Privacy Policy

Last updated: August 3, 2026

This policy explains what data MapZap collects, why, and how you can control it. MapZap is developed by an individual developer (see the Legal Notice for contact details), referred to below as "we" / "us".

1. Who is responsible for your data

The data controller for MapZap is:

Lukas Ehlers
c/o RA Matutis, Fürstenstraße 5, 5400 Hallein, Österreich
Email: support@mapzap.app

2. Data we collect

2.1 Anonymous play (default)

By default, MapZap creates an anonymous account for you so your progress, coins, and settings can be saved and restored. This account is identified by a random ID and is not linked to your name or email unless you choose to sign in (see below).

2.2 Signing in with Apple or Google (optional)

If you choose to link your anonymous progress to an Apple or Google account, we receive an identity token and, if you allow it, a display name from that provider. This lets your progress, Elo rank, and pin design carry over if you reinstall the app or switch devices. We do not receive your Apple or Google password, and we do not see your real email address unless you explicitly share it (Apple's "Hide My Email" relay is fully supported).

2.3 Gameplay and progress data

We store the data needed to run the game: scores, streaks, campaign progress, chosen nickname, pin appearance, unlocked cosmetics, and coin balance. This is tied to your account (anonymous or signed‑in) and used to show leaderboards, daily challenges, and live duels.

2.4 Purchases

MapZap Pro and any in‑app items are billed by Apple's App Store or Google Play. We use RevenueCat to manage subscription status. We receive confirmation of what you purchased and whether your subscription is active. We never receive your card or payment details, which are handled entirely by Apple/Google.

2.5 Game Center / Google Play Games

If you use Game Center (iOS) or Google Play Games (Android) for leaderboards, that integration is governed by Apple's or Google's own privacy policy. We only receive the score you submit and your Game Center/Play Games display name.

2.6 Push notifications

If you allow notifications, we use a device push token (via Apple/Google's push services) to send you occasional reminders, such as a daily challenge nudge. You can turn this off any time in the app's settings or your device settings.

2.7 What we do not collect

• No advertising identifiers and no third‑party ad networks.
• No third‑party analytics or tracking SDK at this time.
• No access to your contacts, photos, or location.
• We never sell personal data to anyone.

3. Why we process this data

• To provide the game itself: saving progress, running daily challenges, duels, and leaderboards (performance of a contract with you, the player).
• To process purchases: required to fulfil MapZap Pro and other in‑app purchases.
• To keep the game fair and working: basic technical logs to diagnose crashes and abuse (legitimate interest).

4. Who we share data with

We use a small number of service providers ("processors") to run MapZap. They only receive what they need to do their job, and are not allowed to use your data for their own purposes:

• Supabase: hosts our backend database and authentication.
• RevenueCat: manages subscription and purchase status.
• Apple / Google: handle sign‑in, in‑app purchases, and (if used) Game Center / Play Games and push notifications.

5. International data transfers

Some of the providers above may process data outside the European Economic Area. Where that happens, we rely on the safeguards required by GDPR (such as the EU Standard Contractual Clauses) as provided by each processor.

6. How long we keep your data

Gameplay data is kept for as long as your account exists. If you delete your account (see below), we delete your personal data within a reasonable time, except where we're required to keep records for legal or accounting reasons (e.g. purchase records).

7. Your rights

If you're in the EU/EEA, UK, or a region with similar protections, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Receive your data in a portable format
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at support@mapzap.app. You can also delete your account directly from the app's Settings screen.

8. Children's privacy

MapZap is designed to be enjoyed by the whole family, including children, under a parent or guardian's supervision. We do not show behavioral advertising, do not knowingly sell children's data, and only collect the minimum needed to run the game as described above. If you're a parent and believe your child has provided us with more personal data than necessary, contact us and we'll remove it.

9. Security

We use industry‑standard measures (encrypted connections, access‑controlled backend) to protect your data. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we work to keep your data safe and minimize what we collect in the first place.

10. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify you in the app.

11. Contact

Questions about this policy or your data? Email support@mapzap.app. Provider identification details are on the Legal Notice page.