Privacy Policy

Last updated: August 22, 2026

This privacy policy explains how personal data is processed when you use the Light Tap app and the lighttap.app website.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Giuseppe Loggia
Karwendelstr. 8
81369 Munich
Germany

Email: support@lighttap.app

2. Principles of data processing

Light Tap is designed to process as little personal data as possible.

There are no accounts of my own and no registration.

I operate no user backend of my own for Light Tap and no analytics of my own. I do not build personal user profiles of my own and I do not sell personal data.

Game progress is stored locally on the device as a matter of principle and can be synchronised through Apple's iCloud infrastructure.

Services from Apple, Google and Cloudflare are used for certain functions. Personal data may be processed when they are used. The details are described below.

3. Local game data and device features

Light Tap stores game information such as, in particular:

game progress
unlocked levels
scores
settings
other local game state

on the device used, as a matter of principle.

This data is not transmitted to any Light Tap server of my own.

Where synchronisation through iCloud is enabled and available, certain saved-game data may be synchronised between supported Apple devices through the user's iCloud account.

If data held only locally is removed by deleting or resetting the app, Light Tap cannot restore it. For data that has been synchronised through iCloud, the settings and terms of the relevant Apple or iCloud account apply in addition.

Light Tap optionally allows a profile picture to be chosen. The selection is made explicitly by the user through the iOS photo picker (PhotosUI). Light Tap receives only the image selected and no access to the photo library as a whole.

The selected image is stored locally on the device as the profile picture only. It is not transmitted to any Light Tap server — there is none for this purpose — and it is not part of Light Tap's iCloud Key-Value synchronisation.

In addition, Apple's Image Playground can optionally be used to have a profile picture generated. This is an Apple system feature that Light Tap merely invokes. Generating the image and the processing involved take place within Apple's systems; Apple's privacy information on Apple Intelligence applies to this. The result is then stored locally in the same way as a picture chosen by the user.

For visual tilt and parallax effects in individual views, Light Tap reads device motion data through CoreMotion while the view concerned is active. These values are used solely for presentation. They are not stored and not transmitted by Light Tap. No separate iOS permission request is required for the current implementation. This is neither location data nor an analysis of usage behaviour.

Before advertising is delivered for the first time, Light Tap asks once whether the user is aged 16 or older or under 16. Only this selection is requested. Date of birth, year of birth, exact age, name, email address and a user account are not requested.

Only the age band selected is stored, as a single value held locally on the device. This value is not transmitted to any Light Tap server — there is none for this purpose — it is not part of Light Tap's iCloud synchronisation, and it is removed when the app is deleted.

The age band is used solely to set the age-related settings for ad requests described in section 22. It is not evaluated for advertising purposes, not used for profiling and not passed on to third parties. The age statement itself is not transmitted to Google; only the technical settings derived from it for ad delivery are.

The selection made can be changed at any time in Light Tap's settings under “Age group”. Following a change, the settings described in section 22 are adjusted to the new value immediately. Only the current selection continues to be stored; no history of earlier statements is kept.

4. Advertising through Google AdMob

The free version of Light Tap contains advertising through Google AdMob.

Within the European Economic Area the provider of the service is, in particular, Google Ireland Limited.

Google may process personal and technical data in connection with the delivery of advertising.

Depending on consent, device settings, region and the type of ad delivery, this may include in particular:

IP address
device information
device and advertising identifiers
the Advertising Identifier (IDFA), where available and permitted
an approximate location derived, for example, from the IP address
information about advertising shown
interactions with advertisements
diagnostic information
information used for fraud and abuse prevention
technical information about the use of the advertising service

In connection with AdMob, Google and the operator of Light Tap may each act as independent controllers in respect of certain processing operations.

Google may involve further advertising technology providers when delivering advertising. Where required, the providers, purposes and choices relevant to the individual user are presented through the consent and privacy system provided by Google.

Light Tap uses banner advertising and interstitial advertising in particular.

After purchasing Light Tap Premium, no AdMob advertisements are shown within Light Tap.

The lighttap.app website does not use Google AdMob.

