Privacy Policy
Last updated: September 2026
This Privacy Policy explains how Tapora Limited (“we”, “us”, “our”) collects, uses, and shares information when you play our mobile game Profit Rush: Money Clicker (the “Game”) and when you visit https://taporaltd.com (the “Site”, and together with the Game, the “Services”).
Please read this Policy carefully. By using the Services, you acknowledge that you have read and understood it. Where the law requires your consent (for example, for personalized advertising), we will ask for it separately in the Game before any such processing takes place.
1. Who we are
The data controller responsible for your information is Tapora Limited, a company incorporated in Hong Kong SAR. Registered address: Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong.
If you have any questions about this Policy or your personal data, contact us at support@taporaltd.com.
2. Information we collect
We designed the Game so that you can play it without creating an account and without telling us your name, address, or phone number. The information we process is primarily technical.
Information collected automatically when you play the Game:
- Device and technical data — device model, operating system and version, language and region settings, screen size, mobile network and internet connection type, IP address.
- Approximate location — your country and, at most, your city, worked out from your IP address. The Game does not use GPS and does not ask for location permission.
- Advertising identifier — your device’s resettable advertising ID (the Google Advertising ID on Android). You can reset or delete it in your device settings (see Section 7).
- Installation identifiers — random identifiers that our analytics, crash reporting, and purchase providers create for your copy of the Game (for example, the Firebase installation ID). They are not linked to your name.
- Gameplay data — game progress, session length and frequency, in-game events, feature usage, and general interaction with the Game.
- Advertising interaction data — which ads were shown, viewed, or tapped inside the Game.
- Campaign data — if you installed the Game after tapping one of our own ads, the campaign identifiers that Google Play passes to the Game when it is installed.
- Purchase data — a record of your in-app purchases (product, price tier, time, transaction confirmation) received from Google Play or the Apple App Store. We never receive or store your payment card details; payments are processed entirely by Google or Apple.
- Crash and performance data — error logs and diagnostic information used to detect and fix technical problems.
- Cloud save — if you sign in to Google Play Games, the Game stores a copy of your save file and a picture of your game state in your Play Games account, so you can continue on another device.
- Consent records — your privacy choices made in the in-game consent window.
Information you provide directly:
- If you contact us at support@taporaltd.com, or report an ad from inside the Game, we receive your email address, the content of your message, and the technical details the Game adds to the draft: the app version, the operating system version, an install number, and, for an ad report, the details of the ad that was shown. You see the whole message in your own email app before you send it.
Information collected on the Site:
The Site is an informational website. It does not use cookies or similar tracking technologies and has no accounts or forms. Our hosting provider may process your IP address in server logs for security and technical operation of the Site.
We do not knowingly collect names, postal addresses, phone numbers, photos, contacts, or precise geolocation.
3. How we use information and legal bases
Where the GDPR or similar laws apply, we rely on the following legal bases:
| Purpose | Data used | Legal basis |
|---|---|---|
| Operating the Game: saving progress, cloud save, delivering core features | Device data, gameplay data, installation identifiers | Performance of a contract |
| Validating, delivering, and restoring in-app purchases | Purchase data, installation identifiers | Performance of a contract; legal obligation |
| Showing non-personalized (contextual) advertising | Device data, approximate location, ad interaction data | Legitimate interest (funding a free-to-play game) |
| Showing personalized advertising | Advertising ID, device data, ad interaction data | Your consent where the law requires it, collected via the in-game consent window |
| Analytics: understanding how the Game is played, improving balance and features | Gameplay data, device data, installation identifiers | Your consent where the law requires it; otherwise legitimate interest |
| Measuring the results of our own advertising campaigns | Campaign data, advertising ID, installation identifiers | Your consent where the law requires it; otherwise legitimate interest |
| Fixing crashes and technical issues | Crash and performance data | Legitimate interest |
| Responding to support requests and ad reports | Your email, your message, the technical details in it | Legitimate interest; performance of a contract |
| Preventing fraud, cheating, and abuse | Device data, gameplay data | Legitimate interest |
| Complying with legal obligations (tax, accounting, lawful requests) | Purchase data, support correspondence | Legal obligation |
We do not sell your personal information for money, and we do not use your data for automated decision-making that produces legal effects on you.
