Tapoo Privacy Policy

Tapoo is a browser-based maze game where you, or a configured AI agent, guide a player through a maze to a target.

The current Tapoo version (shown at the bottom of this page) supports two control modes: Interactive mode, where you play directly, and AI Agent mode, where a configured agent API endpoint plays on your behalf. In both modes, gameplay state stays on your device; Tapoo sends no data to a remote service unless you configure AI Agent mode to request predictions from an agent API endpoint.

Data Tapoo Stores

Tapoo uses localStorage to keep durable game preferences such as level, wall weight, score-retention metrics, optional AI Agent configuration, and Tapoo Logs. Each configured AI Agent's stored configuration also includes its own turn count and decay units charged for the current level and round; the traversal-speed classification described below is computed from those counts on demand, not stored separately. If you supply a bearer token or API key, or any extra request headers, when configuring an agent, those values are stored alongside the rest of the agent's configuration under the same light obfuscation described below — they are recoverable by anyone with access to your browser profile, so only enter a credential or header value you would accept being read that way. Tapoo Logs capture requests and responses exchanged during play, stay only on your device (never sent over the network), and can be downloaded or cleared from the game controls. Tapoo also uses sessionStorage for the active round snapshot so a refresh can restore the current maze session.

All of this remains on your device unless you clear it through browser settings or use Tapoo controls such as Reset Progress. Stored values are lightly obfuscated to reduce casual tampering, but this is not strong encryption for gameplay data. Every stored entry is also tagged with Tapoo's storage schema version, separate from the app version shown at the bottom of this page. Upgrading Tapoo automatically discards any entries left over from an older schema version rather than migrating them, so an upgrade can silently reset previously stored preferences and AI Agent configuration.

Third-Party Sharing (AI Agent Mode)

AI Agent mode sends gameplay context to the agent API endpoints you configure. That context may include the current cell, destination cell, player names (user-chosen in-game nicknames), model name, allowed moves, submitted moves, score, level, and traversal history — each entry recording a visited cell and, for that cell, every open exit mapped to its neighbouring cell and whether that neighbour has already been visited. It also includes the raw counts behind a traversal-speed classification — unique cells visited and decay units charged this level (turns taken is included too, for context only) — and the classification itself: a rate (unique cells visited divided by decay units charged) below 1.0 is Backtracker, exactly 1.0 is Navigator, and above 1.0 is Trailblazer. An agent starts out as a Trailblazer and is expected to maintain that rank throughout the game. The rank is shown in the agent seat roster in your browser and included in the prompt sent to the configured agent endpoint. If Echo Back Reasoning is enabled for an agent, its own previously returned reasoning content is also included in later requests within the same turn, sent back to that same endpoint.

Only configure endpoints you trust. External endpoints may receive network metadata such as your IP address and may process gameplay context under their own policies.

Hosting Provider

The service that hosts the Tapoo website may process routine request metadata such as request logs, IP address, browser details, and timestamps under its own terms and privacy practices.

Your Choices and Controls

You can reset game progress, download Tapoo Logs, or clear Tapoo Logs from the game controls. To remove all stored site data, use your browser settings. If you have configured AI Agent endpoints, remove any you no longer trust before using that mode. Tapoo also reads your browser's Reduce Motion (prefers-reduced-motion) setting to decide whether the maze target marker blinks or stays steadily visible; this preference is read live from your browser on each check, never stored by Tapoo, and never sent anywhere.

Disclaimer

This policy explains the current browser data flows. It is not a legal certification that Tapoo satisfies every GDPR obligation in every deployment context.