5. Legal bases for advertising and consent

Where consent is required for personalised advertising or for accessing or storing information on the terminal equipment, the corresponding processing takes place on the basis of Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Consent given is voluntary and can be changed or withdrawn at any time with effect for the future.

The lawfulness of processing carried out on the basis of consent up to the point of withdrawal remains unaffected by the withdrawal.

If no such consent is given, the privacy and advertising system in use determines — taking account of the statutory requirements and the privacy signals present — whether and in what restricted form advertising may be delivered.

Depending on the legal requirements, non-personalised or otherwise restricted forms of advertising may be used in particular.

Even where ad delivery is restricted, technically necessary information may be processed, in particular the IP address required to transmit an advertisement as well as data used for security, error prevention and fraud prevention.

Where such processing does not require consent and is legally permissible, it may be based in particular on Art. 6(1)(f) GDPR.

The legitimate interests consist in particular in the secure technical provision of the service and in preventing fraud, abuse and technical disruption.

6. Google User Messaging Platform (UMP)

Light Tap uses the Google User Messaging Platform (UMP) to manage the privacy information and consents required in connection with Google AdMob.

UMP may be used in particular to

determine whether a privacy or consent dialog is required,
provide the required privacy information,
collect consents and privacy decisions,
manage privacy signals,
determine the permitted form of ad delivery, and
allow privacy settings to be changed later.

For users in the European Economic Area and in further regions, the required privacy information and choices can be provided through UMP.

Where Google provides for privacy options to be shown again to a user, or where legal requirements make this necessary, Light Tap provides corresponding access within the app.

7. Apple App Tracking Transparency

Google's privacy and consent system and Apple's App Tracking Transparency (ATT) are separate mechanisms.

Where Light Tap or an integrated service intends to carry out tracking within the meaning of Apple's rules for which tracking permission is required, the App Tracking Transparency request provided by iOS is used.

Without the required ATT permission, the Advertising Identifier (IDFA) must not be used for such tracking.

Tracking permission that has been granted can be changed or withdrawn at any time through the privacy and tracking settings of iOS.

Declining tracking permission does not prevent Light Tap from being used.

8. Apple Game Center

Light Tap uses Apple Game Center in particular for:

leaderboards
achievements
game-related Game Center features
multiplayer and Versus features

Using Game Center requires Game Center to be available on the device and to have been set up or enabled accordingly by the user.

In connection with Game Center, Apple may process in particular the following information: Game Center player name or alias, Game Center identifier, avatar or profile information, scores, achievements, game activity as well as multiplayer and matchmaking information.

In Versus mode, Game Center can connect players with one another.

In order to run a match, game-related data may be processed or transmitted through the Game Center infrastructure or between the participating devices.

Light Tap does not operate a matchmaking server of its own for this purpose.

Where processing within the responsibility of Light Tap is necessary in order to provide a Game Center feature requested by the user, it takes place on the basis of Art. 6(1)(b) GDPR.

Apple's privacy information and terms apply in addition to processing carried out by Apple.

9. iCloud

Light Tap uses Apple's iCloud features, in particular iCloud Key-Value Storage, to synchronise certain saved-game data.

This allows game information to be synchronised between supported devices through the user's personal Apple or iCloud account.

I operate no cloud backend of my own for this and have no direct access to the user's personal iCloud account.

Where the synchronisation feature is used and processing takes place within the responsibility of Light Tap, it is carried out in order to provide the requested feature on the basis of Art. 6(1)(b) GDPR.

Apple's privacy terms apply in addition to processing within the Apple and iCloud infrastructure.

10. In-app purchase and Light Tap Premium

Light Tap offers a single optional premium purchase.

Light Tap Premium removes the advertising within the app.

It is a one-time purchase and not a subscription.

Payment is handled through Apple's App Store and in-app purchase infrastructure.

In particular, I do not receive any:

credit card numbers
bank details
complete payment information
billing addresses

from Apple.

However, in order to determine and restore premium status, technical transaction, purchase and entitlement information may be processed through Apple's StoreKit and App Store infrastructure.

