Your data

Privacy policy

This notice covers the Touchgasm website, customer accounts, payments and pack builder.

Data controller and contact

The personal data controller is Kamil Kmetyk, trading as Dark Fox Kamil Kmetyk. Biała Góra 107, 97-505 Dobryszyce. NIP: 594-159-48-85.

For personal data enquiries, contact contact@touchgasm.com.

Account and purchase

We process your name, email address, one-way password hash, email verification status, sessions and order information. This data is used to create your account, handle purchases, send account-related messages and provide app downloads. The legal basis is performance of a contract or steps taken before entering into one.

Stripe handles payments. You enter your card number and CVC on Stripe's page; we do not store them in our database. We receive payment identifiers, status, amount and currency to confirm purchases and handle refunds or disputes.

Pack builder and macOS app

Recordings, images and pack contents remain in your browser's memory. The builder does not upload them or save packs to your account. Refreshing the page clears unsaved work.

The macOS app does not send finger positions, touch history or pack contents to a server. Gesture recognition and sound playback happen on your device. Current positions are used for gestures and the optional statistics display; raw touch history is not saved.

Pack library

Only when you separately submit a ZIP to the library do we store the pack on the server with its description, author name, NSFW label and acceptance of the terms. Before approval, only the author and administrator can access it; once published, the pack, description and author name are public. The builder never submits them automatically.

Ratings are associated with your account; we publicly display their average and count. Comments are public together with your account name. We process this data to provide the library service, and moderation records and reports also to protect rights and prevent abuse. Packs and comments are retained until withdrawal or deletion; necessary dispute records may be retained for dispute resolution and applicable limitation periods. Public copies downloaded by others remain outside our control.

Account and access administration

The site administrator can correct account details, grant access to the app and specific test builds, and prepare a data export. Permanent account deletion removes its sessions, entitlements, download links, ratings, comments and uploaded packs with their files. Necessary transaction records are retained without an account link for accounting and legal claims. Payment provider records and backups have separate retention rules; deleting an account does not erase those immediately.

Security and contact

Sessions, IP addresses and technical request data may be processed to protect accounts and the site from abuse and to diagnose errors. The legal basis is the controller's legitimate interest in maintaining security. When you contact us, we use your message and contact details to respond.

Analytics and cookies

Google Analytics runs only with consent on public information pages. Declining does not block any service. You can withdraw consent in the footer. Details and browser storage periods are listed on our cookie page.

Recipients and retention

Hosting, email and payment providers may receive the data needed to deliver their services. With your consent, Google receives analytics data. We do not sell personal data. Where a provider processes data outside the EEA, its transfer arrangements and appropriate safeguards apply, such as standard contractual clauses or another applicable mechanism.

We retain account data while providing your account. Purchase records are kept as needed to provide access to the app, handle claims and meet legal obligations, including tax and accounting duties. Deleting an account does not automatically remove records we are legally required to retain.

Your rights

You may request access, correction, erasure, restriction of processing and data portability, and object where applicable. You can withdraw analytics consent at any time without affecting the lawfulness of earlier processing. You have the right to complain to the President of Poland's Personal Data Protection Office (UODO).

Providing account data is voluntary but necessary to create an account and complete a purchase. We do not make decisions with legal effects about you solely through automated processing or use your data for advertising profiling.