Last updated: August 31, 2026

This Privacy Policy describes how personal data is processed through the mobile and macOS applications published by Digital Taps (the “Applications”).

Not every Application uses all the features and services described below. The sections concerning advertising, notifications, location, analytics or diagnostics apply only to Applications that provide those features. The section dedicated to Circuit Deck specifically describes how the macOS app operates.

This Privacy Policy does not apply to the digitaltaps.it website, which is governed by the website privacy and cookie policies available on that site.

1. Data Controller

Digital Taps di Godino Paolo
Via Badini Confalonieri 47, Turin, Italy
VAT number 12218600018
Email: privacy@digitaltaps.it

2. At a glance

  • Data created within the Applications, such as documents, progress, preferences and content, is normally stored on the user’s device.
  • Some mobile Applications use Google Firebase technical services for analytics, diagnostics, notifications or remote configuration.
  • Some free mobile Applications display advertising through AddApptr/AATKit (Gravite) and the advertising networks selected by that platform.
  • Applications that offer purchases use only the payment system provided by the relevant app store. Digital Taps does not receive payment card or payment method details.
  • Circuit Deck does not use accounts, advertising, Firebase, analytics tools or tracking systems.

3. Data processed on the device

The Applications may store the following data locally:

  • documents and content created by the user;
  • game progress, favourites, recent searches and settings;
  • visual, language and functional preferences;
  • the local status of features or purchases that have already been unlocked;
  • content copied to the clipboard only when the user uses copy, paste or sharing commands.

This data is not transmitted to Digital Taps unless the user expressly chooses to share or export it, attach it to a support request, or save it through an external service selected by the user. It remains on the device until the user deletes it, removes the Application or deletes the relevant document.

Local processing is necessary to provide the features requested by the user and, as a rule, does not involve the collection of data by Digital Taps.

4. Circuit Deck for macOS

Circuit Deck is designed to operate locally on the Mac.

Local data and features

  • Schematics are saved as documents in the location selected by the user.
  • Settings and the status of the Pro unlock are stored locally in the app’s preferences.
  • Exporting, printing, copying and pasting are performed on the Mac and with the files or services selected by the user.
  • Digital Taps does not receive schematics, their content or the user’s preferences.

Services not used

Circuit Deck does not integrate advertising, Firebase, analytics, third-party crash reporting, social SDKs, profiling, advertising identifiers or user accounts.

Pro purchase

The non-consumable “Circuit Deck Pro” purchase and any subsequent restoration are handled by Apple through StoreKit and the App Store. Apple processes the account, payment and transaction data in accordance with its own privacy policy. Circuit Deck receives only the technical information required to display the product and verify whether the unlock has been purchased; Digital Taps does not receive payment method details and does not use its own server to verify the purchase.

The legal basis is the performance of a contract or taking steps at the user’s request. The local unlock status remains on the Mac until the user deletes the app’s data. For further information, see the Apple Privacy Policy and StoreKit.

5. Features that may be available in mobile Applications

5.1 Location

Public transport Applications may request access to approximate or precise location in order to show nearby stops, routes, journeys or results. Access is granted only after the operating system requests permission and can be withdrawn in the device settings.

When location is used only on the device, it is not collected by Digital Taps. If it needs to be sent to a remote service to answer a search or calculate a route, it is processed for the time required to provide the response and is not used by Digital Taps to reconstruct the user’s movements.

The legal basis is the performance of the feature requested by the user and, where required by applicable law, consent.

5.2 Push notifications — Firebase Cloud Messaging

Some mobile Applications may send notifications through Firebase Cloud Messaging (FCM). The service processes technical installation identifiers and notification tokens, device data and technical information concerning message delivery. Notifications are enabled only after permission has been granted through the operating system and can be disabled in the device settings.

Pending messages are retained by FCM for the technical delivery period, generally no longer than four weeks. Identifiers remain valid while the installation is active or until they are deleted or invalidated. The legal basis is the user’s consent and the performance of the requested service.

Information about the provider: Privacy and Security in Firebase and the Google Privacy Policy.

5.3 Usage analytics — Google Analytics for Firebase

Where present and enabled, Google Analytics for Firebase collects data about use of the Application, such as launches, screens or features used, technical events, device model and operating system, approximate geographic area and technical installation identifiers. Digital Taps uses aggregated data to understand how the Applications operate and to improve them.

In the European Economic Area and in other cases required by law, non-essential collection is enabled in accordance with the choices expressed by the user. User-level and event-level data is retained for the period configured in the service, which does not exceed 14 months; aggregated reports may remain available for longer. The user may change or withdraw their choices through the privacy panel available in the Application, where provided, or through the device settings.

The legal basis for non-essential analytics is consent. Information about the provider: Privacy and Security in Firebase and the Google Privacy Policy.

5.4 Diagnostics — Firebase Crashlytics

Some mobile Applications use Firebase Crashlytics to identify errors and crashes. The service may process stack traces, the Application and operating system version, the device model and technical state at the time of the error, technical installation identifiers and other diagnostic data. Digital Taps does not intentionally include user-created content in these reports.

