Privacy information

What information the platform uses, why it is needed and how to contact us about it.

Who to contact

Tapmello is operated by individual entrepreneur «SMM DRUG», Маликов Олег Михайлович, Kazakhstan. For account or data questions, email smmdrug@gmail.com.

Business accounts

We process your name, email, account authentication records, campaign settings, uploaded artwork, image prompts and order references to operate your account, create games, confirm publication and respond to support requests. Passwords are handled by our authentication system; they are not displayed in campaign results.

Players and campaign contacts

Games record attempts, scores, timing, reward issuance and redemption, and page or store-link activity. A campaign may ask for a name, email or phone number before play or when a reward is claimed. The game shows the requested fields; optional fields can be skipped.

The campaign owner receives the player information collected for their campaign, can export results and can send the configured information to their chosen CRM using a webhook. Contact that business about its offer and its later use of your contact information. For a platform issue or help reaching the owner, contact Tapmello with the game link.

Browser storage and service records

We use session cookies for business sign-in, a language-preference cookie when you choose a site language, and local browser storage to help recover game results and reward codes on the same device. Player contact fields are not saved in that local recovery storage. Our hosting and security services process technical request information needed to serve pages, diagnose errors and limit abuse.

Optional website analytics

Analytics on Tapmello’s public marketing pages is off until you choose Allow analytics. If allowed, we use an anonymous first-party cookie and record the canonical page, selected call-to-action, site language, a broad source and medium category, and an opaque campaign code. Known search or social referrers are reduced to a fixed channel; unknown referring hostnames are discarded. These events do not contain your name, email, phone number, IP address, full URL, search terms or page contents.

To limit automated abuse, the analytics endpoint briefly counts requests in one-way HMAC-derived network shards. Tapmello does not store the incoming IP address or a stable network identifier in its analytics database.

We use these records to understand which pages help visitors reach the editor and improve the signup and publication journey. Anonymous visits and events that are not linked to an account are retained for up to 90 days. If a visit is linked when a business account is created, its source attribution and funnel facts become operational business records kept under the account and service retention described below.

Your analytics choice cookie lasts for up to 12 months. Choose Decline in the panel, or reopen Analytics choices below, to stop future browser analytics. You can change your choice at any time. The preference cookie itself is kept so Tapmello can remember your decision.

Services involved

Tapmello uses Vercel for hosting and file storage, Turso for application data, OpenAI for requested image generation, and Lemon Squeezy for payment processing. Image descriptions, necessary generation instructions and any logo you explicitly choose as a visual reference are sent to the image provider. We retain generation status, request identifiers and available token-usage estimates to control service costs and investigate failures. Do not put player contacts or confidential information in an image prompt.

Payment details entered at checkout are handled by Lemon Squeezy and its payment providers. Tapmello receives order and confirmation information rather than full payment-card details. A campaign’s external CRM is selected by its owner. These providers may process information in countries different from your own.

Access and retention

Campaign results remain available to the owner after the paid month while Tapmello operates. Expiry or archiving a campaign does not itself erase its records. Account, order and operational records are retained as needed to provide the service, resolve problems and meet applicable obligations.

You can contact us to request access, correction or deletion of information or to ask about its use. We may need to verify the request and coordinate with the campaign owner; some records may need to be retained for payment, security or legal reasons. Do not send a password with your request.

For service questions, visit Help & contact.