Privacy Policy

Effective date: 28 October 2026

Summary

Larpy is a simulator that runs on demo money. What you type into it stays on your device: we have no servers that hold your account, no analytics and no ads. The only thing we keep is the email you leave on our website’s waitlist, if you do.

• No analytics, trackers or ads
• Your account stays on your phone
• No real money, no card numbers
• Delete it all in one tap

Who we are

Larpy is run by Petr Chmelař, Czech Republic, who is responsible for your personal data under data protection law (the data controller). “We” and “us” in this policy mean Larpy and its operator. You can reach us at [email protected].

What you enter

When you set up Larpy you give it a name, an email address, a currency and a PIN. They are only used inside the app and are kept on your device:

• name, email, currency, demo balances, cards and history live in the app’s local storage;
• your PIN is never saved as you typed it, only as a salted hash in the iOS Keychain (Android Keystore);
• Face ID and Touch ID are handled by your phone’s operating system. Larpy only learns whether the check passed.

The email isn’t verified or sent anywhere. It’s there so your profile feels like a real account.

What we don’t collect

• no analytics, usage statistics or crash reports;
• no advertising identifiers and no third-party trackers;
• no access to your contacts, location, photos, camera or microphone;
• no real card numbers, bank logins or ID documents.

We don’t sell or share your information. Apart from the waitlist below, we don’t have any.

Where your data lives

Everything stays in Larpy’s storage on your device, or in your browser’s local storage when you use Larpy in a browser. It can be part of your phone’s own backups (iCloud or Google) if you have them turned on. It’s gone when you delete your account in the app, delete the app or clear the site’s data in your browser.

Market data and other network requests

To show live prices and charts, the app asks public services for market data: Kraken for prices and charts, ExchangeRate-API and Frankfurter for currency rates, and this website for each coin’s 7-day trend. These requests carry nothing about you, but like any request on the internet they show the provider your IP address.

The coins’ 7-day trend comes from our website, which gets it from Kraken once for everyone. To keep it from being abused, it counts each address’s requests for a minute, in memory only, and keeps nothing.

This website

The site sets no cookies and runs no analytics. Like any website, the server that delivers it sees basic request data such as your IP address, only to send you the pages and keep the site safe.

The app in the phone on the home page is a demo. Its wallet only lives in the page while you have it open, and reloading the page starts it over. It asks for prices the same way the app does, and keeps the latest ones in your browser’s local storage so the next visit opens faster.

The waitlist

If you leave your email on the website to hear when Larpy is out, we keep:

• your email address;
• the date you signed up and which form you used.

We use it only to tell you about Larpy’s launch, and we don’t sell or share it. We keep it because you asked us to (your consent), and only until that one email has gone out; then we delete the list. It’s stored in a database at Cloudflare, which hosts the site. The launch email tells you how to unsubscribe, and to be taken off the list sooner, message us (see Contact below) and we’ll delete it.

To keep bots and floods off the list, the server counts sign-ups per network address for up to an hour. It stores only a scrambled (hashed) form of the address, never the address itself, and clears old counts out regularly. The form may also use Cloudflare Turnstile: when you go to type your email, your browser runs a short check from Cloudflare that’s used only to tell people from bots.

Purchases

Larpy Pro is bought through Apple’s App Store or Google Play, and they handle the payment. We use RevenueCat to check purchases. It gets an anonymous app user ID and your purchase history, never your name or email. See RevenueCat’s privacy policy. Your payment details never reach us.

Larpy cards

Larpy cards are fictional. The app never asks for or stores a real card number. A card is only a design, a name and four digits you choose.

Deleting your data

Open Profile → Delete account to permanently remove your profile, PIN and demo portfolio from the device. Deleting the app does the same. Active subscriptions are managed and cancelled in your App Store or Google Play settings.

Children

Larpy is not directed at children under 13. The app collects no personal information from anyone, so it holds none about children either. If a child has left an email on the waitlist, tell us and we’ll delete it.

Your rights

Wherever you live, you can ask us what personal data we hold about you (in practice, at most a waitlist email), and to correct it, delete it, stop using it or give you a copy. You can withdraw your consent to the waitlist at any time; that doesn’t affect what we did with it before. If you think we’ve handled your data wrongly, you can complain to a data protection authority, for example the one where you live. In the Czech Republic that’s the Office for Personal Data Protection (ÚOOÚ).

The services named above (Cloudflare, RevenueCat, Apple and Google) may process data outside your country, including in the United States. They use the safeguards data protection law requires for that, such as the EU–US Data Privacy Framework or standard contractual clauses.

Changes to this policy

If the way Larpy handles data ever changes, we’ll update this page and the date at the top.

Terms

Using Larpy is also covered by our Terms of Use.

Contact

Questions about privacy, or a request about your data? Email [email protected], or message us on X or TikTok.