Legal and privacy

Privacy Policy

Effective and last updated: 23 August 2026

This policy explains how Whac a Trump handles information in the mobile game, its global leaderboard service, this website, and support email. Whac a Trump is independently published and operated by Ernest Govaerts. For privacy questions, email privacy@whacatrump.com.

1. Summary

The game does not require an email address, password, social login, payment information, contacts, advertising identifier, precise or approximate location, camera, microphone, or photo library. The app contains no advertising SDK, behavioral analytics SDK, or cross-app tracking.

When the service is reachable, choosing a public username creates a pseudonymous installation profile and game runs can be submitted to global leaderboards. This profile is not anonymous: its username, public identifier, scores, and activity are linked to one installation credential. When the service is unavailable, the game can fall back to offline, unranked play.

This website uses no account, advertising, analytics script, tracking pixel, form, or non-essential cookie.

2. Information kept on your device

The app may store the following inside its private app data:

• your public username and randomly generated installation secret;
• separate Rush and 3 Strikes personal bests;
• cached leaderboard rows and the time each board was fetched;
• public player identifiers that you have hidden;
• ranked run details and hit events temporarily queued when a submission fails;
• basic local profile state and your audio setting.

The installation secret authenticates your pseudonymous profile. Do not share it. It is sent to the service over HTTPS, while only its SHA-256 hash is stored in the application database.

3. Information processed by the online service

The leaderboard service processes and stores:

• an internal player identifier, a public player identifier, username, normalized username, short public tag, profile status, policy version, and timestamps;
• the SHA-256 hash of the installation credential;
• run identifier, game mode and ruleset, server-issued target schedule or deterministic seed, issue and expiry times, submission state, verified score, hit count, miss count, maximum combo, personal-best status, and submission time;
• best scores and their achievement times; and
• username reports, including the reporting and reported profiles, selected reason, and timestamps.

The app version, platform, and submitted hit timestamps are processed to register a profile and verify a run. The application database does not retain the app version, platform, or complete submitted hit-event transcript after verification; it retains the verified run summary and server schedule described above.

Cloudflare necessarily processes network information, including the source IP address, to deliver and protect requests. The Worker uses an IPv4 address or shortened IPv6 network prefix as a temporary rate-limit key. Raw IP addresses are not intentionally written to the Whac a Trump D1 application tables. Cloudflare may separately process ordinary edge, security, diagnostic, log, and trace metadata under its own service configuration.

Whac a Trump application logs contain a generated request identifier, request method, generalized route, status, and processing duration. They do not intentionally include usernames, installation credentials, hit transcripts, or raw IP addresses.

4. Information visible to other players

The leaderboard API can publicly show rank, public player identifier, username, short tag, score, maximum combo, and achievement time. Use a nickname and never put a real name, email address, phone number, location, or other personal information in a username.

Duplicate usernames are allowed. The short tag only distinguishes profiles; it does not verify anyone's identity or imply endorsement.

5. Why information is used

Information is used only to:

• provide local game settings, progress, ranked runs, and leaderboards;
• authenticate the installation without a password;
• verify scores and prevent replay, tampering, spam, and abusive request rates;
• operate report, hide, rename, blocking, and deletion controls;
• respond to support, moderation, and privacy requests; and
• maintain the availability and security of the service.

Where data-protection law applies, these activities rely on providing the service you request, legitimate interests in operating a fair and secure game, compliance with legal obligations, and consent where the law specifically requires it. There is no sale of personal information, targeted advertising, or automated decision-making that produces legal or similarly significant effects.

6. Service providers and international processing

Cloudflare provides DNS, TLS, Workers, D1 database, rate limiting, static hosting, observability, and email routing. Cloudflare and its subprocessors may process data in multiple countries through its global network. D1 was configured with a Western Europe location preference, but that does not mean all network, security, log, email, or backup processing stays exclusively in the European Union. See Cloudflare's privacy policy.

Support and privacy email is forwarded by Cloudflare Email Routing to the publisher's mailbox provider. Sending email shares your sender address, message, attachments, and mail metadata with those providers. Information may also be disclosed when required by law, to protect users or the service, or as part of a lawful transfer of the app, with appropriate safeguards.

7. Retention

• Local information remains until replaced, deleted in the app, cleared by the operating system or user, or removed with the app, subject to device backup behavior.
• Cached leaderboard rows expire from use after one hour. A renamed, blocked, or deleted row may remain visible on another device until its cache refreshes or expires.
• A pseudonymous profile remains until it is deleted or moderated. Its current best score and supporting run remain with it.
• Expired runs that no longer support a best score are eligible for bounded operational cleanup when new runs are created. This cleanup does not run on a guaranteed daily schedule.
• Reports have no automatic fixed expiry and remain while both linked profiles remain, unless they are removed through moderation or deletion.
• Cloudflare logs, traces, caches, security records, email-routing records, and backups roll off under the production account settings and Cloudflare's applicable retention processes. Deletion from the live application database may not immediately remove data from temporary caches or backups.
• Support correspondence is kept only as long as reasonably needed to answer the request, document action taken, resolve disputes, and meet legal obligations.

8. Deletion and privacy choices

In the app, open Change Name → Delete Profile. When the service confirms deletion, the server removes the profile and linked runs, best scores, and reports through database cascades. The app then clears the local username, installation credential, personal bests, leaderboard caches, pending submissions, and hidden player identifiers, and generates a new installation secret. The audio preference is retained.

If the server cannot be reached, the app may offer Delete Local Only. That option cannot remove the online profile and permanently discards the credential needed to authenticate it. If deleting the online profile matters, cancel and contact support before choosing Delete Local Only, clearing app data, or reinstalling.

There is no login, cross-device recovery, or recovery of a lost installation secret. Support can investigate an old profile using its public username and tag, but those public details do not prove ownership, so manual deletion cannot always be guaranteed. Never email an installation secret or bearer token.

See the Privacy Choices page for concise instructions covering deletion, hiding, reports, correction, and contact.

9. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent where processing relies on consent. You may also complain to your local data-protection authority. These rights can have legal limits.

Because the service is intentionally pseudonymous, include the public username and short tag when contacting us. Additional verification may be needed, and public leaderboard information alone may be insufficient to establish control of a profile.

10. Children

Whac a Trump is political parody for a general audience and is not designed for or directed to young children. The app does not ask for a date of birth or knowingly seek a child's real identity. Parents or guardians who believe a child submitted personal information should contact privacy@whacatrump.com.

11. Security

The service uses HTTPS, stores a hash rather than the raw installation credential in its application database, rate-limits sensitive actions, filters usernames, and replays submitted events against server-issued schedules before accepting a score. These measures reduce risk but cannot guarantee absolute security or prove that every accepted score came from an unmodified app.

12. Changes to this policy

This page will be updated when data handling materially changes. The effective date above identifies the current version. Material changes may also be communicated in the app or store listing where appropriate.

13. Contact