaction record and validation status — NOT your full payment card number.

    • From analytics and advertising partners. Our partners (listed in section 5) share aggregated and event-level data about how the Game and its ads perform, tied to the identifiers above.

    • From attribution partners. To understand which marketing campaigns brought players to the Game and to detect ad fraud, we receive data such as advertising ID, IP address, and install/event signals.

3. HOW WE USE YOUR INFORMATION & WHY

We use your information for the purposes below. Where GDPR applies, we've noted our lawful ground for each use.

  • Run the Game — load the Game, save your progress, deliver items you purchase, and keep it working across sessions. (Legal basis: performance of a contract.)

  • Support you — answer your questions, fix problems, and restore progress or purchases. (Legal basis: performance of a contract; legitimate interests.)

  • Improve the Game — analyse how levels and features are played, find bugs, balance difficulty, and design new content. (Legal basis: legitimate interests.)

  • Show advertising — display ads and, where permitted, personalize and measure them (see section 4). (Legal basis: consent for personalized ads; legitimate interests for non-personalized ads and measurement.)

  • Measure marketing — understand which campaigns work and detect fraudulent installs and clicks. (Legal basis: legitimate interests.)

  • Keep things safe & lawful — prevent cheating, fraud, and abuse; enforce our terms; comply with legal obligations such as tax and accounting. (Legal basis: legitimate interests; legal obligation.)

"Legitimate interests" means we've weighed our interest in doing something against your privacy and concluded it's fair and expected. You can object to this processing — see "Your rights".

4. ADVERTISING, ANALYTICS & YOUR CHOICES

Our games are free and supported by advertising. We use Google AdMob as our advertising network and mediation platform, and we serve additional demand through AdMob's mediation from Meta Audience Network and Unity Ads. We use Unity's analytics tools to understand gameplay. To do this, these partners process device identifiers, advertising identifiers, IP address, and ad-interaction data.

Personalized vs. non-personalized ads

Ads can be personalized (tailored using data about your device and interests) or non-personalized (based only on general context and coarse signals like frequency capping). Which you see depends on your choices and settings below. Even non-personalized ads require a limited amount of data to be served and measured.

The choices you have

  • On Apple devices (App Tracking Transparency). When you first play, iOS asks whether you allow the Game to track you across other apps and websites. If you decline, we and our partners won't use the IDFA for cross-app tracking. You can change this any time in Settings > Privacy & Security > Tracking.

  • In Europe, the UK, and Switzerland (consent). On first launch we show a consent request (via Google's User Messaging Platform) asking whether you agree to personalized advertising. You can withdraw or change your consent at any time from the in-game privacy settings.

  • On Android. You can reset or delete your Advertising ID, and opt out of ad personalization, in Settings > Privacy > Ads.

When you limit tracking or decline personalized ads, you'll still see ads — they just won't be tailored to you.

5. THE PARTNERS WE WORK WITH

We share information with the service providers and partners below. Some act on our instructions (processors); advertising networks generally act as independent controllers for the data they collect through the Game, so their own privacy policies also apply. We recommend reviewing them.

6. HOW WE SHARE INFORMATION

We do not sell your personal information for money. We share it only as described here:

  • With the partners in section 5, to run, analyse, monetise, and market the Game.

  • For advertising. We (and our ad partners) share advertising identifiers and ad-interaction data to show and measure ads. Under some laws this counts as "sharing" for targeted advertising — see "California privacy rights".

  • To comply with the law or respond to lawful requests, and to protect the rights, property, or safety of our players, the public, or us — including to prevent fraud and abuse.

  • In a business transfer. If we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal; we'll notify you of any change in who controls it.

7. WHERE WE PROCESS YOUR INFORMATION

We are based in the European Union. Some of our partners and their servers are located outside the European Economic Area (EEA), including in the United States. Where we transfer personal information outside the EEA or UK, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where applicable, the EU–US Data Privacy Framework — so your information stays protected to EEA/UK standards.

