Privacy Policy

This policy explains what data the NEON TAP rhythm game (the “game”) uses and what happens to it. It applies to every version of the game: on the website neon-tab.vercel.app, in the installed web app, on gaming platforms and in app stores. The game is developed and distributed by its right holder from the Republic of Kazakhstan (“we”). This policy supplements the Terms of Use.

1. What is stored on your device

The game keeps its data in the browser’s or app’s storage on your device (localStorage, IndexedDB and the app cache). This data is not sent to us:

• settings: volume, audio sync, voice, effects mode and other options;
• progress: Stars, Crowns, track Records, Crystals, Achievements, the rewards calendar, the history of attempts;
• information about purchases and NEON PASS, if it is kept on the device;
• your nickname and chosen avatar, if you have set them;
• the list of your Duels and service marks (whether the Tutorial is done, which offers have already been shown, the position in the track list);
• your songs from “My Music” and their records (see section 2);
• a cache of music, charts and sounds, so the game loads faster and works offline.

We do not back up this data on our servers. If the browser or the system clears the storage, your progress may be lost (see the Terms of Use for more).

2. Your music

When you add a song of your own, the audio file is processed entirely on your device: the note chart is made right in the browser. The file is saved in IndexedDB on the device so you can play the song again. Song files never leave your device: we do not receive, see or store them. Your songs take no part in online records and duels. You can delete a song in “My Music”.

3. What goes online

Online features are optional: you can play without a nickname. While no nickname is set, the game sends neither a nickname, nor results, nor an avatar to the server. There is one nickname for the whole game: if you set it for a duel or in your Profile, your results start going to the records table too.

• Online records. If you have set a nickname, the result of every catalog track you finish is sent to the online table automatically, without a separate button. When you open a track’s records, the best result saved on your device is sent there as well, if it is not in the table yet. Failed attempts and your own songs are not sent. The server receives: the nickname, the track identifier, the score, accuracy, rank, maximum combo and the time of sending. The nickname and the result are visible to every player in the records table.
• How the server treats nicknames. The records table is open to children, so the server cleans up a nickname before saving it: it keeps Latin and Cyrillic letters (Kazakh ones included), digits, spaces, the signs - _ . ! ? and the apostrophe, removes everything else (emoji, other alphabets, symbols) and cuts the nickname to 16 characters. A nickname that reads as a swear word, an insult, a link, a phone number or a service word (for example, “admin”), however it is spelled, is replaced with the neutral “Игрок” (“Player”) and a number; the result still counts. So your nickname in the table may look different from what you typed. Nicknames that match after cleaning, ignoring letter case, share one row of the table.
• How long records are kept. There is no fixed period. For each track the 100 best results are kept, one per nickname: your new best result replaces the previous one, and a result pushed out of the hundred is deleted. The other entries are kept until you ask us to delete them (section 7). A result higher than the track allows does not get into the table. To show your place, the game also sends your nickname to the server when you view the table. To stop sending results, erase your nickname in the settings and do not enter it again when the game offers.
• Duels. When you create a duel or play a track from a duel link (with a nickname, your result goes to the duel’s author automatically), the server receives: the nickname (cleaned up the same way as in the records), the chosen avatar (a picture from the game’s set; no photos are uploaded), the track identifier, the score, accuracy, rank and time. A duel keeps the author’s run and up to 20 answers, the best one per nickname. A duel is visible to anyone who has its link and is deleted automatically 30 days after it was created or last answered: every new answer extends the period.
• IP address and browser type. The server uses them only for spam protection — to limit how often records and duels are requested from one address and device. The IP address itself is held only in the server’s memory until it restarts. When you send a record or a duel, only request counters go to the database, labelled with a hash of the IP address and a hash of the IP address together with the browser type (User-Agent). The hash is computed with the server’s secret key (HMAC), and the address cannot be recovered from the database contents. Each counter deletes itself within an hour at the latest. The IP address is not written to the records table or to duels.
• Technical logs. Like any website, the game loads its code, music, charts and pictures from the server and asks the server for records and duels. The hosting provider may keep technical logs of all these requests (IP address, browser type, time and address of the request; the address of a records table request may contain your nickname) under its own rules.

Online data is stored with cloud infrastructure providers: Vercel hosting and the Upstash database. Their servers may be located outside your country. These companies process data under their own privacy policies.

4. Platforms, purchases and ads

If you play on a gaming platform (for example, Yandex Games) or install the game from an app store, buy something in the game or watch an ad, third-party companies take part in it: the platform, the app store, the payment provider, the ad network. They collect and process data themselves — for example, platform account data, cloud saves, purchase information, advertising identifiers — under their own privacy policies. Please read them on the website of the company concerned.

We do not receive your bank card details. From a platform we may receive only the information the game needs to work: for example, a purchase confirmation or saved progress.

The website neon-tab.vercel.app uses Google Analytics (Google LLC). It counts visits, the game screens opened and the results of runs, so we know what to improve. Google receives technical data: device and browser type, approximate location (country, city), actions in the game — and sets analytics cookies. We do not pass your nickname, nickname records or any other data that could identify a player to Google, and we do not turn on Google's advertising features. For visitors from the European Economic Area, the UK and Switzerland analytics cookies are off. You can turn analytics off with a blocker or the Google Analytics Opt-out extension. More in Google's privacy policy. The Yandex Games version of the game has no Google Analytics.

5. What we do not do

• we do not sell or rent out players’ data;
• we do not use ad trackers or advertising cookies; the only third-party analytics on our website is Google Analytics (section 4);
• we do not ask for access to your contacts, location, camera or microphone;
• we do not ask for your e-mail, phone number, passport details or passwords.

If any of this changes, we will update this policy before the change takes effect.

6. Children

The game is meant for all ages, children included. We do not collect data that could identify a child, apart from the nickname a player types in for online records and duels, the chosen avatar and the technical data from section 3. Please do not use your real first and last name, phone number, address or school name in your nickname. Parents and legal guardians are responsible for how a child uses the game and may ask us to delete the child’s online results (section 7).

7. How to delete your data

• Progress: the “Reset” button in the game’s settings deletes the Stars, Crystals and Records on your device.
• Your songs: delete them in “My Music”.
• Everything on the device at once: clear the site data in your browser’s settings or uninstall the app. This cannot be undone: we will not be able to restore the data, because we do not have it.
• Online records: to stop new results from being sent, erase your nickname in the settings. To delete results already sent, write to us (section 9) with your nickname, the track and the approximate date. We will delete those entries. Duels delete themselves 30 days after they are created or last answered, or earlier on request. Spam protection counters delete themselves within an hour at the latest.

8. Security and changes to this policy

The connection to the server is protected by HTTPS, and the online server keeps a minimum of data. No way of sending and storing data is completely secure, so we cannot guarantee absolute security. If the policy changes, the version date on this page will be updated. By continuing to play after the changes, you agree to the new version.

9. Contact

Questions about your data and deletion requests: alexanderkurachakov@gmail.com.