Privacy policy
Version of 4 November 2026
Who is responsible
The Lapdrop app (app.lap-drop.com) is operated by Lapdrop (provider details in the imprint). For any privacy question or request, write to [email protected].
What we store
- Account: your display name, handle, profile photo, email address (from Google Sign-In or email registration), and account identifiers needed to keep you signed in (including a Google account id when you use Google Sign-In). Email/password accounts store a salted password hash on the server (PBKDF2), not the plaintext password. Session tokens are stored only as hashes. A WordPress / lap-drop.com website membership, if any, may be separate.
- Birth year: if you enter it, used only to check age limits (16+ for chat, higher limits for some circles).
- What you create: circle posts, chat and private messages, photos, reviews, circles you make, needs, invites and reports.
- Activity: points and stamp-card history, game scores, favourites, interests, home town and notification settings.
- Location: used on your device to show what is near you. It is stored only when you choose it yourself, for example a check-in, your town or a saved route.
- Technical data: IP address and request logs for security and abuse limits, managed separately from account deletion.
Why we use it
To run the app you asked for (your account, circles, chat, points, games); to keep the app safe (age checks, abuse limits, reports and moderation); to meet legal duties, such as handling notices about illegal content; and, only with your consent, for optional features such as notifications.
Who receives it
Other members see what you post in circles and chats you take part in, and your public profile. We use our own server in Spain and a network and security service in front of the app. Map tiles are fetched through our own server; address search and some map links use OpenStreetMap services. We do not sell your data and we do not show third-party advertising.
How long we keep it
Your data is kept while you have an account. When you ask us to delete your account, there is a 30-day grace period in which you can change your mind. After that, we clear the app profile fields and account-only records listed on the deletion page. Messages and posts that other members rely on stay, but they are shown as written by "Deleted member". Identifiable structured contact cards, player-seat names and attributable private live-location metadata are cleared. Personal information inside retained free text, public/shared photos or legacy location forwards without ownership provenance is not automatically removed. Contact us to request removal of personal information in retained content. Security logs are managed separately from app-account deletion.
Your rights
You can see, correct, download and delete your data, object to some uses and ask for restriction. In the app: Profile → "Download my data" gives you a JSON export of app-account data, and Profile → "Delete my app account" starts deletion. For anything else, write to [email protected]. You may also complain to a data protection authority; in Spain this is the Agencia Española de Protección de Datos (aepd.es).
The lap-drop.com website is separate
Deleting or downloading your app data does not change your account on the lap-drop.com website. Manage that account on lap-drop.com.
Cookies and device storage
The app stores a few things on your device that it needs to work: your sign-in, language, settings and your cookie choice. We do not use advertising or analytics cookies at this time. You can change your choice at any time with "Cookie settings" at the bottom of this page.
Age
Chat and private messages are only for members aged 16 and over.
Changes
We will show important changes in the app before they apply.