Ranked #23 of 30 in Game Strategy
Red Flags
2"Communications and User-Generated Content: Messages, forum posts, comments, and other content shared on our platforms. Private messages or invitations sent to other users. Customer service inquiries, including user ID, in-game activities, and communication history. Purpose of Collection: To enable communication between users. To monitor for policy violations and ensure a safe environment for all users. To enforce our agreements with third parties."
37Games collects and retains all user-generated content including private messages, and uses it not only for platform safety but also to "enforce agreements with third parties" โ a broad purpose that could justify wide-ranging use of user content.
Warnings
7"This Privacy Policy may change from time to time, so please check back periodically to ensure that you are aware of any changes. If we make a material change to this Privacy Policy, we will notify you by posting the change on our websites or in this Privacy Policy and, if necessary, give you additional choices regarding such change prior to the change becoming effective. Your continued use of the websites or other 37Games' products or services will signify your acceptance of these changes."
37Games can change the privacy policy at any time, and continued use of their services constitutes acceptance. The phrase "if necessary" for additional choices is vague and leaves discretion entirely to 37Games.
"Third-party advertising companies and third-party analytics technologies integrated into our Services may (including SDK [Software Development Kit] and API [Application Program Interfaces] integrations) combine the information they collect in connection with your use of our Services with information they have independently collected over time and/or across different platforms. Many of these companies collect and use information pursuant to their own privacy policies. They collect the information directly from you, independent from the information we affirmatively share with third parties."
Third-party SDKs embedded in 37Games' services collect data directly from users' devices under their own privacy policies, and can combine it with data collected across other platforms โ giving users limited control over how their data is ultimately used.
"Device identifiers (e.g., Google Advertising ID (GAID) or Identifier for Advertising (IDFA), subject to user consent). Third-party advertising companies and third-party analytics technologies integrated into our Services may combine the information they collect in connection with your use of our Services with information they have independently collected over time and/or across different platforms."
37Games collects advertising identifiers (GAID/IDFA) and shares them with third parties who combine this data with information collected across different platforms and over time, enabling cross-service user profiling.
"Sharing with Marketing and Advertising Partners: Device identifiers (e.g., Google Advertising ID (GAID) or Identifier for Advertising (IDFA), subject to consent), IP address, Approximate location information, Behavioral data related to interactions with our Services. Purpose of Sharing: To provide personalized advertising and promotional offers. To measure the effectiveness of our advertising campaigns."
While 37Games states they don't collect precise GPS location, they collect approximate location via IP address and share it along with behavioral data with marketing and advertising partners for targeted advertising.
"We will keep your information as long as reasonable and necessary for providing service to you. Generally, it is life time your use of our service. But in some jurisdictions, we are legally required to keep some information longer. In addition to that, we need to keep the records of your payments (without your financial information), use of virtual currency and items, and consumer service for the period of statute of limitations in your jurisdiction."
Data is retained for the entire lifetime of service use, with additional retention beyond that based on vague criteria like statute of limitations periods, effectively meaning indefinite retention with no clear deletion timeline.
"If you want to stop us from actively using your information, or delete your information, or delete your child's information, please send an email to global.support@37games.com. We will respond to your request within one (1) month. We could not delete the information we are required to retain by applicable law or reasonably necessary for our legitimate interest."
There is no self-service account or data deletion option โ users must email support and wait up to one month for a response, and 37Games reserves the right to retain data it deems necessary for its "legitimate interest."
"Automatically Collected Technical and Usage Data: IP address, Device information (computer/mobile type, operating system version, browser type, browser language), Device identifiers (e.g., Google Advertising ID (GAID) or Identifier for Advertising (IDFA), subject to user consent), Referring and exit pages, URLs, Platform type, Click behavior and page interactions (e.g., pages viewed, time spent, game state, date and time of activities)."
37Games automatically collects extensive device data including advertising identifiers, detailed browser/OS information, and granular click behavior and interaction patterns, which goes beyond what's strictly necessary for a gaming service.