This policy explains what personal data Triotap Games processes when you play our games or visit triotapgames.com, why we process it, who receives it and what rights you have. Triotap Games is a trade name of Michael Landau, an independent developer resident in Israel ("Triotap", "we", "us"). We are the controller of the data described here.
Controller: Triotap Games, Michael Landau, Israel. Email: support@triotapgames.com.
We have not appointed a data protection officer because the law does not require one for processing of this scale.
| Category | Examples | Source |
|---|---|---|
| Device and app data | Device model, operating system version, language, time zone, approximate location (country or region) that our providers derive from the IP address, screen size, app version, memory and performance readings | Your device, automatically |
| Identifiers | A random player ID created by the game; the Unity Authentication player ID; the Apple identifier for vendor (IDFV) or the Android App Set ID; the advertising identifier (IDFA or GAID), only if you allow tracking | The game and your device |
| Gameplay data | Levels started and completed, steps and checks used, power-ups and hints used, coins earned and spent, streaks, events joined, session start and end, difficulty readings | The game |
| Purchase data | Product bought, price and currency, time, Store transaction identifier, refund status. Never card numbers or bank details | Apple or Google, through the Store interface in the game |
| Diagnostics | Crash reports, error logs, load times, frame rate | The game |
| Advertising data (only in games that show ads) | Ads shown and tapped, time watched, rewarded ads completed, approximate location from the IP address, the advertising identifier if allowed | Ad partners' software inside the game |
| Support data | Your email address, the content of your message, attachments, Store receipts and device details you choose to give us | You |
| Website data | IP address, browser type and pages requested, kept in the hosting provider's security logs | Your browser, through our hosting provider |
We do not collect names, contact details or precise location in the games, and we do not process sensitive categories of data. Do not include health, financial or other sensitive information in support messages.
| Purpose | Data used | Legal basis where the GDPR applies |
|---|---|---|
| Running the game and saving your progress, including across devices | Identifiers, gameplay data | Performance of the contract (the Terms of Use) |
| Delivering purchases, restoring them and handling refund disputes | Purchase data, identifiers | Performance of the contract; legal obligation (tax and accounting records) |
| Finding and fixing bugs; balancing difficulty and the in-game economy; deciding which features to build | Gameplay data, device data, diagnostics | Legitimate interest in improving a product that many people use, pursued with pseudonymous data |
| Answering support requests | Support data, identifiers | Performance of the contract; legitimate interest in helping players |
| Preventing cheating, fraud and abuse, and keeping the service secure | Identifiers, gameplay data, purchase data | Legitimate interest in protecting the service and other players |
| Showing ads and measuring them, in games that have ads | Advertising data | Consent, for personalised ads and tracking; legitimate interest, for contextual ads and ad fraud prevention |
| Advertising our own games on other apps and platforms | Advertising identifier, install and purchase events | Consent where the law requires it; otherwise legitimate interest |
| Complying with the law and handling legal claims | Whatever the matter requires | Legal obligation; legitimate interest in defending claims |
We do not sell personal data for money, and we do not use it to make decisions that have legal or similarly significant effects on you.
Current status: no ads are shown in our games. If we add ads to a game, we will update this policy before the first version with ads is released, and the rest of this Section will apply from then on.
When a game shows ads, the following applies. Personalised ads and cross-app tracking happen only with your permission. On iOS, the system asks whether you allow tracking (the "Allow Tracking" prompt); you can change your answer at any time under Settings, Privacy and Security, Tracking. On Android you can reset or delete the advertising identifier under Settings, Google, Ads. In the EEA, the United Kingdom and Switzerland the game also asks for your consent before any advertising software collects data, and you can change your choice later from the privacy settings in the game.
If you do not allow personalisation, you still see ads, but they are chosen by context rather than by a profile of you, and partners receive only what is needed to serve the ad, count it and prevent fraud.
Ad partners: none at the moment. When we add ads, we will list here each mediation platform and ad network we work with, with a link to its privacy policy, and keep the list current.
United States: some state laws treat the disclosure of advertising identifiers to ad partners for cross-context behavioural advertising as a "sale" or "sharing" of personal data. You can opt out by emailing support@triotapgames.com or, in games with ads, from the privacy settings in the game ("Do Not Sell or Share My Personal Information"). Where our software can read a Global Privacy Control signal, we honour it. We do not knowingly sell or share the personal data of consumers under 16.
| Recipient | What | Why |
|---|---|---|
| Unity Technologies (Unity Gaming Services: Authentication, Cloud Save, Analytics, Cloud Diagnostics; Unity IAP) | Identifiers, gameplay data, diagnostics, purchase events | The game runs on Unity; these services store progress, record gameplay events and report crashes on our behalf |
| Apple | Your App Store account activity, purchases, TestFlight data | Distribution, payment processing, beta testing, under Apple's own terms |
| Your Google Play account activity and purchases (Android) | Distribution and payment processing, under Google's own terms | |
| Ad mediation platforms and ad networks (only in games with ads; listed in Section 4) | Advertising data | Serving and measuring ads; they act as independent controllers for their own purposes |
| Our website hosting and email providers | Website logs; support emails | Hosting the website and running our mailbox |
| Professional advisers, courts and public authorities | What the matter requires | Legal compliance, legal claims, protecting rights and safety |
| A successor to the studio, including a company established to operate it | All data | Continuity of the service; this policy continues to apply |
Our games have no social features, so nothing is shared with other players. Providers that act on our behalf are bound by data processing agreements and may use the data only for the purposes we set.
