Tile Clear - Puzzle Game

"If you access the Services through a mobile device (e.g. a smart phone or tablet), we may be able to identify your devices' operating system, generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings, your mobile network information (e.g. eUICC ID, IMSI), and your mobile device's advertising ID, etc."

Collecting IMSI (SIM card identifier), eUICC ID, Bluetooth settings, and Wi-Fi data goes well beyond what a puzzle/mystery game needs to function, enabling persistent device fingerprinting and carrier-level identification.

"When you use our Services, we may infer the generic physical location and geographic regions of your device from your Wi-Fi, Bluetooth and other device settings. For example, your IP address may indicate your general geographic region. You may choose not to share your location details with us by adjusting your mobile or desktop device's location services settings."

Cedar passively infers user location from multiple signals including Wi-Fi, Bluetooth, and IP address — this is continuous background geolocation inference that goes beyond what a casual game requires.

"We may disclose your personal information to business partners, co-sponsors of Promotions, and other third parties in order to provide you with Services that may interest you. We use third-party analytics, advertising, and marketing providers to collect information about your use of the Sites, deliver advertisements to your social media account based on email addresses, optimize ad performance, and determine whether our advertising is effective."

Personal information is shared with a broad and loosely defined set of business partners, analytics providers, and advertising partners for marketing purposes, including matching custom audiences on social media platforms.

"We may use various tracking technologies to collect and store information about your use of our Services. We may share your personal information with marketing and advertising partners for targeted advertising purposes, such as matching custom audience or creating lookalike audience on social media or other marketing platforms, so that we can better understand which of our Services may be of interest to you."

Cedar uses advertising IDs, SDKs, pixels, and cookies to track users across platforms and shares data with advertising partners to build custom and lookalike audiences on social media, enabling cross-service profiling.

"We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. We will cease to retain your personal information or remove the means by which the personal information can be associated with you as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal information was collected and is no longer necessary for legal or business purposes."

No specific retention periods are defined — data is kept as long as Cedar deems it 'necessary' for broadly defined business purposes, giving users no clear expectation of when their data will be deleted.

"We may make changes to this Privacy Policy from time to time and will post the date it was last updated at the top of this Privacy Policy. Any changes to this Privacy Policy will become effective on the "Last Updated" date indicated above. We will provide additional notice to you if we make changes to this Privacy Policy that materially affect your privacy rights."

Changes take effect immediately upon posting with no requirement for user consent. Only 'material' changes warrant additional notice, and continued use constitutes acceptance of updated terms.

"Under certain circumstances, you may have the right to request that we delete the personal information that we hold about you. This right is not absolute, and we may refuse your right to delete if it is reasonably necessary for us to provide a service requested by you; to perform a contract between us; to maintain functionality and ensure security of our systems; to enable solely expected internal uses of your personal information; to exercise a right provided by law; to comply with a legal obligation, or if there are compelling legitimate grounds for keeping your personal information."

Cedar lists numerous broad exceptions that allow them to refuse deletion requests, and explicitly states that even after account cancellation they may retain data for legal obligations, disputes, and agreement enforcement.