Quick navigation
1. Scope and definitions
"Services" means our mobile games (including HiBeatz), websites (including but not limited to funtapx.com), and any related online features, customer support, marketing, and community activities that link to or reference this Privacy Policy.
"Personal data" means any information relating to an identified or identifiable individual. "Processing" means any operation performed on personal data, such as collection, storage, use, disclosure, and deletion.
This Privacy Policy does not apply to third-party websites, apps, or services that we do not control. Their practices are governed by their own policies.
2. Data we collect
The types of data we collect depend on how you interact with the Services and your device settings. We may collect the categories below.
2.1 Data you provide directly
- Account and profile data: username, display name, avatar, country/region, preferred language.
- Contact data: email address, support requests, survey responses, bug reports, feedback.
- Gameplay and community content: scores, achievements, session notes, chat/messages, posts, and other user-generated content where features are available.
- Purchase-related information: receipts and transaction metadata returned by platform stores (we do not collect full card numbers).
- Marketing preferences: subscriptions, opt-in/opt-out choices.
2.2 Data collected automatically
- Identifiers: device identifiers (e.g., IDFA/AAID where available), IP address, app instance IDs, platform store IDs, internal user IDs.
- Device and technical data: device model, OS version, language, time zone, screen resolution, network type, crash logs, performance metrics, diagnostics.
- Usage data: app launches, feature interactions, session length, in-app events, referral/attribution data, browsing on our sites, cookie identifiers.
- Location data: country/region (coarse). If you explicitly allow precise location via your device OS, we may process it for relevant features; you can disable at any time in OS settings.
- Security/anti-abuse: signals required to detect fraud, cheating, or Terms violations.
2.3 Data from third-party sources
- Login/social providers (if you choose to link): limited profile data as permitted by the provider and your settings.
- App stores and payment processors: purchase status, refunds, fraud flags, subscription state.
- Advertising, attribution, and analytics partners: campaign performance, installs, and engagement metrics.
- Publicly available sources: content you make public in our communities or official social channels.
3. How and why we use your data
We process data to operate, improve, and protect the Services, and to comply with legal obligations. Representative purposes include:
- Provide, operate, and maintain the game and website; create and manage accounts; enable gameplay, leaderboards, social features, and cloud backups.
- Verify and process purchases and subscriptions; provide receipts; handle refunds and customer support.
- Personalize your experience, including in-game offers, difficulty tuning, and non-essential notifications where permitted.
- Measure performance, fix bugs, prevent crashes, and enhance quality through analytics and diagnostics.
- Show ads (including contextual or personalized where permitted by law and your settings) and measure their effectiveness.
- Prevent fraud, cheating, and abuse; enforce our Terms; protect our users, the public, and our rights.
- Comply with applicable laws, respond to lawful requests, maintain business/financial records, and perform audits.
4. Legal bases (including GDPR/UK GDPR)
Where required by law (for example in the EEA/UK), we rely on one or more of the following legal bases:
- Performance of a contract: to provide the Services you request (e.g., gameplay, purchases, account features).
- Legitimate interests: to improve Services, ensure security and integrity, combat fraud, and run reasonable marketing; we balance these interests against your rights.
- Consent: for certain cookies, personalized ads, push notifications, or precise location, as required by local laws. You may withdraw consent at any time.
- Legal obligation: to comply with tax, accounting, regulatory, and law enforcement requirements.
- Vital interests or public interest: in rare cases, to help prevent serious harm.
6. Ads, analytics, anti-cheat and fraud prevention
We use internal tools and third-party SDKs/APIs to support analytics, advertising, anti-cheat, and fraud prevention. These technologies may collect device identifiers, IP address, app events, approximate location, diagnostic data, and ad interaction data.
Current key partners (non-exhaustive; subject to change) include, for example:
Where required, we will ask for your consent before using technologies that rely on personal data for advertising or analytics. You can change preferences in the in-game settings (where available), your device settings, and via cookie controls on our websites.