Where such processing takes place within the responsibility of Light Tap, it is carried out in order to perform and administer the purchase on the basis of Art. 6(1)(b) GDPR.

Apple's privacy and contractual terms apply in addition to payment handling and processing within the App Store.

11. The lighttap.app website

The lighttap.app website is a static information website.

It contains no:

user accounts
registration
comment functions
contact forms
personalised advertising
Google AdMob advertising
marketing trackers of my own
social media pixels

I do not build personal visitor profiles of my own on the website.

The services described for the app — Google AdMob, Google UMP, Game Center, iCloud, Apple's in-app purchase, Apple's Image Playground and the reading of device motion data — are not used on the website.

12. Website language setting

The website allows a language to be selected.

The selected language is stored locally in the browser using localStorage so that the website can be shown again in the desired language on the next visit.

This information is not used for advertising or analytics purposes and is not evaluated by me to build a user profile.

The storage serves solely to honour the language setting explicitly chosen by the user.

Where Section 25 TDDDG applies, this access and storage takes place on the basis of Section 25(2)(2) TDDDG.

No consent banner is used for this strictly necessary storage.

13. Delivery of the website through Cloudflare

The website is delivered through infrastructure operated by Cloudflare, Inc., in particular using Cloudflare Workers and Static Assets.

In doing so, Cloudflare may process technically necessary information in order to receive and route requests, deliver content and protect the website and infrastructure against technical attacks and abuse.

This may include in particular:

IP address
date and time of a request
the address or resource requested
browser information
operating system and device information
HTTP headers
routing and connection information
technical security information

The processing serves the secure, stable and performant provision of lighttap.app.

The legal basis for processing within my responsibility is Art. 6(1)(f) GDPR.

My legitimate interests consist in providing the website securely, reliably, quickly and protected against attacks.

Where Cloudflare processes personal data on my behalf, this takes place on the basis of the corresponding data protection and data processing terms agreed with Cloudflare.

14. International data transfers

When services of internationally operating providers such as Google, Apple and Cloudflare are used, processing of personal data outside Germany or the European Economic Area cannot be entirely ruled out.

Where personal data is transferred to a third country, this takes place only in compliance with the requirements of Art. 44 et seq. GDPR.

For this purpose, an adequacy decision of the European Commission, a valid certification of the recipient under a recognised data protection framework, or appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission may be used in particular.

For certain transfers to the United States, Cloudflare states in particular the EU-U.S. Data Privacy Framework and, in addition, Standard Contractual Clauses.

Google and Apple likewise provide their own information on the transfer mechanisms they use for international data transfers.

15. Technical operational information

In connection with providing its infrastructure, Cloudflare may make technical statistics and operational information available.

I do not use such information to build personal visitor profiles or to track individual visitors across different services.

No marketing or user tracking software of my own is used on lighttap.app.

16. Retention

As a matter of principle, personal data is processed only for as long as is necessary for the respective purpose or as long as statutory retention obligations exist.

For the individual areas, the following applies in particular:

Local game data: Until it is reset within the app, deleted from the device or removed by uninstalling the app, unless it is additionally present through iCloud.
iCloud data: According to the settings, features and retention mechanisms of the relevant Apple or iCloud account.
Game Center data: According to the applicable terms and retention rules of Apple.
AdMob and advertising data: According to the applicable retention rules of Google and of any advertising technology providers involved.
Cloudflare data: In accordance with the storage and retention rules applicable to the provision, security and operation of the relevant Cloudflare services.
Local language setting: Until the corresponding localStorage entry is deleted by the user or replaced by a new selection.

17. Recipients and categories of recipients

Depending on how Light Tap and lighttap.app are used, the following providers in particular may receive or themselves process personal data:

Google, in particular in connection with AdMob and UMP
advertising technology providers integrated by Google or disclosed in the privacy dialog
Apple, in particular in connection with the App Store, in-app purchases, Game Center, iCloud and Image Playground
Cloudflare, in connection with the provision and protection of the website

Any other disclosure of personal data by me takes place only where there is a legal basis for it or where a statutory obligation exists.