4. Advertising in the Game
The Game is free to play and is funded in part by advertising. It shows rewarded ads, which you choose to watch in exchange for an in-game bonus, and full-screen ads between screens. A “No Ads” purchase switches off full-screen ads for the period you bought; rewarded ads stay available because you only see them when you choose to.
Ads are delivered by third-party advertising networks through a mediation platform (Section 5). Depending on your consent choices, ads are either:
- Personalized — selected using your advertising ID and inferred interests (only with your consent where required by law), or
- Non-personalized (contextual) — selected using general, non-identifying context such as approximate location, device type, and the content of the Game.
To deliver ads, measure their performance, and prevent fraud, our advertising partners may receive: your advertising ID, IP address and approximate location, device and technical data, and data about your interactions with ads.
5. Advertising partners
Ads are served through Google AdMob, which acts as our mediation platform and passes ad requests to the advertising networks listed below. These partners act as independent data controllers of the data they receive: their processing is governed by their own privacy policies, which we encourage you to read.
We work, or may work, with these advertising partners:
| Partner | Privacy policy |
|---|---|
| Google AdMob | https://policies.google.com/privacy |
| AppLovin | https://legal.applovin.com/privacy/ |
| Unity Ads | https://unity.com/legal/game-player-and-app-user-privacy-policy |
| Liftoff (Vungle) | https://liftoff.ai/privacy-policy/ |
| Mintegral | https://www.mintegral.com/en/privacy |
| Pangle | https://www.pangleglobal.com/privacy/enduser-en |
| Meta Audience Network | https://www.facebook.com/privacy/policy/ |
To learn how Google uses information from apps that use its services, see https://policies.google.com/technologies/partner-sites.
If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the in-game consent window lists every advertising partner and lets you choose which of them may use your data.
6. Analytics and service providers
Apart from advertising, we use a limited number of service providers that process data on our behalf:
| Provider | What we use it for | Privacy policy |
|---|---|---|
| Google Analytics for Firebase | Understanding how the Game is played; measuring our own advertising campaigns | https://firebase.google.com/support/privacy |
| Firebase Crashlytics | Crash reports | https://firebase.google.com/support/privacy |
| Firebase Remote Config | Changing game settings without an app update | https://firebase.google.com/support/privacy |
| RevenueCat | Validating and restoring in-app purchases | https://www.revenuecat.com/privacy |
| Google Play Games Services | Sign-in and cloud save | https://policies.google.com/privacy |
| Google Play Install Referrer and Google Ads | Measuring our own advertising campaigns | https://policies.google.com/privacy |
Google Play and the Apple App Store process your payments and app downloads under their own privacy policies.
7. Your choices and consent management
Consent window (EEA, UK, and Switzerland). When you first launch the Game in these regions, a consent window asks whether we and our partners may use your data for personalized advertising and related purposes. You can change your choice at any time in Settings → Legal → Ad privacy choices inside the Game. If you decline or withdraw consent, you will still see ads, but they will be non-personalized or limited, and we do not collect analytics data about you. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
Opt-out in US states. If you live in a US state with a consumer privacy law, you can opt out of the “sale” or “sharing” of your personal information and of targeted advertising in Settings → Legal → Ad privacy choices inside the Game where the Game shows this option. On any device you can also delete or reset your advertising ID in your device settings (see “Device-level controls” below), so that ads are no longer personalized with it.
Notifications. The Game sends reminders only if you allow notifications. They are scheduled on your device, and you can turn them off at any time in your device settings.
Device-level controls:
- Android: Settings → Google → Ads (or Settings → Privacy → Ads) → “Delete advertising ID” or “Reset advertising ID”.
- iOS: Settings → Privacy & Security → Tracking (App Tracking Transparency), and “Allow Apps to Request to Track”.
8. How we share information
We share information only:
- with the advertising partners listed in Section 5, as described in Section 4;
- with the service providers listed in Section 6, to run analytics, crash reporting, purchase validation, and cloud save on our behalf;
- with Google and Apple in connection with app distribution and in-app purchases;
- with authorities or other parties where required by law, court order, or to protect our legal rights, users, or the public;
- with a successor entity in the event of a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your data.
We do not share your data with anyone else, and we never sell it for money.
9. International data transfers
We and our partners may process data in countries outside your country of residence, including outside the European Economic Area (EEA), the United Kingdom, and Switzerland. Where we transfer personal data from these regions, we rely on safeguards recognized by applicable law, such as European Commission adequacy decisions, Standard Contractual Clauses, or the EU–U.S. Data Privacy Framework (for certified U.S. partners).
