← Back

Privacy Policy

Last updated: June 2025

1. Introduction

TerraTap ("we", "our", or "us") operates a real-time multiplayer location-based game. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use TerraTap.

2. Information We Collect

  • Account information: username and bcrypt-hashed password.
  • Email address (optional, used only for password recovery).
  • Location data: your GPS coordinates are used to place your character on the map and to determine land ownership. Location is processed in real time and your last known position is stored server-side to restore your session.
  • Gameplay data: land owned, TerraB balance, diamonds, upgrade levels, spin history, season pass status, login streak, and challenge/quest progress.
  • Device info: browser type and viewport size, used only for rendering the game correctly.
  • Chat messages: global in-game chat messages are stored temporarily and visible to all active players.

3. How We Use Your Information

  • To authenticate you and maintain your game session.
  • To display your character and land tiles on the shared map.
  • To power the leaderboard, government title system, and social features.
  • To process in-app purchases (diamonds, Season Pass) via Stripe — we never see or store your card details.
  • To send password reset emails if you request them.
  • To detect and prevent cheating or abuse.

4. Third-Party Services & Data Sharing

We do not sell or rent your personal data. We share data only with the following third-party services, each subject to their own privacy policies:

  • Google OAuth — if you choose "Continue with Google", Google authenticates you and provides your Google account ID and email address to us. We store only the account ID and email; we never receive your Google password. Subject to Google's Privacy Policy.
  • Firebase (Google) — used to deliver push notifications to the mobile app. Your device's FCM registration token is stored on our server and sent to Firebase to route notifications. Subject to Firebase's Privacy Policy.
  • Stripe — for payment processing (diamond packs, Season Pass). Stripe receives your card details directly; we never see or store them. Subject to Stripe's Privacy Policy.
  • Replit — our hosting and database provider. Your data is stored on Replit's infrastructure. Subject to Replit's Privacy Policy.
  • Law enforcement or authorities if required by applicable law.

5. Location Data

Your GPS coordinates are sent to our server only while the game is open and only after you grant location permission. We do not track you when the app is closed. Your precise location is never shared publicly — other players only see your character on tiles you own, not your exact GPS position.

6. Data Retention

Your account data is retained for as long as your account exists. You can permanently delete your account and all associated data at any time via Settings → Delete Account inside the game — deletion is immediate and permanent. Chat messages may persist for up to 24 hours after account deletion. Backup copies may be retained for up to 30 days before being purged from all systems.

7. Security

Passwords are hashed using bcrypt. All traffic is served over HTTPS. Sessions are server-side and expire after 30 days of inactivity. We follow industry-standard practices but cannot guarantee absolute security.

8. Children

TerraTap is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.

9. Your Rights

  • Access: you can view your profile data in-game.
  • Deletion: delete your account and all associated data via Settings → Delete Account at any time.
  • Correction: contact us to correct inaccurate data.

10. Contact

For privacy enquiries or data subject requests, email us at privacy@terratap.app.