Privacy Policy
Last updated: October 2026
TapCraft turns screen recordings into device-framed videos. This page describes exactly what that involves storing, and what it does not.
TapCraft is operated by Mahmoud Ahmed, a sole trader based in Alexandria, Egypt, who is responsible for the data described here. For anything on this page, including a request to delete your data, email tapcraftstudio1@gmail.com.
What we store
Your account
You can open the studio, play the sample clip, place taps, try every effect and watch the whole preview without an account. Nothing is stored and we do not know who you are.
Two things ask you to sign in with Google: uploading your own recording, because the file has to be stored against an owner, and exporting a video. When you do, we receive and store your email address, and Firebase Authentication holds your display name and profile picture.
We use your email for three things and nothing else: to connect a purchase to your account, to count the free exports you have used, and to reach you about a render that failed or a payment problem. We do not send marketing email, and we do not sell, rent or share it.
We no longer create anonymous accounts. If your browser still holds one from before, signing in with Google links it to your new account rather than replacing it, so the projects and exports already on it stay yours.
The feedback board
Feedback and the roadmap are public. Ideas, bug reports and comments you post there show with your name and profile picture as they are on your account now, so changing or removing either on your account page changes it on everything you have posted. Your email address is never shown. If you delete your account, what you posted stays on the board as “Former user”, without your name or picture.
Your videos
The recording you upload is stored in Google Cloud Storage under your account id, and so is the video we render from it, together with a small thumbnail image. We do not watch, index, analyse or train anything on your recordings. They are read once by the renderer and otherwise only served back to you through expiring, signed links.
A recording is a video of your app. It may contain whatever was on your screen when you recorded it — including personal data, if you recorded personal data. Please check your clip before uploading it.
Your projects
For each export we store a record containing your account id, the settings you chose (device, background, tap positions, timing), the status, timestamps, and your email. This is what the My videos page reads.
Payments
Payments are processed entirely by Paddle, which acts as the merchant of record for every purchase — Paddle is the seller on your receipt and card statement. We never see or store your card details. Paddle tells us that an email address bought a plan; we store that email, which plan, how many export credits remain, and Paddle's reference for the purchase.
Analytics
If you accept cookies, we start Firebase Analytics, which records page views so we can see which pages bring people here. It sets a cookie and assigns a random identifier to your browser. We do not use it for advertising, we do not combine it with your account, and we do not sell or share it.
With the same consent we may also use a session-replay analytics tool, which records how pages are used — clicks, scrolling and where people get stuck — so we can make the editor easier to use. Text you type into fields and your account email are masked before anything is sent, and the contents of your videos are not recorded. It sets its own cookies and is not used for advertising.
If you decline, it is never started — the code is not initialised at all, rather than loaded and told to stay quiet. You can change your mind at any time using Cookie settings in the footer; withdrawing consent reloads the page, because analytics cannot be stopped once it is running.
If you arrive through an affiliate's link (one ending in ?ref=), we keep that affiliate's code in your browser for 60 days, so they are credited if you buy a plan. Only the code is kept — nothing about you — and it is passed to Paddle with your purchase. If you have declined cookies, it is not kept at all.
Everything else in browser storage is essential: keeping you signed in, and remembering your theme and language.
Update emails
If you switch on Product updates in your account, we send an occasional email about what is new in TapCraft. They are off unless you turn them on, and every one has a link that unsubscribes you in one click. Receipts, password resets and verification links are sent regardless, because they are about your account.
Server logs
Our servers run on Google Cloud Run, which records request logs including IP addresses, as any web server does. These are used for debugging and security and are not combined with anything else.
Who we share it with
We use these processors and no others:
- Google Cloud Platform / Firebase — authentication, file storage, database, and the servers that render your videos.
- Paddle — payment processing, as merchant of record.
- Firebase Analytics (Google) — with your consent, page-view analytics.
- Analytics providers — with your consent, session replays and heatmaps.
- Vercel — hosting for this website.
We do not sell your data, and we do not share it with advertisers.
How long we keep it
Uploads and rendered videos are kept until you delete them. There is no automatic expiry today — we would rather tell you that plainly than imply a retention period we do not enforce. Deleting a project from My videos removes the rendered video, its thumbnail and the project records for that recording.
Purchase records are kept for as long as legally required for accounting, even after an account is deleted.
Your rights
If you are in the EU or UK, you have the right to access, correct, export or delete your personal data, to object to processing, and to complain to your data protection authority.
You can do most of this yourself from your account page: download a copy of everything we keep about you, delete your uploads, or delete your account and everything in it. Payment records are kept even after an account is deleted, because the tax rules require it. For anything else, email tapcraftstudio1@gmail.com and we will respond within 30 days.
Transfers and security
Our servers and storage run in the European Union (europe-west1). Google and Paddle may process data outside the EU under their own standard contractual clauses. All traffic to this site and to our API is encrypted in transit, and download links are signed and expire.
Children
TapCraft is a tool for software developers and is not intended for children under 16.
Changes
If this policy changes materially we will update the date at the top of this page. The English version is the authoritative one.