We are located in Israel. The European Commission and the United Kingdom recognise Israel as providing an adequate level of data protection, so data may flow from the EEA and the United Kingdom to us on that basis. Our providers process data in the United States and the European Union. Where a provider is certified under the EU-US Data Privacy Framework and its UK extension, we rely on that certification; otherwise we rely on the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for a copy of the safeguards that apply to a particular transfer.
| Data | Retention |
|---|---|
| Raw gameplay and analytics events | 13 months from collection, then deleted automatically |
| Per-player statistics derived from those events (levels reached, sessions, spend) | Until you ask us to delete them; the request also removes the raw events within 30 days |
| Player account (the anonymous player ID) and cloud-saved progress | Kept while you play. Deleted on request. We may delete saves not used for 24 months, as the Terms of Use allow |
| Crash reports and diagnostics | Up to 90 days |
| Purchase events linked to your player ID | 13 months, together with the gameplay events, unless needed longer for a refund dispute or fraud case |
| Store receipts and transaction records | Held by Apple or Google under their own policies. Our bookkeeping copy is the Stores' payout reports, which do not identify you; we keep them 7 years as Israeli tax law requires |
| Support emails | 2 years after the last message in the thread |
| Advertising data | Held by the ad partners under their own policies; our copy is aggregate reporting only |
| Website security logs | Up to 30 days, at the hosting provider |
| Records of privacy requests | 24 months after the request is closed |
8.1 Everyone. You can ask us what data is linked to your installation, ask us to correct or delete it, object to a use, or withdraw a consent you gave. Email support@triotapgames.com and include the player ID shown under Settings in the game; without it we have no way to tell which data is yours, because we do not hold names or email addresses. We reply within one month, or within 45 days where United States law allows, and tell you if we need more time. We may ask you to confirm that you control the installation, for example by sending a screenshot of the player ID from the device.
8.2 EEA, United Kingdom and Switzerland. You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, including objection to direct marketing, and the right to withdraw consent at any time without affecting earlier processing. You may complain to the supervisory authority of your country; the EEA authorities are listed by the European Data Protection Board, and the UK authority is the Information Commissioner's Office.
8.3 Israel. Under the Protection of Privacy Law, 5741-1981, you have the right to inspect data held about you and to request that inaccurate data be corrected or deleted. Complaints may be made to the Privacy Protection Authority.
8.4 United States. Residents of California and of other states with consumer privacy laws have the right to know what personal data we collect, use and disclose and from what sources, to access and receive a copy of it, to correct it, to delete it, to opt out of its sale or sharing and of targeted advertising, and not to be discriminated against for using these rights. You may appeal a decision we make on a request by replying to it. An authorised agent may act for you with your written permission. For the purposes of these laws, the categories we collect are identifiers, commercial information, internet or other network activity, coarse geolocation and, through ad partners, inferences; the only disclosures that may count as a sale or sharing are those to ad partners described in Section 4.
8.5 Elsewhere. Residents of other countries, including Brazil, Canada, Australia, Japan and Korea, have similar rights under local law and can use the same contact address.
Our games are made for a general audience and are not directed to children under 13. We do not knowingly collect personal data from children under 13, and in the EEA and the United Kingdom we do not knowingly process the data of anyone below the local age of digital consent on the basis of their own consent. If you believe a child has used our games in a way that this policy does not allow, email us and we will delete the data linked to that installation. Personalised advertising is not shown to users we have reason to believe are children.
Data travels over encrypted connections. It is stored with providers that maintain recognised security certifications, and access on our side is limited to the people who operate the game. We hold no payment card data. If a breach puts your rights at risk, we will notify you and the competent authority as the law requires. No system is completely secure, so keep your device and your Store account protected.
The game adjusts difficulty, rewards and offers according to fixed rules that apply to every player, based on gameplay data. None of this produces decisions with legal or similarly significant effects on you, and no human profile is built from it.
If you play a pre-release build through Apple's TestFlight, Apple collects installation data, crash reports and any feedback you submit through TestFlight and shares them with us under Apple's terms. The rest of this policy applies to the build in the same way as to a released game.
triotapgames.com is a static site. It sets no analytics or advertising cookies. Our hosting provider may set a strictly necessary security cookie to tell browsers from automated traffic; it expires after about 30 minutes.
When we change this policy, we update the version and date at the top. If a change materially affects how we use your data, we will tell you inside the game at least 30 days before it takes effect, unless the law requires the change sooner. Earlier versions are available on request.
support@triotapgames.com
Triotap Games, Michael Landau, Israel