Legal

Privacy Policy

Last updated 30 October 2026. App Circle (appcircle.co.uk and the Android companion app net.appcircle.companion) is operated by Total Carnage (Total Carnage Game Development Studio), UK, which is responsible for your data.

What we collect

  • Account: username, email address, password (stored only as a hash), email verification and password reset records, role and account status.
  • Profile: optional avatar, bio, country, time zone, Android version, devices and device profiles, preferred categories, and the Google Play (and iOS store) email you test with.
  • Testing activity: apps you join or post, daily open / usage verification from the companion app, feedback, bug reports, ratings, bonus task submissions, coin ledger, achievements and referrals.
  • Content you upload or write: app listings, APKs, screenshots and images, promo codes, messages, support tickets, forum posts, ideas and poll votes.
  • Technical and security data: IP address, browser user agent, device type, operating system and browser name, approximate country (from request headers), pages visited on the site, login history and failed login attempts.
  • Sign-up source: when you first arrive we note where you came from (for example a search engine or AI assistant link) so we know which channels bring new members.

Cookies

  • Session cookie — keeps you logged in during a visit (essential).
  • remember — “remember me” login, up to 30 days.
  • referral_code — remembers a referral link you followed, 30 days.
  • ac_src — remembers the sign-up source (where you arrived from), 30 days.
  • ac_country_snooze — hides the “set your country” banner until the next day.

We do not use advertising cookies or third-party analytics trackers.

Why we use it

  • To run your account and match testers with apps (contract).
  • To verify testing, award coins and prevent fraud, multiple accounts and abuse (legitimate interests).
  • To send account emails such as verification, password reset and testing notifications.
  • To understand, in aggregate, how people find and use the site so we can improve it.

Who sees it

  • App posters see the testing email you share and your testing progress for apps you join, so they can add you in Google Play Console.
  • Other members see your public profile (username, avatar, stats, ratings) and anything you post publicly.
  • Moderators and admins can see account and security data to handle reports and abuse.
  • Service providers: our VPS hosting provider. Pages load fonts and libraries from Google Fonts, jsDelivr and cdnjs (Cloudflare), and app icons from Google Play, which means those services receive your IP address when your browser fetches them.
  • We do not sell your data.

Keeping and deleting it

We keep your data while your account is active. You can request deletion at any time and we aim to complete it within 30 days; see that page for what is removed and what limited security records may be kept. Under UK GDPR you can also ask for a copy of your data, correction, or restriction, and complain to the ICO (ico.org.uk).

Contact

Email privacy@total-carnage.com or use Help & Support. See also our Terms of Use.