← BACK TO THE ARCADE

Privacy & cookies

Last updated: September 15, 2026

This notice explains how TapNext handles information when you play at tapnext.top.

Accounts and game records

When you create an account, we store your username, a salted password hash, your best score and when it was achieved. We do not store your password in plain text. We also store login sessions, recent game runs and security rate limits to maintain accounts and check submitted scores.

Daily challenge records include the day and your best score. Shared challenges store a course seed, creator, target score and game version so friends can replay the same course. Usernames and scores can appear publicly on leaderboards and shared challenges. Choose a username you are comfortable making public.

Cookies and device storage

A necessary session cookie keeps you signed in for up to 30 days. Your selected ball skin is saved in your browser’s local storage. Clearing browser data removes those local settings and can sign you out.

Advertising

We use Google AdSense to support the arcade. When ads are served, Google and its partners may use cookies or similar technologies to serve and measure ads, including personalized ads based on visits to this and other sites. Where required, a consent message will let you accept, reject or manage these choices before optional advertising storage is used.

Learn how Google uses information from partner sites and manage personalization in Google My Ad Center.

Hosting, retention and requests

Our hosting infrastructure processes requests to deliver and secure the service. Technical request information may be processed by hosting providers. Recent run records are scheduled for cleanup after one day when new games start; account, daily score and shared challenge records remain until removed. Expired sessions and security limits are cleaned up during service use.

For questions, access, correction or deletion requests, email etherwarrior2028@gmail.com with your username. Do not send your password. We may need to verify that the account belongs to you before acting on a request.