Tricky Prank: Brain Quest

"Certain of our Services give you the ability to import your address book contacts, including names, e-mail addresses, and social media handles. We may also automatically collect: the name you have associated with your device; your country; and information about HGFF apps you have on your device. We also collect device identifiers such as your MAC Address, Identifier For Advertising (IDFA), and/or International Mobile Equipment Identity (IMEI); your browser types and language; whether or not some of HGFF's other apps are installed on your device."

The app accesses address book contacts, scans for installed apps on the device, and collects hardware identifiers like MAC address and IMEI — all of which go well beyond what a free-to-play game requires.

"We may also automatically collect, with your permission, your precise GPS location information. If you have previously allowed us to access your geolocation data and you no longer wish for us and our service providers to collect and use GPS location information, you may disable the location features on your device."

The app collects precise GPS location data, which is excessive for a mobile game. While described as permission-based, the opt-out requires disabling device-level location features entirely.

"Sometimes, we (or our service providers) may use the information we collect — for instance, usernames, IP addresses and unique mobile device identifiers or other IDs (like social network ID) — to locate or try to locate the same unique users across multiple browsers or devices (such as smartphones and tablets), or work with providers that do this, in order to better tailor content and features and provide you with a seamless experience across devices."

The company explicitly tracks users across multiple browsers and devices using IP addresses, device identifiers, and social network IDs to build a unified profile, and works with third-party providers to do the same.

"We may share information we collect with our affiliates. We may share information we collect with our third party service providers that perform services on our behalf, including, but not limited to, payment processing, e-mail delivery, hosting services, and customer service. We may also use third-party web analytics services (such as those of Google Analytics) on our website Services to collect and analyze traffic and player activity through cookies and similar tools."

Data is shared broadly with affiliates, numerous third-party ad networks (16+ listed partners including TikTok/ByteDance, Facebook, Google), analytics providers, and service providers with no meaningful limits on what affiliates can do with the data.

"We reserve the right to modify this Privacy Policy at any time, so we encourage you to review it frequently. You should periodically check this privacy page for updates. If we make a material change to the Policy, you will be provided with appropriate notice in accordance with legal requirements. Your continued use of the Services signifies your acceptance of our Privacy Policy as modified."

The company can change the privacy policy at any time, and continued use of the service is treated as acceptance of the new terms, placing the burden on users to constantly monitor for changes.

"We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws. For instance, we may retain some information for a few years after you have closed your account with us if this is necessary to meet our legal obligations or to exercise, defend or establish legal rights."

There are no specific retention timelines — only vague language about keeping data as long as 'necessary.' Data may be retained for years after account closure under broad justifications.

"If you no longer want HGFF to use your information, contact us at info@higame.com.vn. Place "Delete My Account" in the subject line and include your first name, last name, e-mail address and your social network ID for the social network from which you access our Services (if applicable) in the body of the e-mail. We will respond to your request within the time period stated by applicable law."

There is no self-service account deletion option. Users must send an email with personal details to request deletion, creating unnecessary friction and relying on manual processing with no guaranteed timeline.