Privacy Policy

For the Android game Ghast Tap (com.ghasttap.game).
Last updated: 2 September 2026

Who is responsible

Ghast Tap is developed and published by an independent developer. Questions about this policy or about your data can be sent to the contact address at the bottom of this page.

What is stored on your device

The game keeps the following on your phone, in the app's own private storage. It is not readable by other apps and it is removed when you uninstall the game:

• your high score, score history and number of games played
• your XP, level and unlocked rewards
• items you own, currency balances and spare lives
• achievements and lifetime statistics
• the display name you choose for your profile, if you set one. This is free text you type yourself; you are not asked for your real name and nothing checks what you enter
• your chosen settings, such as sound, vibration and the selected theme
• a randomly generated identifier used to tell your own devices apart when merging a cloud save. It is not linked to you, to your phone's hardware, or to any advertising identifier, and it is created by the app itself

Android app backup (on by default, controlled by your device)

Android automatically backs up app data for most apps installed from Google Play, so that setting up a new phone restores what you had. Ghast Tap takes part in this, and it is switched on deliberately: it makes a new phone pick up where the old one left off before you have signed in, and it covers the case where the game cannot reach the internet at all.

What this means in practice:

• The backup contains the same game data listed above, and nothing else. It is created by the Android operating system, not by the game.
• It is stored in your own Google account, against your own backup storage. The developer has no access to it and never receives it.
• It happens without you being asked, because it is an operating-system feature rather than a feature of this game.
• You can turn it off for this app, or for your device entirely, in Settings → Google → Backup. Doing so does not affect the game in any way; it only means a new phone starts from scratch.
• An existing backup is not deleted by uninstalling the game. See the data deletion page for how to remove it.

Your account (optional to play, required to buy)

Ghast Tap offers to sign you in the first time you open it, and Not now is a real answer — the game starts, and runs, coins, levels, chests and your own best scores all work with everything kept on your phone. The choice is remembered, so you are not asked again on the next launch.

You are asked once more only when you buy something, and that is so what you pay for belongs to you rather than to one handset: items bought with in-game gems have no record in Google Play, so without an account a lost phone would mean losing them permanently, with no way to give them back. Three things need an account by their nature and simply do nothing without one — the world leaderboard, cloud save, and the pack that is given for making an account.

There are two ways to sign in, and both create the same kind of account:

• With Google. The game asks Google to confirm who you are and receives your email address. It does not ask for access to your Drive, your contacts, your photos or anything else in your Google account — identity is the only thing requested.
• With an email address and a password that you choose. The password is handled by Google Firebase Authentication and stored only in hashed form. The developer never sees it and has no way to recover it; if you forget it, the reset link sent to your email address is the only route back in.

The only personal data held against your account is your email address, which identifies the account and is shown in the game's settings so you can see which one you are signed in to. It is not used for marketing, it is never sold or shared, and you will not receive email from the game other than password resets and address verification.

Cloud save

Once you are signed in, your progress is saved to Google Firebase (Cloud Firestore), a service operated by Google on the developer's behalf. It is stored as a single record attached to your account and contains the same game data listed above, including your profile name if you set one. Nothing else is stored, and no play session, location, device fingerprint or usage history is recorded.

• Access is restricted so that a signed-in player can read and write only their own record. No other player can reach it.
• It is used for one purpose: restoring your progress on a new phone and keeping two of your own devices in step.
• Firebase acts as a data processor. See Firebase's privacy information and Google's privacy policy. Data may be processed on Google servers outside your country under Google's standard contractual clauses.
• Deleting your account in the game deletes this record. See the data deletion page.

The world leaderboard (visible to other players)

The game keeps a public top 100 for each difficulty. This is the only part of Ghast Tap where anything of yours is shown to other people, so it is worth being exact about what.

