Privacy Policy
Last updated: August 2026
This Privacy Policy explains how Tapora Limited (“we”, “us”, “our”) collects, uses, and shares information when you play our mobile game Profit Rush: Money Clicker (the “Game”) and when you visit https://taporaltd.com (the “Site”, and together with the Game, the “Services”).
Please read this Policy carefully. By using the Services, you acknowledge that you have read and understood it. Where the law requires your consent (for example, for personalized advertising), we will ask for it separately in the Game before any such processing takes place.
1. Who we are
The data controller responsible for your information is Tapora Limited, a company incorporated in Hong Kong SAR. Registered address: Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong.
If you have any questions about this Policy or your personal data, contact us at support@taporaltd.com.
2. Information we collect
We designed the Game so that you can play it without creating an account and without telling us your name, address, or phone number. The information we process is primarily technical.
Information collected automatically when you play the Game:
- Device and technical data — device model, operating system and version, language and region settings, screen size, mobile network and internet connection type, IP address.
- Advertising identifiers — your device’s resettable advertising ID (Apple IDFA / Google Advertising ID), where you have permitted its use.
- Gameplay data — game progress, session length and frequency, in-game events, feature usage, and general interaction with the Game.
- Advertising interaction data — which ads were shown, viewed, or tapped inside the Game.
- Purchase data — a record of your in-app purchases (product, price tier, time, transaction confirmation) received from Apple App Store or Google Play. We never receive or store your payment card details; payments are processed entirely by Apple or Google.
- Crash and performance data — error logs and diagnostic information used to detect and fix technical problems.
- Consent records — your privacy choices made in the in-game consent window.
Information you provide directly:
- If you contact us at support@taporaltd.com, we receive your email address and the content of your message.
Information collected on the Site:
The Site is an informational website. It does not use cookies or similar tracking technologies and has no accounts or forms. Our hosting provider may process your IP address in server logs for security and technical operation of the Site.
We do not knowingly collect names, postal addresses, phone numbers, photos, contacts, or precise geolocation.
3. How we use information and legal bases
Where the GDPR or similar laws apply, we rely on the following legal bases:
| Purpose | Data used | Legal basis |
|---|---|---|
| Operating the Game: saving progress, delivering core features | Device data, gameplay data | Performance of a contract |
| Validating and delivering in-app purchases | Purchase data, device data | Performance of a contract; legal obligation |
| Showing non-personalized (contextual) advertising | Device data, IP address (coarse location), ad interaction data | Legitimate interest (funding a free-to-play game) |
| Showing personalized advertising | Advertising ID, device data, ad interaction data | Your consent, collected via the in-game consent window |
| Analytics: understanding how the Game is played, improving balance and features | Gameplay data, device data | Consent or legitimate interest, depending on your region and choices |
| Fixing crashes and technical issues | Crash and performance data | Legitimate interest |
| Responding to support requests | Your email and message | Legitimate interest; performance of a contract |
| Preventing fraud, cheating, and abuse | Device data, gameplay data | Legitimate interest |
| Complying with legal obligations (tax, accounting, lawful requests) | Purchase data, support correspondence | Legal obligation |
We do not sell your personal information for money, and we do not use your data for automated decision-making that produces legal effects on you.
4. Advertising in the Game
The Game is free to play and is funded in part by advertising. Ads are delivered by third-party advertising networks through a mediation platform. Depending on your consent choices, ads are either:
- Personalized — selected using your advertising ID and inferred interests (only with your consent where required by law), or
- Non-personalized (contextual) — selected using general, non-identifying context such as coarse location derived from IP address, device type, and the content of the Game.
To deliver ads, measure their performance, and prevent fraud, our advertising partners may receive: your advertising ID, IP address, device and technical data, and data about your interactions with ads.
5. Advertising partners
Ads are delivered through an ad mediation platform, which passes ad requests to third-party advertising networks. These partners act as independent data controllers of the data they receive: their processing is governed by their own privacy policies, which we encourage you to read.
The set of advertising partners integrated in the Game may change as the Game is updated. The current list of partners, together with links to their privacy policies, is shown in the in-game consent window and remains available at any time in Settings → Privacy inside the Game.
6. Analytics and service providers
Apart from advertising, we use a limited number of service providers that process data on our behalf or as separate controllers:
- analytics providers — to understand how the Game is played and to improve its balance and features;
- crash and performance reporting providers — to detect and fix technical problems;
- marketing attribution providers — to measure how effective our own advertising campaigns are.
