Privacy Policy
Last updated: August 2026
TapCraft turns screen recordings into device-framed videos. This page describes exactly what that involves storing, and what it does not.
TapCraft is operated by Mahmoud Ahmed, a sole trader based in Alexandria, Egypt, who is responsible for the data described here. For anything on this page, including a request to delete your data, email support@tapcraft.app.
What we store
Your account
Sign-in is handled by Firebase Authentication. If you use the studio without signing in, we create an anonymous account identified only by a random id — no email, no name. If you sign in with Google, we receive and store your email address, and Firebase holds your display name and profile picture. Your email is the key that connects a purchase to your account, which is the only reason we keep it.
Your videos
The recording you upload is stored in Google Cloud Storage under your account id, and so is the video we render from it, together with a small thumbnail image. We do not watch, index, analyse or train anything on your recordings. They are read once by the renderer and otherwise only served back to you through expiring, signed links.
A recording is a video of your app. It may contain whatever was on your screen when you recorded it — including personal data, if you recorded personal data. Please check your clip before uploading it.
Your projects
For each export we store a record containing your account id, the settings you chose (device, background, tap positions, timing), the status, timestamps, and — if you are signed in — your email. This is what the My videos page reads.
Payments
Payments are processed entirely by Paddle, which acts as the merchant of record for every purchase — Paddle is the seller on your receipt and card statement. We never see or store your card details. Paddle tells us that an email address bought a plan; we store that email, which plan, how many export credits remain, and Paddle's reference for the purchase.
Analytics
If you accept cookies, we start Firebase Analytics, which records page views so we can see which pages bring people here. It sets a cookie and assigns a random identifier to your browser. We do not use it for advertising, we do not combine it with your account, and we do not sell or share it.
If you decline, it is never started — the code is not initialised at all, rather than loaded and told to stay quiet. You can change your mind at any time using Cookie settings in the footer; withdrawing consent reloads the page, because analytics cannot be stopped once it is running.
Everything else in browser storage is essential: keeping you signed in, and remembering your theme and language.
Server logs
Our servers run on Google Cloud Run, which records request logs including IP addresses, as any web server does. These are used for debugging and security and are not combined with anything else.
Who we share it with
We use these processors and no others:
- Google Cloud Platform / Firebase — authentication, file storage, database, and the servers that render your videos.
- Paddle — payment processing, as merchant of record.
- Firebase Analytics (Google) — with your consent, page-view analytics.
- Vercel — hosting for this website.
We do not sell your data, and we do not share it with advertisers.
How long we keep it
Uploads and rendered videos are kept until you delete them. There is no automatic expiry today — we would rather tell you that plainly than imply a retention period we do not enforce. Deleting a project from My videos removes the rendered video, its thumbnail and the project records for that recording.
Purchase records are kept for as long as legally required for accounting, even after an account is deleted.
Your rights
If you are in the EU or UK, you have the right to access, correct, export or delete your personal data, to object to processing, and to complain to your data protection authority.
You can delete your videos yourself at any time from My videos. For account deletion, a copy of your data, or anything else, email support@tapcraft.app and we will respond within 30 days.
Transfers and security
Our servers and storage run in the European Union (europe-west1). Google and Paddle may process data outside the EU under their own standard contractual clauses. All traffic to this site and to our API is encrypted in transit, and download links are signed and expire.
Children
TapCraft is a tool for software developers and is not intended for children under 16.
Changes
If this policy changes materially we will update the date at the top of this page. The English version is the authoritative one.