TRAPSLAP! Privacy Policy

This English page is a machine translation of the Korean original, so some wording may read a little off.

TRAPSLAP! (Android package net.mrlatte.trapslap) is a one-finger runner game where you beat a short trap course, add one trap and send it to your friends as a link. It is operated by Mr. Latte. This policy applies to the game app and to the course pages at trapslap.web.app. Contact us at hello@mrlatte.net.

Your game account

When you first open the game, it creates an anonymous account with Firebase Authentication. We do not ask for your name, email address, phone number or password. The account is a random user ID. The game gives you a player name made of words and numbers, such as SNEAKY POTATO 4821. You can roll a new one, but you cannot type your own. Players cannot write messages or upload pictures or voice in the game. The only things players create are trap layouts and fixed reaction stamps.

The account belongs to the device that created it. If you uninstall the app or clear its storage, the game cannot connect you to that account again.

Information stored on our server

To share courses, verify records and run challenges between players, the game stores the following with your user ID in Google Cloud Firestore:

Your player name, the runner and cosmetics other players see, your SURVIVOR and TRAP MASTER levels, and when the account was created.
Courses you publish: the course layout, the traps you placed and their settings, the course code, the number of tries you needed, and the timing of your presses and releases in the run that showed the course can be beaten.
Your results on other players' courses and on the daily course: whether you cleared it, how many tries it took, the timing of your presses and releases in the clearing run (so the server can replay and verify it), the rubber ducks you collected, whether you used a hint, which traps stopped you and how often, and the reaction stamp you picked.
Revenge rallies: who you traded courses with, the round and the score between you.
News the game puts in your inbox (such as a player beating your trap), courses you reported and makers you blocked.
A notification token, if you allow notifications.

Our server keeps request logs (time, IP address, app version and the request) to keep the service secure and fix errors. They are deleted after 30 days.

What other players can see

Other players can see your player name and runner, the courses you publish with their traps, the number of tries you needed for them, and the daily leaderboard (player name, tries and ducks). The maker of a course sees whether you cleared it, how many tries you needed, and your rally score with them. Where players fell on a course is shown to its maker only as combined marks, without names. Anyone with a course link can open the course page and watch the run in which the maker beat that course.

Information on your device

Your settings, LAB TOUR stars and ducks, coins, cosmetics, achievements, daily missions and streak, the try count for each course, the spots where you fell on your recent tries, results waiting to be sent, and a counter used to space full-screen ads are stored on your device. The game also keeps a short record of rewarded ads already paid, so a reward is never given twice. Clearing the app's storage in Android settings or uninstalling the app deletes them.

A course link opens trapslap.web.app. If the app is installed, Android opens the course in the app. If it is not, the page loads the course from our server and shows it. The page uses Google Analytics to count visits and sends Google the pages you open, link opens and install button taps, your device type, your browser and your approximate country. For this it stores cookies in your browser.

The page's install button opens Google Play with the course code attached. After you install, the game reads only that course code from Google Play (Play Install Referrer) to open the same course.

When you share a course, the game draws a course card picture and passes it, a fixed message and the link to the app you choose in Android's share sheet. From there, that app's policy applies.

Notifications

After you send your first course, the game asks whether it may send notifications. If you allow them, we use Firebase Cloud Messaging to tell you two things: when someone fell for or beat your trap (grouped, a few times a day at most) and when it is your turn in a rally. You can turn notifications off at any time in Android settings.

Advertising data

On Android you can choose to watch a rewarded ad in three places: on a result screen, to get the coins of that run a second time; after five failed tries on the same course, to watch the maker's run as a hint; and once a day in the LOCKER, to open a SPECIAL BOX. A reward is granted only when the ad reward is confirmed. When you leave a result screen after every third finished course, one full-screen ad is shown. It is not shown in your first five courses, when you retry the same course, during a challenge opened from a friend's link, while you build, test or send a trap, or right after you watched a rewarded ad on that screen. The game shows no banner ads and no ads during a run, and everything in it can be earned without watching a rewarded ad.

We use Google AdMob and Google's consent tools to prepare and show ads. The advertising SDK may collect and share approximate location inferred from your IP address; interactions such as app launches, ad taps and video views; performance and diagnostic information; and device identifiers such as the advertising ID and app set ID. These are used for advertising, measurement, analytics and fraud prevention. Ads may be prepared while you use the app, before you select an ad button. Whether ads are requested and which information is processed depend on your region, consent status and device settings. User data transmitted by the advertising SDK is encrypted using TLS.

The game applies under-age-of-consent treatment to every ad request, so personalized advertising is not used, and limits ad content to a PG rating. We do not collect dates of birth.

Google handles retention and deletion under its Privacy Policy and its explanation of how Google uses information from apps that use its services. See Google's advertising SDK data disclosure for technical details.

Privacy choices

Where consent is required, Google's consent screen appears before ads are requested. When advertising privacy options are available, open Settings in the game and choose 'PRIVACY CHOICES'. You can also reset or delete your advertising ID in Android's privacy and advertising settings.

Usage statistics

We use Google Analytics for Firebase to improve the game and tune its difficulty. Records of the courses you start and finish (the kind of course, the mode, the number of tries and how the run ended), the courses you publish, share and open from links, and the screens you open are sent to Google. So are the moments a rewarded ad is offered, started or completed and a full-screen ad is shown, how long you play, the device model, Android and app versions, your approximate country estimated from the IP address and an identifier set for each installation. Your player name, your game account ID, contact details and advertising ID are not sent.

The statistics are used only to see what is hard and which features are used, and Google keeps them for up to 14 months. See Firebase privacy information for how Firebase handles data.

App updates

Google Play in-app updates check for new versions. When the game asks the Play Store app on your phone whether a new version exists, the Play Store sends the app version and device information to Google to check. Google Play's terms of service apply to this.

Audio and artwork

Music, sound effects, voice lines and artwork are bundled files. The only permission the game asks for is notifications. It does not request microphone, camera, photo or location access.

International transfer

The game server, notifications, usage statistics and advertising run on services of Google LLC, and the information is transferred to the United States.

Recipient: Google LLC (Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Cloud Messaging, Google Analytics for Firebase, Google AdMob).
Country: United States. Game server data is stored in Google Cloud's us-west1 region (Oregon).
Items: those listed above under "Information stored on our server", "Notifications", "Usage statistics" and "Advertising data".
When and how: sent over the network, encrypted, whenever you use the game.
Purposes: running your account, sharing courses and verifying records, notifications, usage statistics and advertising.
Retention: as described under "Retention and deletion" below.

If you do not want this transfer, you can ask us to delete your data as described below. Course sharing and challenges do not work without the server.

Retention and deletion

Server records are kept while your account is in use. Open Settings in the game and choose DELETE MY DATA to delete your account and its server records right away: your player name, the courses you published (their links stop opening), your results, rallies, inbox, reports, blocks and notification token. Counts that no longer point to you, such as how many players tried a course, may remain. If an account does not open the game for 24 months, we delete it in the same way.

You can also ask for deletion by email. We handle requests within 30 days of receiving them. Because the account is anonymous, please include the PLAYER ID shown in the game's Settings.

Support and your rights

If you email us, we use your reply address and the information you provide to answer and resolve your request. Support records are kept for as long as needed to handle the request. Contact hello@mrlatte.net to request access, correction or deletion, or to ask about data processing. You can delete local game records through Android's app storage controls. Use Google's privacy controls to manage advertising data held by Google.

Changes to this policy will appear on this page. Material changes to how information is handled will also be explained in the app.

한국어