Firebase retains crash stack traces, diagnostic data and associated identifiers for 90 days before beginning the deletion process. Processing is intended to maintain security and stability and to correct errors. The legal basis is Digital Taps’ legitimate interest in maintaining reliable Applications; where access or transmission requires consent under applicable law, the service is enabled on the basis of that consent.

Information about the provider: Privacy and Security in Firebase.

5.5 Remote configuration — Firebase Remote Config

Some mobile Applications use Firebase Remote Config to receive technical parameters, enable features or change Application behaviour without releasing a new version. The service uses a Firebase installation identifier, app version data and technical information about the device.

The identifier is retained until its deletion is requested. Following such a request, Firebase removes the associated data from live and backup systems within 180 days. The legal basis is the legitimate interest in managing and maintaining the Application; consent applies to any non-essential features where required.

Information about the provider: Privacy and Security in Firebase.

5.6 Advertising in mobile Applications

Some free mobile Applications are supported by advertising. Ads are managed through AddApptr/AATKit, a Gravite brand, which may select and coordinate different advertising networks, including Google AdMob and, where included in the Application’s configuration, Meta Audience Network.

Depending on the user’s choices and the provider involved, the following data may be processed:

  • advertising or installation identifiers;
  • IP address and technical device information;
  • interactions with advertisements and usage data;
  • approximate geographic area;
  • consent preferences and consent strings;
  • data used to select, display, limit and measure advertisements and prevent fraud.

In the European Economic Area, the United Kingdom and Switzerland, preferences are collected through the consent management platform displayed in the Application. The current list of partners, purposes, legal bases and retention periods declared by each provider can be viewed in the Application’s privacy panel. The user can reopen this panel to change or withdraw their choices.

Ad personalisation and tracking across applications or services take place only where permitted by law and authorised by the user. Where consent is not provided, limited or contextual advertisements may be displayed using only the technical data necessary for delivery, security and basic measurement.

Principal information: Gravite/AddApptr Privacy Policy, Google Privacy Policy and Meta Privacy Policy.

Digital Taps does not use the Meta Pixel (Facebook Pixel) and does not use Arena Daemon.

5.7 Purchases through the App Store and Google Play

When an Application offers purchases, the transaction is handled by the Apple App Store or Google Play. The store provider directly collects and processes account, payment method, tax and transaction history data in accordance with its own privacy policy. Digital Taps and the Application receive only the technical information required to verify the purchase, provide the content or restore the purchased item.

The legal basis is the performance of a contract. Transaction data is retained by the store providers for the periods specified in their respective privacy policies and as required by law. Further information: Apple Privacy Policy and Google Privacy Policy.

6. Support and communications from users

If a user contacts Digital Taps, the data processed may include the email address, any name provided, the content of the message, attachments and technical information provided voluntarily. This data is used only to respond, resolve the issue and protect the rights of the parties.

The legal basis is the performance of the request, any contractual relationship and the legitimate interest in managing support. Communications are retained for the time needed to close the request and, as a rule, for no longer than 24 months, unless legal obligations or the establishment, exercise or defence of legal claims require longer retention.

7. Children

For Applications expressly intended for children or families, Digital Taps applies the specific rules protecting children and limits collection to what is necessary for the feature provided. A child is not directly asked to provide a name, email address or other contact information unless this is clearly necessary, adequately explained and supported by the authorisation of the holder of parental responsibility where required by law.

Advertising or analytics features, where present in an Application intended for children, must be configured in an age-appropriate manner and without behavioural advertising based on tracking the child.

A holder of parental responsibility may contact Digital Taps at privacy@digitaltaps.it to request information or the deletion of data that may have been provided by a child.

8. Recipients and service providers

To the extent relevant to each Application, data may be processed by:

  • Apple and Google, as operators of the app stores and related services;
  • Google/Firebase, for the technical services described above;
  • Gravite/AddApptr, the consent management platform and the advertising partners listed in the Application’s privacy panel;
  • technical providers and professional advisers supporting Digital Taps, authorised or appointed as data processors where necessary;
  • public authorities, where disclosure is required by law or ordered by a competent authority.

An up-to-date list of data processors may be requested from the Data Controller.

9. International data transfers

Some providers may process data outside the European Economic Area. In such cases, the transfer is based on an adequacy decision, the Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission or another safeguard provided for by the GDPR. Further information may be requested from the Data Controller or found in the providers’ privacy policies.

10. Security and retention

Digital Taps adopts technical and organisational measures appropriate to the risk. The specific periods stated in the previous sections take precedence; in all other cases, data is retained only for as long as necessary for the relevant purpose, compliance with legal obligations or protection of the Data Controller’s rights, after which it is deleted or anonymised.

11. User rights

Where provided for by the GDPR, the user may request:

  • access to their personal data;
  • rectification or updating;
  • erasure;
  • restriction of processing;
  • data portability;
  • objection to processing based on legitimate interests;
  • withdrawal of consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to privacy@digitaltaps.it. Digital Taps generally responds within one month, except in the circumstances provided for by law.

The user may also lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority in their country. The text of Regulation (EU) 2016/679 is available on EUR-Lex.

12. Changes to this Privacy Policy

Digital Taps may update this Privacy Policy to reflect changes in law, technology or the services used. The updated version will be published on this page together with its last updated date. Where a change requires renewed consent, consent will be requested in the Application before the relevant processing is enabled.