Ranked #11 of 15 in Game Adventure
Red Flags
2"we may retain copies of in-game chat or voice data in the following limited circumstances: (a) when player submits a report of chat data, we retain that data to investigate the report; (b) where retention is necessary to investigate violations, prevent fraud, preserving evidence of any violations of the Сontract or comply with legal obligations; or (c) as otherwise disclosed in this Privacy Policy."
While framed as limited, the company retains broad discretion to keep copies of player chat messages and voice data for investigation, fraud prevention, and evidence preservation, with an open-ended catch-all clause.
Warnings
7"These service providers can be divided into the following groups: technical support providers (IT infrastructure assistance); software providers, SaaS providers — for the cases when these providers host necessary personal data on our behalf; professional advisers such as legal counsels, data privacy consultants and specialists, solicitors, accountants, tax advisors, auditors, insurance brokers; service providers that assist us in providing support to users... advertising and analytics partners processing data for: targeted campaigns, cross-platform retargeting, remarketing, attribution, look-a-like audience creation and performance measurement, mobile attribution."
Personal data is shared with a wide range of third parties including technical providers, professional advisers, audience research firms, and advertising/analytics partners for purposes extending well beyond core game functionality.
"We may process Сlient ID, technical and performance data such as network status (e.g., connection type, latency, connection details), device information (Device ID, device platform, device type and model, device OS version) and device performance metrics (e.g., temperature, memory or CPU usage, FPS, battery level), application version, and other diagnostic parameters, crash logs/reports."
The app collects granular device data including CPU usage, battery level, device temperature, memory usage, carrier information, and device motion parameters — much of which goes beyond what a game needs for core functionality.
"Your login and gameplay data to enable the operation and security of our Game, such as Client ID, user name, IP address, country/region location, technical identifiers (e.g. Server ID), device information (Device ID, device platform, device type and model, device OS version)."
The game collects IP addresses and country/region location data as part of standard gameplay, enabling IP-based geolocation tracking of players.
"We may use your Personal data to measure, analyse, and optimize the performance of our marketing campaigns and user acquisition activities across different advertising partners, as well as to provide you with personalised advertisements and promotional content outside of our Game through third-party advertising partners (such as Meta/Facebook Ads, Google Ads, and others). For this purpose, the following Personal data may be used: technical Identifiers, such as advertising identifiers, IP address, device information... user agent, engagement information, user interactions within the app."
The company uses advertising identifiers and device information to track users across platforms and serve personalized ads outside the game via partners like Meta and Google, enabling cross-platform profiling and retargeting.
"We will retain the Personal Data associated with your account until the termination of the Contract. In some cases, we will not delete or anonymize your Personal data where we still have a legitimate interest to use your personal information. For example, we may still retain your Personal data to resolve disputes, enforce our Contract or other user agreements, or comply with legal requirements."
Data is retained for the life of the account and potentially beyond, with broad discretion to keep data after account termination based on vaguely defined "legitimate interest" including dispute resolution and contract enforcement.
"We will occasionally update this Privacy Policy as necessary to protect our users, furnish current information, and respond to legal and technical changes. The most current version of the Privacy Policy will govern our use of your information and will be available at https://chillbase.net/onestate-privacy-policy. Any new policy will replace all old versions of the Privacy Policy."
The company can update the privacy policy at any time with no requirement to notify users or obtain consent. The latest version automatically governs all users, and there is no mention of a notice period or opt-out mechanism.
"Once the request is submitted through one of the methods mentioned above, your Game account and all personal data linked to the account for which you submitted the deletion request will be automatically deleted within 8 days permanently and irreversibly. ... You may cancel your account deletion request... Such cancellation can be made only within 7 сalendar days of submitting the deletion request, including the day the request was submitted."
The deletion process has an 8-day waiting period, and data may still be retained after deletion under broad exceptions like 'defence of legal claims' or tax archival purposes. The near-overlap between the 7-day cancellation window and 8-day deletion window adds unnecessary complexity.