Privacy policy

Tapugo Games Inc. is a company incorporated in Ontario, Canada. We operate tapugo.ai and the Tapugo studio, and we are the organisation accountable for the personal information described here under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Our privacy officer reads privacy@tapugo.ai. Write there about anything on this page.

Your account. Your name, email address and a hashed password. We never store the password itself.

What you make. Your games, the conversations you have with the studio agents, the art and audio you upload, and the builds we produce for you.

Videos you submit for analysis. A clip you upload is read frame by frame and then kept for 30 days so you can go back to the write up. If a clip is rejected for not being gameplay it is deleted immediately.

Billing records. What you bought, when, and how many credits it granted. Card details never touch our servers. Checkout is hosted by Stripe.

Play data. When someone plays a published game we record anonymous session data such as how long the session lasted and how far they got. It is not linked to a person.

How you use the site. Which pages you opened, which buttons you pressed, and how far you got through things like signing up or making your first game. This is measurement, not content: it never includes what you typed, what you named anything, or what your game is about. See cookies and analytics below for exactly what is recorded and how to say no.

To run the product you asked us to run: to build your games, to bill you correctly, to keep your work available when you come back, and to show you how published games perform. We do not sell personal data and we do not use your private projects to train models.

These are the processors the product actually uses.

• Anthropic, to run the agents that write and change your game. Your prompts and project files are sent for that purpose.
• Stripe, for payments. They handle card data. We store only an identifier and what was purchased.
• Meta, only when you choose to run a market test, and only the ad creative and campaign settings you configured.
• Apple and Google, only when you choose to publish, using credentials you supply.
• Google Analytics, to count visits and see where people get stuck. It receives page addresses and event names, never your email, your name, or anything you wrote.
• Our infrastructure providers for hosting, storage and email delivery.

We use a small number of cookies. Some are required for the product to work at all, and one is for measurement.

• Signing in. A session cookie that keeps you logged in. Without it there is no way to know the browser asking for your games is yours. It goes when you sign out.
• Measurement. A random id we put in a cookie the first time you arrive, kept for up to 400 days. It is a number and nothing else. It lets us count one person visiting three times as one person rather than three, and it is what connects the visit where you first read about Tapugo to the account you later made. If you do make an account we record your account id alongside it, which is also just an id.

What we do not do. We do not send Google your name, your email, your studio or game names, or anything you typed into the product. Page addresses that contain a private link, such as a studio invitation, are stripped before anything is sent. We do not run advertising cookies, we do not sell this data, and we do not use it to build a profile of you anywhere other than Tapugo.

Saying no. If you are in the UK or the European Economic Area we ask before setting the measurement cookie, and nothing is set unless you agree. Everywhere else you can turn it off at any time by emailing privacy@tapugo.ai, or by using your browser’s do-not-track or cookie controls. The product works exactly the same either way.

Analytics data is held for 14 months and then deleted automatically. Google processes it in the United States.

Your projects stay until you delete them or close your account. Uploaded analysis videos are removed after 30 days. Billing records are kept as long as Canadian tax and accounting rules require, which is generally seven years.

Data leaves Canada. Our hosting, storage and the model provider that runs the agents operate in the United States and elsewhere, so your information is processed outside Canada and is subject to the laws of those countries, including lawful access by their authorities. We use providers contractually bound to protect it to a comparable standard.

Data is encrypted in transit. Store credentials you give us, such as an App Store Connect key or a signing keystore, are encrypted at rest with a key we hold separately. No system is perfect, and we will tell you promptly if something happens that affects you.

Email privacy@tapugo.ai from the address on your account and ask. We will delete your account, your games, your uploads and your builds within 30 days, and confirm when it is done. Records we are legally required to keep, such as invoices, are the only exception.

Under PIPEDA you can also ask for a copy of the personal information we hold about you, ask us to correct anything inaccurate, and withdraw your consent to us using it, subject to what our contract with you and the law require. We answer access requests within 30 days.

If you are not satisfied with how we handle a request you can complain to the Office of the Privacy Commissioner of Canada.

Tapugo is not for people under 13, and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.

If we change anything that matters we will update the date at the top and email account holders before it takes effect.