Ranked #25 of 38 in Game Puzzle
Red Flags
1Warnings
7"If you access the Services through a mobile device (e.g. a smart phone or tablet), we may be able to identify your devices' operating system, generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings, your mobile network information (e.g. eUICC ID, IMSI), and your mobile device's advertising ID, etc."
Cedar collects hardware-level identifiers like IMSI (SIM card identifier), eUICC ID, advertising ID, and scans Wi-Fi and Bluetooth settings โ data well beyond what a puzzle game needs to function.
"When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region. You may choose not to share your location details with us by adjusting your mobile or desktop device's location services settings."
Cedar passively infers location using Wi-Fi, Bluetooth, and IP address โ multiple signals beyond simple IP geolocation โ for a mobile game that has no apparent need for location data.
"We may disclose your personal information to business partners, co-sponsors of Promotions, and other third parties in order to provide you with Services that may interest you. ... We use third-party analytics, advertising, and marketing providers to collect information about your use of the Sites, see the overall patterns of usage on the Sites, deliver advertisements to your social media account based on email addresses, optimize ad performance, and determine whether our advertising is effective."
Cedar shares personal information broadly with business partners, sponsors, analytics providers, and advertising partners, including for custom audience matching on social media platforms.
"Where permitted by applicable law, we may share your personal information with marketing and advertising partners for targeted advertising purposes, such as matching custom audience or creating lookalike audience on social media or other marketing platforms, so that we can better understand which of our Services may be of interest to you, market our Services to you, and to provide us information necessary to improve our Services."
Cedar shares personal data with advertising partners for custom audience matching and lookalike audience creation across social media platforms, enabling cross-context tracking and profiling.
"We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. ... If you wish to cancel your account or request that we no longer use your information to provide you services, we may still retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."
Cedar provides no specific deletion timeline and explicitly states it may continue retaining and using personal information even after a user cancels their account.
"We may make changes to this Privacy Policy from time to time and will post the date it was last updated at the top of this Privacy Policy. Any changes to this Privacy Policy will become effective on the "Last Updated" date indicated above. We will provide additional notice to you if we make changes to this Privacy Policy that materially affect your privacy rights."
Changes take effect immediately upon posting with no requirement for user consent. Only 'material' changes warrant additional notice, leaving Cedar discretion over what qualifies.
"If you are not able to do so or if you wish to terminate and delete your account, you may contact us at Following receipt of a request from you, we will take reasonable steps to make changes or delete your information as required under the applicable law. ... we may still retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."
Account deletion requires contacting Cedar directly (no self-service option mentioned), and even after deletion is requested, Cedar reserves the right to retain data for broadly defined purposes.