TapPlayer GmbH, Rootbachstrasse 3, 9215 Schönenberg an der Thur, Switzerland Contact person: Sethun Thilagarajah Contact: hello@tapplayer.app
This policy applies to the TapPlayer app, the TapPlayer web player, and tapplayer.app.
Listening to music with TapPlayer requires no registration and no user account. You do not tell us your name, and we do not ask for one.
Artists, labels and clubs who publish music through TapPlayer do have accounts. That is covered separately below.
Each scan records:
That is the complete list. We do not store your IP address, and we do not store the browser user agent. An IP address is used briefly, in memory only, to limit how many scans one network can make per hour; it is never written to a database and never retained.
These records are not linked to any individual. We can see that a given card was scanned; we cannot see by whom. They are used to play the correct music and to produce anonymous statistics, such as how often a card has been activated.
If you save a recording for offline listening, it is encrypted on your device with a key held in the device’s own secure storage (iOS Keychain, Android Keystore). The downloaded audio never leaves your device and is not readable by other apps. Deleting the download, or the app, removes it.
No names, email addresses, phone numbers, location data, contacts, photos or biometric data. No cross-app tracking. No advertising identifiers — the app contains no advertising or analytics SDKs of any kind.
We do not sell your data and do not share it for anyone else’s purposes. Three providers process data on our behalf in order to run the service:
Provider | Purpose | What it receives |
|---|---|---|
Railway | Hosting the service and database | Scan records; IP addresses in transit |
Expo (EAS Update) | Delivering app updates | Your device’s IP address and app version when the app checks for updates |
Resend | Sending login emails to artist and label accounts | The recipient’s email address |
Expo is contacted by the app itself each time it starts, in order to check for updates. This happens whether or not you scan a card.
If you publish music through TapPlayer, we store your email address, your name if you give one, your language preference, and a record of actions taken in the operator console. Sign-in uses a link sent by email; we store no password. These records are kept for as long as the account exists and are deleted on request.
Scan records are kept while the associated card is in circulation, and are used for statistics and to detect misuse such as copied cards. Operator account records are kept until the account is deleted.
Under Swiss data protection law and, where it applies, the GDPR, you have the right to information about data concerning you, and to its correction or deletion.
For scan records we must be honest about a limitation: because they are not linked to any individual, we cannot identify which records relate to you, and therefore cannot act on a deletion request for them. This is a consequence of not collecting identifying information in the first place.
For artist and label accounts, where data is linked to a person, these rights apply in full. Write to hello@tapplayer.app.
We will publish any change to this policy on this page with a new date.