Privacy Policy

Last updated: 29 September 2026

This policy explains what personal data 12Tester collects, why, who can see it and what your rights are. It applies to the website and service at this address.

1. Who is responsible

The controller of your personal data is Svetlin Minkov, a private individual based in Bulgaria. Contact for any privacy question or request: support@12tester.dev.

2. What we collect

Google account data when you sign in with Google: your name, email address and a technical account identifier. We never see your Google password.
Profile data you enter: display name and the Google account you use in Google Play ("Google Play account"), which can differ from your sign-in email.
Apps you add as a developer: name, package name, Google Play and opt-in links, Google Group address, description and icon.
Testing activity: testing groups and tests you join or leave, daily check-ins with their dates, whether you could install or open an app, feedback, quick tests and reports you send, and your phone model and Android version.
Telegram, only if you connect it in Profile: the chat ID the bot needs to send you reminders. Disconnect in Profile or send /stop to the bot to remove it.
Credits and reputation: every credit movement (bonus, spent, earned, refunds, penalties) and your reputation score.
Technical data: session cookies that keep you signed in, and standard server logs (such as IP address and time of request) kept by our hosting providers.

3. The Android app

The 12Tester Android app is optional and only works after you connect it to your account. On your phone it uses:

Usage access, which you grant in Android settings. The app reads how long each app was open today, but it sends to 12Tester only the time for the apps you test on 12Tester, together with whether each of those apps is installed. It never sends which other apps you have or use.
The list of launchable apps, only to tell whether an app you test is installed and to open it for you. The list stays on your phone.
The camera, only while you scan the pairing QR code. Images are processed on the phone and never stored or sent.
Notifications, for the evening check-in reminder.

The app stores a device token on the phone so it stays connected; we keep only a hash of it together with the phone's name (for example "DOOGEE S70") and when it was last seen. Disconnect the phone in the app or in Profile to delete it. All data is sent encrypted (HTTPS). The app contains no ads, analytics or third-party tracking.

4. Why we use it and on what legal basis

To provide the service — accounts, batches, check-ins, credits and payouts (performance of the contract with you, Art. 6(1)(b) GDPR).
To keep the platform fair and safe — preventing fake check-ins, handling reports, pausing broken apps and restricting abusive accounts (our legitimate interest, Art. 6(1)(f) GDPR).
To send check-in reminders when a developer of a test you joined asks for one. You can turn them off in Profile at any time.
To answer you when you contact us, and to meet legal obligations.

We do not sell your data, show ads or use tracking or analytics cookies.

5. Who can see your data

Developers of apps you test see your display name, your Google Play account and your check-in progress. They need your Google Play account to add you to their Google Group, which Google requires for closed testing.
Other users see your display name and reputation next to apps you publish. Reports are shown to developers without the reporter's identity.
Service providers that process data on our behalf: Supabase (database, authentication and file storage, hosted in the EU — Frankfurt, Germany), Vercel (website hosting; may process requests outside the EU under the European Commission's Standard Contractual Clauses), Resend (sending reminder emails, under the same clauses), Telegram (reminder messages, only if you connect it) and Google (sign-in).
Donations are handled entirely by Ko-fi and its payment providers under their own privacy policies; we only learn what Ko-fi shares with us about a donation.
Authorities, only where the law requires it.

6. How long we keep it

We keep your data while your account exists. When you delete your account (Profile → Delete account), your profile, apps, test history, credits, reports and uploaded icons are deleted immediately. Copies may remain in our providers' backups for a short period until they are overwritten. Server logs are kept by our hosting providers for a limited time.

7. Your rights

Under the GDPR you have the right to:

access your data and receive a copy of it;
correct inaccurate data (most of it you can edit yourself in Profile and My apps);
have your data deleted (Profile → Delete account, or ask us);
restrict or object to processing based on legitimate interest;
data portability.

Write to support@12tester.dev and we will answer within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the authority in your EU country.

8. Cookies

We only use cookies that are strictly necessary to keep you signed in and to complete the Google sign-in securely. They are deleted when you sign out or after they expire. We use no advertising, analytics or tracking cookies, so no consent banner is needed.

9. Age

12Tester is not intended for anyone under 16. Do not use it if you are younger.

10. Changes

We may update this policy. The date at the top shows the latest version; important changes will be announced on the website.