Ranked #7 of 18 in Game Simulation
Red Flags
2"Inferences drawn from personal data to create your profile reflecting a person's preferences or behavior and the like... Our commercial purposes for the use of California Personal Data include advancing commercial or economic interests, such as by inducing consumers to buy or subscribe to goods or services, or enabling or effecting, directly or indirectly, a commercial transaction including distributing targeted advertising."
Cygames claims the right to create inferred profiles from user data and use those profiles commercially, including for targeted advertising and inducing purchases, effectively claiming derived value from user information.
Warnings
6"We engage in targeted advertising and use advertisers to serve advertisements on and off our Services. These third parties use cookies and similar technologies to collect or receive information from our Services and elsewhere on the Internet and use that information to provide you with targeted ads."
Cygames and its AdTech partners track users across the internet and across services using cookies, IDFA, ADID, and similar technologies to build advertising profiles and deliver targeted ads.
"We also use Adjust, an advertisement tracking tool for smartphone apps provided by Adjust GmbH. Adjust uses IDFA, GPS, ADID, and log files to help the app analyze how users use the app. The information held in log files includes the user's IP address, internet service provider, and date/time stamp, as well as user activity. Furthermore, Adjust utilizes a variety of tracking methods to collect information."
User data is shared with numerous third parties including Google Analytics, Firebase, Adjust, Datadog, AWS, Zendesk, Akamai, and advertising networks, each collecting device identifiers, IP addresses, and behavioral data directly from users.
"Geolocation data which may be broad location information, but not precise geolocation information... Adjust uses IDFA, GPS, ADID, and log files to help the app analyze how users use the app."
Cygames collects geolocation data and shares it with third-party advertising networks. The Adjust SDK specifically uses GPS data, and geolocation is among the categories sold/shared for targeted advertising.
"We may collect the following personal data: Your Internet Protocol (IP) address, cookies, and other online identifiers; Your behavioral data on the internet including browsing history and information on your interaction with a website; Device information; Log information; Inferences drawn from personal data to create your profile reflecting a person's preferences or behavior and the like."
Cygames collects extensive device information, browsing history, behavioral data, and uses it to build inferred user profiles reflecting preferences and behavior, going beyond what a game service strictly requires.
"We retain personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for compliance and protection purposes. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data."
The policy provides no concrete retention periods or deletion timelines, using only vague 'as long as necessary' language that could justify indefinite retention of personal data.
"We reserve the right to change this Privacy Policy from time to time. When we do, we will also revise the "last updated" date at the top of this Privacy Policy. For some changes to this Privacy Policy we may attempt to obtain your consent before implementing the change by placing a notice on the Services. The continued use of the Services following such notice will be viewed as consent to such changes unless otherwise specified."
Cygames reserves the right to change the privacy policy at any time, with continued use automatically treated as consent. They only 'may attempt' to notify users of changes, with no guarantee of meaningful notice.