8. HOW LONG WE KEEP IT

We keep your information only as long as we need it for the purposes in this policy:

  • Gameplay and analytics data — for as long as you use the Game and then for up to 12 months after your last activity, after which it is deleted or anonymised.

  • Support correspondence — for as long as needed to resolve your issue and a reasonable period afterward.

  • Purchase and financial records — for as long as required by tax and accounting law (typically up to [e.g. 10 years under Bulgarian law]).

  • Fraud, safety, and legal records — for as long as we have an overriding need to retain them.

9. CHILDREN'S PRIVACY

Our games are intended for a general audience and are NOT directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children under that age, and we do not knowingly serve them personalized advertising.

If you are a parent or guardian and believe your child has provided us with personal information, please contact support@tapto-games.com and we will delete it. Where required, children in the EEA may have reduced functionality (such as non-personalized ads only).

10. YOUR RIGHTS (GDPR)

If you're in the EEA, the UK, or Switzerland, you have the following rights over your personal information. To exercise any of them, email support@tapto-games.com.

  • Access — get a copy of the information we hold about you and an explanation of how we use it.

  • Correction — have inaccurate or incomplete information corrected.

  • Erasure — ask us to delete your information (see section 13). We may keep some data where the law requires it.

  • Restriction — ask us to limit how we use your information in certain cases.

  • Objection — object to processing based on our legitimate interests, including profiling for advertising.

  • Withdraw consent — where we rely on consent (such as personalized ads), withdraw it at any time without affecting past processing.

  • Portability — receive information you provided in a structured, machine-readable format.

Where information is held by a partner acting as an independent controller (such as an ad network), we'll take reasonable steps to pass on your request, but we recommend contacting them directly using the links in section 5.

You also have the right to complain to your local data protection authority. In Bulgaria this is the Commission for Personal Data Protection (CPDP).

11. CALIFORNIA PRIVACY RIGHTS

This section applies to California residents under the California Consumer Privacy Act, as amended (CCPA/CPRA).

What we collect and share. In the past 12 months we have collected the categories of personal information described in section 2 — identifiers (including device and advertising IDs), internet and gameplay activity, approximate (city-level) location, and commercial information (purchase records). We collect it from you and your device, from our analytics and advertising partners, and from the app stores.

"Sharing" for targeted advertising. We do not sell your personal information for money. However, our use of advertising partners to show you targeted ads may be considered a "sale" or "sharing" of personal information under the CCPA. You have the right to opt out.

How to opt out. Use the App Tracking Transparency prompt (iOS), reset or opt out of your Advertising ID (Android), or use the in-game privacy settings to turn off personalized ads. You may also email support@tapto-games.com to make a "Do Not Sell or Share My Personal Information" request.

Your other rights. You have the right to know what personal information we collect and disclose, to request its deletion, to correct it, and not to be discriminated against for exercising these rights. We honor verifiable requests within the timeframes the CCPA requires. We do not knowingly sell or share the personal information of residents under 16 without opt-in consent.

12. HOW WE PROTECT YOUR INFORMATION

We use technical and organisational measures to protect your information, to the standards set by Google AdMob, access controls that limit who can see your information, and vendor agreements that require our partners to protect it. No method of transmission or storage is completely secure, so while we work hard to protect your information, we can't guarantee absolute security.

13. DELETING YOUR DATA

To request deletion of the data we hold about you, email support@tapto-games.com from the address you'd like us to act on, or describe your device/installation so we can locate your records. We'll confirm and complete your request in line with applicable law, keeping only what we're legally required to retain (such as purchase records for tax purposes).

Some data is also held by our partners acting as independent controllers. To have them delete data collected about your device, please use their privacy policies:

14. CHANGES TO THIS POLICY

We may update this policy from time to time. If we make significant changes, we'll post the new version here and update the "Last updated" date, and where appropriate we'll notify you in the Game. Your continued play after an update means you accept the revised policy.

15. CONTACT US

Questions, requests, or concerns about your privacy? We're happy to help.

- Email: support@tapto-games.com

© [2026] TapTo Games. All rights reserved.