Tap Tavern
Privacy Policy
Last updated 23 October 2026.
Tap Tavern (taptavern.app) is a party game played on a shared screen, with phones as the controllers. You can play on the website or as an Activity inside Discord. This page explains what Tap Tavern keeps about you, why, and for how long.
The short version
- There are no accounts. We never ask for an email address, phone number or password.
- There are no ads and no analytics or tracking tools, and we never sell information.
- To remember your avatar, unlocks and ratings, the server keeps a small profile with the name you play under. It is deleted after 180 days without play.
- Parties, including photos and drawings made in a game, are kept only in the server’s memory. They disappear when the game or the party ends.
- In Discord, your display name becomes your starting player name. Discord also tells us your user, server and channel IDs so we can seat you at the right table. We never save those IDs.
Who runs Tap Tavern
Tap Tavern is run by Tyler Brady, in the United States (“we”, “us”). For questions or requests, email [email protected].
What we keep, and why
1. Your player profile
The first time you join a party from a browser, the server makes a profile for that browser. The profile holds:
- the name you joined with (up to 20 characters);
- your avatar and color, and the avatars and sounds you have unlocked;
- your skill ratings, match counts and achievements, overall and for each game. They are used to balance teams and show your progress;
- codes for your recent rewarded matches, so the same win is never rewarded twice;
- the date you last played.
The profile is linked to a random code saved in your browser. It is not linked to an email address, a phone number or a Discord account. It is stored in a file on our server and used only for the game features above. A profile that nobody has played with for 180 days is deleted. The cleanup runs whenever the server restarts, which happens with every update.
2. Parties and what happens in them
While a party is open, the server keeps the names, avatars, scores, votes and controls of everyone at the table in its memory. It also keeps anything a game asks you to make:
- Photos. In a photo game such as Snap Judgment, the picture you take or choose is sent to the party. Your phone first shrinks and re-saves the picture, which also removes the location and camera details stored inside photo files.
- Drawings. In a drawing game such as Critter Canvas, your drawing is sent to the party.
Everyone in the party can see what happens in it. So can anyone who opens the party’s screen with its room code (“Watch a party”). None of it is written to disk. Photos and drawings are dropped when the party goes back to the lobby. The whole party is deleted when it closes: 20 minutes after everyone leaves (3 minutes if nobody ever joined), when the host ends it, or after 12 hours at most.
3. Play statistics (nothing personal)
To learn which games people enjoy and how big a server we need, the server records some facts about each game played:
- which game it was;
- when it started and ended, and whether it finished;
- how many people and how many computer players took part;
- the mode and difficulty.
For each party, it records when the party opened, how long it lasted, how many games were played and the most players at once. These records hold no names, profiles, room codes or IP addresses. Since they can’t be linked to anyone, they are kept with no set end date. Only the owner can see them, on a password-protected page.
4. Error reports and the server log
If a page hits a software error, your browser sends us a short report containing:
- the error message, and where in the code it happened;
- the page’s path, without room codes or player IDs;
- your browser’s user-agent string, which names the browser, its version and the type of device;
- the version of the site.
The report is saved in an error file on our server, together with the server’s own errors, which can name the room code and game where an error happened. We read them to fix bugs. The file keeps only the most recent reports: once it holds about 5 MB, it replaces the previous batch, and older reports are deleted.
The server also keeps a running log, which gets the same reports and, every five minutes, a count of open parties and players. The log is wiped when the server is updated, and older entries are deleted once about 50 MB of newer entries have been written. Neither the error file nor the log records IP addresses or player names.
5. IP addresses and abuse limits
Like every website, our server sees the IP address each request comes from, as passed on by Cloudflare (see section 9). It uses addresses only to stop one device from overloading the site. For example, it counts how many parties an address opens, how many wrong room codes it tries and how many connections it keeps open. These counts are kept in memory for minutes to hours, never longer than the 12-hour life of a party. They are never written to disk or to the log.
6. Cookies and storage on your device
| What | Why | How long |
|---|---|---|
tt_host cookie, on the screen that started a party | Lets that screen run the party | 12 hours, or until the party is ended |
tt_room cookie, on each device in a party | Remembers which party you are in | 12 hours |
| Your player name, last room code, profile code and player ID, in your browser’s local storage | Fills in the join form and reconnects you after a reload | Until you clear this site’s data. The player ID is removed when you leave a party. |
| Settings such as sound volumes and game and accessibility options, in local storage | Remembers your choices | Until you clear this site’s data |
The game needs these cookies to work. They are not used for tracking or advertising, and they are never shared. Tap Tavern sets no other cookies. Cloudflare (section 9) sets no cookies or analytics of its own on taptavern.app today. If it ever needs a security cookie, for example to stop an attack, Cloudflare’s privacy policy covers it.