I do not sell personal data.

18. Data protection rights

Where the statutory requirements are met, data subjects have in particular the following rights:

right of access under Art. 15 GDPR
right to rectification under Art. 16 GDPR
right to erasure under Art. 17 GDPR
right to restriction of processing under Art. 18 GDPR
right to data portability under Art. 20 GDPR
right to object under Art. 21 GDPR
right to withdraw consent under Art. 7(3) GDPR

Consent given can be withdrawn at any time with effect for the future.

The lawfulness of processing carried out on the basis of the consent up to the point of withdrawal remains unaffected.

For questions or to exercise your rights you can contact me at: support@lighttap.app

Where Google, Apple or other providers are independent controllers in respect of a particular processing operation, data subject rights may additionally be asserted directly against the respective provider.

19. Objection to processing based on legitimate interests

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, there is a right under Art. 21 GDPR to object to that processing on grounds relating to the data subject's particular situation.

20. Changing advertising and tracking settings

Privacy and advertising decisions made through Google UMP can be reopened and changed within Light Tap, where access to privacy options is required or available for the individual user.

Apple's tracking permission can be changed independently of this at any time through the iOS system settings.

Using the game itself does not depend on agreeing to personalised tracking or personalised advertising.

21. Right to lodge a complaint

Under Art. 77 GDPR there is a right to lodge a complaint with a data protection supervisory authority.

The authority responsible for the controller's place of establishment is in particular:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

The right to contact another competent data protection supervisory authority remains unaffected.

22. Minimum age and young people

Light Tap is intended for users aged 13 and older.

The app is not intended for children under 13 and is not offered as an app for children or in Apple's “Kids” category.

Light Tap has no accounts of its own, no registration and no personal profiling of its own.

The App Store age rating is determined in accordance with the information provided in App Store Connect or — where necessary and provided for by Apple — set to a higher age rating.

An app's age rating does not replace data protection requirements. Where particular data protection or advertising safeguards are required for underage users because of their age, their region or applicable statutory provisions, the systems and settings provided for this purpose by the platforms and services used are taken into account.

In particular, specific age-related safeguards may apply to ad requests. Personalised advertising and tracking are used only to the extent permitted under the applicable legal requirements and the user's decisions and settings.

Light Tap does not invite children under 13 to provide personal data to the operator.

In order to give effect to these safeguards, Light Tap asks once, before advertising is delivered for the first time, which age band applies (“16 or older” or “under 16”). How this statement is stored is described in section 3. A uniform threshold of 16 years is used, this being the highest age that Art. 8 GDPR provides for in relation to the capacity to consent to information society services.

If “under 16” is selected, ad requests are flagged to Google as requests from users below the age of consent, and the age-related setting for ad delivery is set accordingly. In this case Light Tap does not display an App Tracking Transparency prompt and does not request access to the device advertising identifier. Personalised advertising and tracking therefore do not take place; only non-personalised or otherwise limited advertising is delivered.

If “16 or older” is selected, the regular flow applies: the consent dialogue of the Google UMP SDK is displayed, and personalised advertising and tracking take place only to the extent consented to there and, where applicable, through App Tracking Transparency.

Irrespective of the age band selected, the maximum content rating of the advertising delivered is limited to the rating intended for teenagers.

Light Tap is not configured as a child-directed app within the meaning of the setting provided by Google for that purpose. That setting is reserved for offerings directed at children; Light Tap is intended for users aged 13 and older.

23. No automated decision-making by Light Tap

I do not carry out any automated decision-making of my own, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning users or similarly significantly affects them.

The selection and delivery of advertising may, however, be carried out automatically by Google or by the advertising technology providers involved.

The respective privacy information of the providers involved applies to that processing.

24. Privacy information of the providers used

Further information on the processing of personal data can be found in particular in the official privacy information of the following providers:

25. Changes to this privacy policy

This privacy policy will be adapted when Light Tap, the website, the services used or the legal and technical circumstances change.

The current version published on lighttap.app applies.

Last updated: August 22, 2026