Privacy Policy

1) Introduction

This Privacy Policy explains how Garumgolkum Tolakumgat ("we", "us", "our") collects, uses, discloses, and protects information when you use our app (the “App”). It applies to users globally, including the EEA/UK (GDPR), US (e.g., CCPA/CPRA), and Brazil (LGPD).

Summary: We collect personal and non‑personal data to operate the App, provide analytics and crash reporting, prevent fraud/cheating, and deliver both personalized and non‑personalized advertising. You can manage consent and opt‑outs in Your Choices.

2) Information We Collect

A. Personal Data

• Identifiers: IDFA (iOS), GAID/AAID (Android), device ID, IP address.
• Approximate location: derived from IP or device signals.
• Contact information: your email and message content when you contact support or opt into newsletters.
• Purchase information: purchase tokens/receipts and item details (payment is processed by the app store).
• User preferences: in‑game settings (language, audio), consent selections.
• Crash & diagnostics: crash traces, performance metrics, limited device info.

B. Non‑Personal / Usage Data

• Game events (sessions, levels completed, features used), engagement metrics.
• Generic device info (model, OS version, screen size).
• Aggregated or anonymized statistics.

We do not intentionally collect special categories of data (e.g., health, biometric, precise geolocation) and do not access contacts, camera, or microphone unless a specific feature clearly requires it and you grant permission.

3) How We Use Information

• Operate the App: deliver gameplay, save progress, ensure core functionality.
• Analytics & improvement: measure features, fix bugs, optimize performance and balance.
• Crash reporting & fraud prevention: diagnose issues, mitigate cheating/invalid traffic.
• Advertising: deliver, cap, measure, and personalize ads (where consent is provided).
• Purchases: validate receipts and deliver entitlements.
• Support & communication: respond to inquiries you send us.
• Legal compliance: tax, audit, or lawful requests.

4) SDKs & Third‑Party Services

We integrate the following partners who may process data as independent controllers or processors. They collect device identifiers, IP address, event data, and ad interaction data to provide analytics, attribution, fraud prevention, crash reporting, and advertising.

• Firebase (Google) — Analytics & Crash: Policy
• AppsFlyer — Attribution & Anti‑fraud: Policy
• Google AdMob — Ads: Policy
• Unity Ads — Ads: Policy
• AppLovin — Ads: Policy
• ironSource (Unity LevelPlay) — Ads/Mediation: Policy
• DT Exchange (Digital Turbine/Fyber) — Ads/Mediation: Policy
• Meta Audience Network — Ads: Policy
• Pangle (ByteDance) — Ads: Policy
• Mintegral — Ads: Policy

Partners may combine data from your device with information from other apps/sites to deliver, measure, and personalize advertising, detect fraud, and compile aggregated statistics.

5) Data Sharing & Disclosure

• Service providers/partners: to perform analytics, attribution, ads delivery, crash reporting, and support.
• Platforms: Google Play and Apple App Store for purchases and fraud prevention.
• Legal: when required by law, to enforce terms, or protect users and our rights.
• Business transfers: in case of merger, acquisition, or similar transaction, subject to this Policy.

We do not sell your contact information. Under some US state laws, certain ad practices may be considered a “sale” or “sharing” for cross‑context behavioral advertising. See Your Choices for opt‑out options.

6) International Transfers

We and our partners may process data globally. Where required, we rely on lawful transfer mechanisms such as Standard Contractual Clauses (SCCs) and implement appropriate safeguards.

7) Retention

• Analytics & ads measurement: typically up to 24 months (often shorter per partner policy).
• Crash logs: up to 12 months.
• Support emails: up to 24 months after resolution.
• Purchase records: as required by accounting and tax laws.

We delete or anonymize data when it is no longer needed for the stated purposes.

8) Security

We use administrative, technical, and organizational measures (e.g., encryption in transit, access controls, logging) to protect data. No method is 100% secure; we continuously improve our safeguards.

9) Your Choices & Controls

In‑App privacy controls

• Toggle personalized ads, analytics, and crash reporting (where supported).
• Manage permissions; the OS will prompt you for consent when a feature needs access.

Device/OS controls

• iOS: Settings → Privacy & Security → Tracking; reset IDFA in Apple Advertising settings.
• Android: Settings → Google → Ads → Delete advertising ID or opt‑out of ad personalization (wording may vary).

Region‑specific

• EEA/UK: we request consent for personalized ads/analytics via a consent prompt (IAB TCF where applicable). Withdraw any time in the App.
• US (CCPA/CPRA): use the in‑app “Do Not Sell or Share My Personal Information” link or email kuranbumkaeet@gmail.com. We honor legally required opt‑out signals.

10) Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object, obtain a copy (portability), and withdraw consent. To exercise these rights, use in‑app controls or contact us at kuranbumkaeet@gmail.com. We may ask for information to verify your identity and will respond within the required timeframe.

EEA/UK representatives or a DPO may be appointed; contact details will be provided here if applicable.

11) Children’s Privacy

The App is not directed to children under 13 (or the local age of digital consent, e.g., 16 in some EEA states). We do not knowingly collect personal data from children. If you are a parent/guardian and believe your child has provided data, contact us to request deletion. If we launch child‑directed experiences, we will configure SDKs to non‑personalized ads and comply with COPPA/GDPR‑K (including age gating and consent flows).

12) Links & Third‑Party Content

Our App may link to third‑party sites or services. Their practices are governed by their own policies. Please review their privacy notices.

13) Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new Effective date and, where required, notify you in the App or by other appropriate means. Continued use of the App after changes means you accept the updated Policy.

14) Contact