10. Data retention
We keep personal data only as long as needed for the purposes described above:
- Game progress — stored on your device and, if you use cloud save, in your Google Play Games account. It stays there until you uninstall the Game or delete the save in your Play Games settings.
- Analytics data — kept in Google Analytics for up to 14 months. Our own export of raw analytics events is deleted after 24 months.
- Purchase records — for the period required by applicable tax and accounting laws.
- Crash and diagnostic data — up to 90 days.
- Support correspondence — up to 24 months after the request is resolved.
- Consent records — for as long as required to demonstrate compliance with applicable law.
11. Your rights (EEA, UK, and Switzerland)
If you are located in the EEA, the UK, or Switzerland, you have the right to:
- access the personal data we hold about you and receive a copy;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”);
- restrict or object to processing, including processing based on legitimate interest;
- data portability — receive your data in a structured, machine-readable format;
- withdraw consent at any time, without affecting prior processing;
- lodge a complaint with your local data protection supervisory authority.
To exercise these rights, contact us at support@taporaltd.com. We will respond within one month (extendable by two further months for complex requests, in which case we will inform you).
The Game has no accounts, and we do not collect your name, email address or phone number through it. The identifiers it uses (see Section 2) are pseudonymous: we cannot link them to you, and the Game does not display them. As a result we are generally unable to locate data about a particular person, and therefore cannot act on a request to access, correct, delete or export it (GDPR Article 11). You can still:
- withdraw consent where the Game asks for it (for example in the EEA and the UK) at any time in Settings → Legal → Ad privacy choices, which stops analytics collection and personalized ads from that point on;
- uninstall and reinstall the Game, which creates a new installation identifier, so data collected before can no longer be linked to your device;
- reset or delete your advertising ID in your device settings (see Section 7).
Analytics data is also deleted automatically after the periods in Section 10.
12. Your rights (United States)
Depending on your state of residence (including California, Colorado, Connecticut, Texas, Utah, and Virginia), you may have the right to:
- know whether we process your personal information and access it;
- delete or correct your personal information;
- receive a portable copy of your data;
- opt out of “sale” or “sharing” of personal information and of targeted advertising — you can do this at any time in the Game via Settings → Legal → Ad privacy choices where the Game shows this option, and on any device by deleting or resetting your advertising ID (see Section 7);
- not receive discriminatory treatment for exercising your rights;
- appeal a refusal of your request.
To exercise these rights, contact us at support@taporaltd.com with the subject line “Privacy request”. We do not knowingly sell the personal information of consumers under 16 years of age.
The Game has no accounts, and we do not collect your name, email address or phone number through it. The identifiers it uses (see Section 2) are pseudonymous: we cannot link them to you, and the Game does not display them. As a result we are generally unable to locate data about a particular person, and therefore cannot act on a request to access, correct, delete or export it. You can still:
- withdraw consent where the Game asks for it (for example in the EEA and the UK) at any time in Settings → Legal → Ad privacy choices, which stops analytics collection and personalized ads from that point on;
- uninstall and reinstall the Game, which creates a new installation identifier, so data collected before can no longer be linked to your device;
- reset or delete your advertising ID in your device settings (see Section 7).
Analytics data is also deleted automatically after the periods in Section 10.
13. Children’s privacy
The Game is intended for players aged 13 and over (or the higher minimum age that applies in your country). It is not directed at children under 13, and it does not ask for your age. We do not knowingly collect personal data from children under 13.
If you are a parent or guardian and believe that a child under 13 has used the Game, contact us at support@taporaltd.com. Because the Game has no accounts, we may not be able to locate that data; we will delete anything we can identify, and uninstalling the Game stops any further collection.
14. Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and data minimization. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, alteration, or destruction.
15. Changes to this Policy
We may update this Policy from time to time. The current version is always available at https://taporaltd.com/privacy. If we make material changes, we will notify you in the Game or by other appropriate means before the changes take effect. The “Last updated” date at the top shows when this Policy was last revised.
16. Contact us
For any questions, requests, or complaints regarding this Policy or your personal data:
Tapora Limited
Registered address: Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong
Email: support@taporaltd.com
Website: https://taporaltd.com