The current list of these providers, with links to their privacy policies, is available in the same place as the advertising partners: Settings → Privacy inside the Game.
Apple App Store and Google Play process your payments and app downloads under their own privacy policies.
7. Your choices and consent management
In-game consent window. When you first launch the Game (and whenever required), you will see a consent window where you can accept or decline the use of your data for personalized advertising and, where applicable, analytics. You can change your choices at any time in Settings → Privacy inside the Game, where you can also review the list of partners.
Withdrawing consent. You may withdraw your consent at any time via the in-game privacy settings. Withdrawal does not affect the lawfulness of processing that took place before withdrawal. If you decline or withdraw consent, you will still see ads, but they will be non-personalized.
Device-level controls:
- iOS: Settings → Privacy & Security → Tracking (App Tracking Transparency), and “Allow Apps to Request to Track”.
- Android: Settings → Google → Ads → “Delete advertising ID” or “Reset advertising ID”.
8. How we share information
We share information only:
- with the advertising partners referred to in Section 5, as described in Section 4;
- with the service providers referred to in Section 6, to run analytics, attribution, and crash reporting on our behalf;
- with Apple and Google in connection with app distribution and in-app purchases;
- with authorities or other parties where required by law, court order, or to protect our legal rights, users, or the public;
- with a successor entity in the event of a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your data.
We do not share your data with anyone else, and we never sell it for money.
9. International data transfers
We and our partners may process data in countries outside your country of residence, including outside the European Economic Area (EEA), the United Kingdom, and Switzerland. Where we transfer personal data from these regions, we rely on safeguards recognized by applicable law, such as European Commission adequacy decisions, Standard Contractual Clauses, or the EU–U.S. Data Privacy Framework (for certified U.S. partners).
10. Data retention
We keep personal data only as long as needed for the purposes described above:
- Game progress and gameplay data — for as long as you play the Game, and up to 24 months after your last activity, after which it is deleted or anonymized.
- Purchase records — for the period required by applicable tax and accounting laws.
- Crash and diagnostic data — up to 12 months.
- Support correspondence — up to 24 months after the request is resolved.
- Consent records — for as long as required to demonstrate compliance with applicable law.
11. Your rights (EEA, UK, and Switzerland)
If you are located in the EEA, the UK, or Switzerland, you have the right to:
- access the personal data we hold about you and receive a copy;
- rectify inaccurate or incomplete data;
- erase your data (“right to be forgotten”);
- restrict or object to processing, including processing based on legitimate interest;
- data portability — receive your data in a structured, machine-readable format;
- withdraw consent at any time, without affecting prior processing;
- lodge a complaint with your local data protection supervisory authority.
To exercise these rights, contact us at support@taporaltd.com. We will respond within one month (extendable by two further months for complex requests, in which case we will inform you). We may ask you to provide your device’s advertising ID so we can locate data associated with your device.
12. Your rights (United States)
Depending on your state of residence (including California, Colorado, Connecticut, Texas, Utah, and Virginia), you may have the right to:
- know whether we process your personal information and access it;
- delete or correct your personal information;
- receive a portable copy of your data;
- opt out of “sale” or “sharing” of personal information and of targeted advertising — you can do this at any time in the Game via Settings → Privacy;
- not receive discriminatory treatment for exercising your rights;
- appeal a refusal of your request.
To exercise these rights, contact us at support@taporaltd.com with the subject line “Privacy request”. We do not knowingly sell the personal information of consumers under 16 years of age.
13. Children’s privacy
The Game is not directed at children under the age of 13 (or the higher minimum age required in your jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect personal data from children below these ages, and personalized advertising is never shown to users who identify as being below the applicable age of consent.
If you are a parent or guardian and believe your child has provided personal data to us, please contact us at support@taporaltd.com and we will delete it.
14. Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and data minimization. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, alteration, or destruction.
15. Changes to this Policy
We may update this Policy from time to time. The current version is always available at https://taporaltd.com/privacy. If we make material changes, we will notify you in the Game or by other appropriate means before the changes take effect. The “Last updated” date at the top shows when this Policy was last revised.
16. Contact us
For any questions, requests, or complaints regarding this Policy or your personal data:
Tapora Limited
Registered address: Unit 909, Prosperity Millennia Plaza, 663 King's Road, Quarry Bay, Hong Kong
Email: support@taporaltd.com
Website: https://taporaltd.com