1. Categories collected — in the last 12 months
None as a controller. We do not collect, receive, or store personal information identifying you.
Cloudflare, our hosting processor, transiently observes standard request metadata (Category K — internet/network activity, and Category G — geolocation at city level) for security and delivery. We do not receive this data.
2. Sale or sharing of personal information
We do not sell or share personal information, including for cross-context behavioural advertising. We have no advertising partners. The Global Privacy Control (GPC) signal is honoured automatically because we have nothing to suppress.
3. Sensitive personal information
We do not collect or process sensitive personal information.
4. Your rights
Depending on your state of residence, you may have rights to:
- Know what we have about you (right of access).
- Receive a copy (right of portability).
- Correct inaccuracies (right of rectification).
- Delete (right of erasure).
- Opt out of sale, sharing, or targeted advertising.
- Limit use of sensitive personal information.
- Not be subject to a solely automated decision producing a legal or similarly significant effect.
- Appeal a denial of any of the above.
- Be free of retaliation for exercising these rights.
5. How to exercise rights
Email privacy@taptocast.com with the right you wish to exercise and your state of residence. Because we collect no personal information, our typical response is to confirm that there is nothing on file and to walk you through deleting browser storage if you wish.
Authorised agents may submit requests with written, signed authorisation from you and sufficient information for us to verify your identity (which, in this case, simply means you having used the Service — there is nothing for us to match against).
6. Shine the Light (CA Civil Code § 1798.83)
We do not share personal information with third parties for their direct marketing purposes.