8. International transfers
We operate globally and may process your data in countries other than your own. When we transfer personal data internationally, we use recognized safeguards, such as Standard Contractual Clauses, and implement appropriate technical and organizational measures.
9. Data retention and security
9.1 Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. We periodically review, de-identify, or delete data that is no longer needed.
9.2 Security
We implement administrative, technical, and physical safeguards designed to protect personal data (e.g., HTTPS/TLS encryption in transit, access controls, monitoring). No method is 100% secure; if we learn of a security incident that may affect you, we will notify you and/or regulators as required by law. Where GDPR/UK GDPR applies, we will notify the competent authority within 72 hours of becoming aware of a personal data breach, where feasible.
9.3 Data storing
Your personal data may be stored and processed on cloud infrastructure and servers located in multiple countries. We apply appropriate safeguards, including encryption and access controls, and for cross-border transfers we use recognized mechanisms described in Section 8.
10. Your rights and choices
Depending on your jurisdiction, you may have rights to request access, correction, deletion, portability, restriction, or objection to certain processing, as well as to withdraw consent where processing is based on consent.
- Marketing: you can unsubscribe via links in emails or within in-app settings.
- Personalized ads: adjust device settings, in-game settings (where available), and cookie preferences on the web.
- Access, deletion, correction, portability, appeal: contact us as described in Section 14. We may need to verify your identity before acting on requests (for example, by asking you to log in, confirm your email, or provide unique account details). Authorized agent requests will be honored where permitted by law when accompanied by valid authorization.
- Automated decision-making and profiling: we use automated systems for functions such as personalized ads, security, fraud detection, and matchmaking. Where applicable law grants you rights, you may object to decisions that have legal or similarly significant effects, and request human review.
11. Children’s privacy
Our Services are generally not directed to children under 13 (or the age defined by local law). We do not knowingly collect personal data from children without appropriate consent. If you believe we have collected a child’s data, contact us and we will delete it unless we have a legal obligation to retain it. Certain features may be limited for younger users to create a safer experience.
12. Region-specific notices
12.1 United States (including California)
- We disclose categories of personal information as described in Sections 2–6 for business purposes (e.g., service provision, security, and advertising). We do not collect Sensitive Personal Information (such as government identifiers or biometric data) unless explicitly stated.
- California residents: you may have rights to know/access, delete, correct, opt out of “sale”/“sharing” for cross-context behavioral advertising, and non-discrimination. Use device and in-game settings or contact us to exercise these rights. Where available, you may also use a “Do Not Sell or Share My Personal Information” link in the website footer. We honor Global Privacy Control (GPC) signals where applicable.
- Verification and response: upon receiving a verifiable consumer request, we will respond within 45 days (and may extend once for an additional 45 days with notice where permitted). If you use an authorized agent, we may require proof of authorization and your verification.
12.2 EEA/UK (GDPR/UK GDPR)
- You have the rights described in Section 10, subject to legal limits. You may also lodge a complaint with your local supervisory authority. Where we rely on legitimate interests, you may object, and we will assess your request in light of your circumstances.
12.3 Brazil (LGPD) and other regions
- We process data under legal bases similar to those in Section 4, including consent, contract, legal obligation, and legitimate interests. Regional rights requests can be submitted via the contact methods in Section 14.
- Colorado, Connecticut, Virginia: you may have additional rights, including the right to appeal a denial of a privacy request. If we deny your request, we will provide instructions for submitting an appeal.
- Nevada: we do not sell “covered information” as defined by Nevada law. You can contact us with any questions.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post updates here and, if changes are material, provide additional notice (e.g., in-app or by email where appropriate). Your continued use of the Services after the effective date means you accept the updated Policy.
14. Contact us
Data Controller: Fun Tap X. Ltd
- Email: support@funtapx.com
- Website: https://funtapx.com
When submitting a privacy request, please include: (a) the game(s) you use, (b) your platform and region, (c) your in-app user ID (if available), and (d) the right you wish to exercise.