• What is shown: your profile name, your best score, how many revives that run used, and the ghost you were flying. Nothing else — not your email address, not when you play, not how often.
• Your name is filtered before it is shown, and other players can report it. A name that is blocked or reported enough is replaced by an automatic label such as "Ghost #4821"; your score and your rank are never affected by that.
• You can opt out entirely in the game, under Settings → Account → Hide me from the world board. Your scores still count and your rank is kept — you are simply not listed.
• Deleting your account removes your entry from the boards immediately.

If you would rather not be identifiable at all, you can set your profile name to anything you like at any time from your profile; nothing checks it against your real name and nothing ever has.

Purchases

Ghast Tap offers optional in-app purchases: in-game currency, cosmetic content packs, season and event passes, and 7-day supplies that pay out a small in-game reward each day for a week. All payments are processed by Google Play. The developer never sees or receives your card details, billing address or any other payment information.

To confirm that a purchase actually completed, the game uses RevenueCat, a purchase verification service. RevenueCat receives an anonymous, app-generated user identifier along with the details of the transaction (which item, when, and whether it succeeded). It does not receive your name, your email address or your payment details.

Reminders on your phone

If reminders are on, the game asks Android for permission to post notifications and schedules a few of them when you close the app: roughly six hours later, when the daily goals reset, after three days, and after a week. They stop the moment you open the game again.

These are local notifications. They are written and scheduled on your own device from what is already saved there — your unopened chests, your best score, the next reset — and delivered by Android. Nothing is sent to us or to anyone else to produce them, no server knows whether you have been playing, and no message is targeted at you by anybody. Never between 22:00 and 09:00.

Switch them off under Settings → Game → While you are away, or in Android's own notification settings for the app. Denying the Android permission has the same effect and nothing else in the game changes.

What the game does not do

• No advertising, and no advertising identifiers are read or used.
• No analytics, telemetry, crash reporting or usage tracking.
• No profiling and no automated decision-making.
• No selling of personal data, and no sharing of it with anyone for any purpose other than the leaderboard described above — which shows only a name and a score, to other players, and which you can switch off.
• No access to your contacts, camera, microphone, location, photos or files. The app explicitly blocks these permissions.
• No marketing email. The only email the game can send you is a password reset or an address verification, both at your own request — and the only notifications are the local reminders described above, which carry no offers and are scheduled by your own phone.
• Nothing beyond your email address and your game progress is stored against your account. There is no profile, no friends list and no record of when or how long you play.

Children

Ghast Tap is not directed at children under 13 and does not knowingly collect personal information from them. Because the game contains in-app purchases, we recommend that parents and guardians enable purchase authentication in the Google Play Store settings.

Your rights and how to exercise them

• Delete your account and everything in it — in the game, open Settings → Account → Delete account. This removes your saved progress from Firebase and the account itself, immediately and without a waiting period. It cannot be undone, and purchases cannot be restored afterwards.
• Delete everything on your device — uninstall the app, or clear its storage in your Android settings. Note that this leaves the account intact; signing in again restores it.
• Delete the Android app backup — this one survives an uninstall, so it has to be removed separately. On your phone: Settings → Google → Backup → Device backups, then delete the backup or turn backup off for this app.
• Access or correct your data — the only personal field is your email address, and the game shows it in Settings. Everything else held against the account is your own game progress, which the game displays in full. For a copy in another form, write to the contact address below.
• Purchase records are held by Google Play and by RevenueCat as processors. Requests concerning those can be sent to the contact address below and will be passed on.

If you are in the EEA or the UK, you have rights under the GDPR including access, rectification, erasure and objection. Contact us and we will respond within one month.

Data retention

Device data is kept until you uninstall the app or clear its storage. Your account and its saved progress are kept until you delete the account, and are removed immediately when you do; uninstalling the game does not delete them. The Android app backup is a separate copy that also survives an uninstall and has to be removed in your device settings. Purchase records are retained by Google and RevenueCat for as long as their own policies and applicable tax and accounting law require.

Changes to this policy

If the game's handling of data changes, this page will be updated and the date at the top will change with it. Material changes will also be noted in the app's update description on Google Play.