WorldBox - God Sandbox

"We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to show advertisements to You to help support and maintain Our Service, to advertise on third party websites to You after You visited our Service. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies."

Data is shared with a large number of third-party ad networks (Google AdMob, InMobi, MoPub, AdColony, Vungle, Unity Ads) and analytics providers (Google Analytics, Firebase, Unity Analytics), each collecting data directly from users' devices.

"We may share information, such as hashed email addresses (if available) or other online identifiers collected on Our Service with these third-party vendors. This allows Our third-party vendors to recognize and deliver You ads across devices and browsers."

The company shares hashed emails and online identifiers with remarketing partners (Google, Facebook, Twitter) to track and target users across multiple devices and browsers.

"To deliver targeted advertising to You: We may use Your information to develop and display content and advertising (and work with third-party vendors who do so) tailored to Your interests and/or location and to measure its effectiveness."

The company uses location data for targeted advertising purposes, and multiple third-party ad SDKs embedded in the app may independently collect location information from users' devices.

"When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data."

The app collects extensive device information including unique device IDs and identifiers, with the open-ended 'but not limited to' and 'other diagnostic data' language leaving the scope of collection unclear.

"The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. The Company will also retain Usage Data for internal analysis purposes."

No specific retention periods are defined. The policy uses open-ended language like 'as long as is necessary' with multiple broad exceptions, providing no clear timeline for when data will be deleted.

"We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page."

Changes take effect immediately upon posting. While they mention email/prominent notice, the policy states changes are effective when posted regardless of whether the user has seen or agreed to them.