1. Controller & Contact

VIROTAP is a mobile application available on the Apple App Store. For privacy inquiries: [email protected]. We comply with applicable data protection laws worldwide, including but not limited to the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), Brazil's Lei Geral de Proteção de Dados (LGPD), Canada's PIPEDA, Japan's APPI, South Korea's PIPA, Australia's Privacy Act 1988, India's DPDP Act 2023, China's PIPL, and Switzerland's nDSG.

2. Data Stored On Your Device

When you save a score to the local leaderboard, the following is stored only on your device (never transmitted to us or any server):

• Callsign (username) — a name of your choosing (max 8 characters). Do not enter your real name or any personal information.
• Game score and streak — numerical gameplay results.
• Submission timestamp — date and time of your entry.

This data remains in the app's local storage on your device and is never uploaded, synced, or shared. Uninstalling the app permanently deletes it. We do not collect your real name, email address, precise location, or any personal information through gameplay or the leaderboard feature.

3. Advertising Data (Google AdMob)

This app displays advertising provided by Google AdMob, a third-party advertising service. Google may collect and process the following on its own behalf as an independent data controller:

• Advertising identifier (IDFA on iOS, where permission is granted via App Tracking Transparency)
• Device information, IP address, and approximate location (for ad delivery)
• Ad interaction data (impressions, clicks)

On iOS, you will be asked for permission via Apple's App Tracking Transparency (ATT) framework before any cross-app tracking occurs. You may decline this without affecting your ability to play the game. Declining will result in less personalised (contextual) ads instead of personalised ads.

For details on how Google processes this data, see Google's Privacy Policy: policies.google.com/privacy and Google's Ad Partner policy: policies.google.com/technologies/partner-sites

4. Legal Basis for Processing

EU/UK (GDPR/UK GDPR): Local leaderboard storage is based on your freely given, specific, informed consent (Art. 6(1)(a) GDPR). Advertising data processing by Google is based on consent obtained via the ATT prompt and/or Google's separate consent mechanisms. You may withdraw consent at any time.

Brazil (LGPD): Processing is based on consent (Art. 7(I) LGPD).

USA (CCPA/CPRA): We do not sell personal information. Advertising via AdMob may constitute "sharing" for cross-context behavioral advertising under CPRA; you can limit this via your device's "Limit Ad Tracking" / ATT settings. Californians have rights to know, delete, and opt-out under CCPA §1798.100 et seq.

Other jurisdictions: Where local law requires a separate legal basis, we rely on consent and/or legitimate interests in providing app functionality and ad-supported free access.