7. Camera, microphone and motion sensors
Tap Tavern asks your phone for these only when a game needs them.
- Camera: used only when you choose to take or pick a photo in a photo game. The photo is shared with your party as described in section 2.
- Microphone: a game with voice controls listens only after you turn voice on. The sound is analyzed on your phone and never leaves it. Only the resulting move, such as an attack, is sent.
- Motion sensors: tilt controls read how you tilt your phone. Only the steering is sent, like a button press. Touch controls always work instead.
8. Playing in Discord
When you open Tap Tavern as an Activity in Discord:
- Your display name. Discord gives the Activity your display name (or your username). We put it in the join form as your player name, unless you typed a name in an earlier Activity. It is then stored in your profile like any other name (section 1). We don’t use your avatar or any other Discord profile details.
- Your Discord IDs. Discord signs each request with your Discord user ID and the IDs of the server and channel where the Activity runs. Our server checks the signature to confirm that the request really comes from Discord. It uses the channel to seat everyone in that channel at the same table, and it applies the limits in section 5 to each Discord user instead of each IP address. These IDs stay in the server’s memory. They are never written to disk or to the log, and they are gone when the server restarts.
- What we don’t do. Tap Tavern doesn’t use Discord’s SDK or “Sign in with Discord”. It gets no access to your messages, friends, servers or email, and it never posts anything for you.
Discord’s own Privacy Policy covers what Discord collects when you use Discord.
9. Companies that help run Tap Tavern
- Cloudflare provides our domain’s DNS and HTTPS, and the connection to our server. Every visit passes through Cloudflare, which processes your IP address and request details to deliver the site and protect it from attacks. See Cloudflare’s privacy policy.
- OVHcloud hosts our server in the United States (Hillsboro, Oregon). The profile file, the play statistics, the error file and the log are stored there.
- Discord is involved when you play in Discord (section 8).
- Email: Cloudflare Email Routing forwards messages sent to [email protected] to the owner’s personal mailbox. We keep emails only as long as we need them to answer you.
We don’t sell or rent personal information, share it with advertisers, or use it to build a profile of you. We disclose it only if the law requires us to.
10. Children
Tap Tavern is made for groups, including families, and has no minimum age. Children should play in a party that a parent or another adult hosts, and use a nickname rather than their real name. We never ask anyone’s age, and we don’t knowingly collect personal information about children beyond the nickname and game profile described above. If you think a child has given us personal information, email [email protected] and we will delete it. Discord requires its users to be at least 13, or older in some countries.
Your choices and rights
- Clear your browser’s data for taptavern.app to remove your name, profile code and settings from that device. The profile on our server is then never used again, and it is deleted after 180 days.
- Ask us to delete your profile sooner, send you a copy, or correct it. Email [email protected] with the name you play under and roughly when you last played. Profiles aren’t linked to an email address or an account, so we may ask for more details to find the right one. Once the code in your browser is gone, we can’t restore your profile.
- We will answer within 30 days.
Depending on where you live (for example the EU, the UK or California), the law may give you more rights. These can include the right to access, correct, delete or move your information, and to object to or limit how it is used. Email us to use them. If you are in the EU or UK, you can also complain to your data protection authority.
Legal bases (EU and UK). We use profile and party information to provide the games you ask to play (performance of a contract). We use IP addresses, Discord IDs, error reports and play statistics for our legitimate interests in keeping Tap Tavern working, secure and improving.
Security
All traffic uses HTTPS. The game server can’t be reached directly from the internet; visitors reach it only through Cloudflare. Only the owner can read the profile file, the error file and the log. We sometimes back up the profile file in case the server fails. Backups are kept private, only for as long as they are useful for restoring the service. No system is perfectly secure, so we keep as little as we can.
Where information is processed
Our server is in the United States. Cloudflare handles traffic in data centers around the world, near each player. If you play from another country, your information is processed in the United States.
Changes to this policy
If we change this policy, we will update this page and the date at the top. If a change is significant, we will also say so on the site.