Privacy Policy

Last updated: June 24, 2026

One Tap World ("One Tap World", "we", "us") is an anonymous-first daily skill challenge available as a mobile app and website. This Privacy Policy explains what data we process, why, who we share it with, and the choices and rights you have. You can play without creating a traditional account, without an email address, and without giving us your name.

Who is responsible

One Tap World is the controller of the personal data described here. For any privacy question or request, contact us at support@onetapworld.com.

Data we process

We keep data collection to the minimum needed to run the game and its leaderboards.

• Anonymous account identifiers. When you first connect, we create an anonymous Firebase Authentication account and a unique account ID. We also generate an on-device identifier and a public player tag (for example @tap1234567). These let us save your attempts, keep one ranked attempt per daily challenge, and protect the game from abuse. We do not require an email address, phone number, or social login.
• Profile details you choose. A display name, a country, an in-app avatar preset, and your favourite countries and players (kept private to you). If you do not set them, defaults are used (for example a "Tapper" name and a country derived from your device language settings).
• Gameplay data. Challenge results such as score, timing error, challenge and date identifiers, completion time, attempt number, streaks, and practice results.
• App settings. Preferences such as language, theme, sound, haptics and reduced motion.
• Technical and service data. App version and platform (iOS, Android or web) sent with score submissions, and data our infrastructure providers process to operate and secure the service (such as IP address and request logs handled by Google).
• Advertising identifiers. If you watch an optional rewarded ad, Google AdMob may process advertising identifiers and related data to serve and measure ads. On iOS this is subject to the App Tracking Transparency prompt, and ads are only requested in line with the consent choice you make (see "Advertising and consent").

What we do not collect

We do not request GPS or precise location, contacts, camera, photos, microphone recordings, payment details, or public chat content. Your country is either chosen by you or derived from your device's language/region settings, not from GPS. We do not run our own analytics or behavioural tracking SDK inside the app.

How we use data

• To provide the daily challenge, practice modes, results history, streaks and leaderboards.
• To enforce one official ranked attempt per daily challenge and to detect and prevent cheating and abuse.
• To show your profile choices and keep them consistent across sessions and devices.
• To operate Tap Battles you create or join (a link-only, short-lived challenge among friends).
• To serve optional rewarded ads and to keep the service reliable and secure.

Information that is public

Leaderboards are a core feature. Your display name, player tag, chosen country, avatar and scores are visible to other players in the app and may also appear on public leaderboards on our website. They are also accessible through our public leaderboard interface. Please do not use a display name that reveals information you want to keep private. Your favourite countries and players, your settings, and your internal identifiers are not shown publicly.

Legal bases (EEA/UK)

• Performance of a contract — to provide the game, your profile and leaderboards.
• Legitimate interests — to secure the service, prevent cheating and abuse, and keep rankings fair.
• Consent — for personalized advertising and any use of advertising identifiers where consent is required; you can withdraw consent at any time.

Service providers

We use a small number of providers who process data on our behalf:

• Google Firebase — anonymous authentication, database, backend functions and website hosting.
• Google AdMob — optional rewarded advertising and ad measurement, including a consent management prompt.
• Redis Cloud — a fast leaderboard cache that stores account IDs and ranking scores.
• restcountries.com — public country reference data only; no personal data is sent there.

These providers, in particular Google, may process data on infrastructure in multiple countries. We do not sell your personal data, and we do not share it with third parties for their own independent marketing.

Advertising and consent

The app may offer an optional rewarded ad (for example to unlock a bonus attempt). Banner and interstitial ads are not used in the core game. Before requesting ads we show Google's consent prompt (UMP). On iOS, App Tracking Transparency controls whether an advertising identifier can be used for personalized ads; if you decline, ads are served on a non-personalized basis where available. You can change your choice in your device settings at any time.

Data storage and international transfers

Our primary backend (authentication-linked data, database and functions) is configured to run in the European Union, and our leaderboard cache is hosted in the EU. Because Google operates globally, some data may be transferred to or accessed from other countries, subject to appropriate safeguards such as Standard Contractual Clauses.

Retention

We keep gameplay and profile data for as long as your anonymous account exists and as needed to operate leaderboards and prevent abuse. When you delete your account, we delete or anonymize the personal data associated with it as described below. Aggregated, non-identifying statistics (such as anonymous daily score histograms) may be retained.

Deleting your account and data

You can delete your account at any time in the app under Settings → Delete account. This permanently deletes your profile, public profile, player tag, scores, ranked attempts, leaderboard entries, practice history and any Tap Battles you host, removes your entries from our leaderboard cache, and deletes your anonymous authentication account. It also clears the data stored on your device. This action cannot be undone. If you are unable to use the in-app option, contact support@onetapworld.com and we will action your request.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Because accounts are anonymous, much of your data is already under your direct control in the app, and account deletion provides erasure. To exercise other rights, contact support@onetapworld.com. You may also have the right to complain to your local data protection authority.

Children

One Tap World is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

Security

We use reputable infrastructure providers and apply technical and organizational measures to protect data. No method of transmission or storage is completely secure, but we work to protect your information and limit what we collect.

Changes to this policy

We may update this Privacy Policy as the product evolves. We will revise the "Last updated" date above and, where appropriate, provide additional notice in the app or on the website.

Contact

For privacy questions or requests, contact: support@onetapworld.com