Prison Puzzle: Brain Twist

"Device Information: We collect information about the device you use to access the App, including information about the device manufacture, device model, device's OS, time zone of device, language of device. Device identifiers: We collect online identifiers of the device you use to access the App, including IDFA, Google Ads ID, Google Device ID, Game Center ID, Google Play Account ID."

The app collects a broad range of device identifiers (IDFA, Google Ads ID, Google Device ID, Game Center ID, Google Play Account ID) and device metadata well beyond what a game needs to function, primarily to enable ad tracking and cross-device identification.

"If you have given your consent in accordance with Section 6(1)(a) of the GDPR, we share your Device identifiers to advertising network companies for the purpose of them serving behavioral advertisements to you within the App. We use or may use the following advertising network companies: MoPub, Inc., Facebook, Inc., Google LLC, Unity Technologies, IronSource, Applovin Corporation, Vungle, Inc., ByteDance Ltd. (TikTok), Fyber."

Device identifiers are shared with at least nine ad network companies including TikTok/ByteDance for behavioral advertising, creating extensive third-party data exposure from a simple game app.

"Device identifiers: We collect online identifiers of the device you use to access the App, including IDFA, Google Ads ID, Google Device ID, Game Center ID, Google Play Account ID. If you log into the App using a third party site or platform such as Facebook, Apple Game Center and Google Sign-In, we access information about you from that site or platform, such as your screen name, profile information and friend lists."

The collection of multiple advertising IDs (IDFA, Google Ads ID) combined with third-party login data and sharing with numerous ad networks enables cross-service tracking and unified user profiling across apps and platforms.

"HIGAME will store your personal data for as long as necessary in order to provide you with the App or otherwise fulfill the purposes as described above, unless further storage is required in order to establish, exercise or defend a legal claim or to comply with applicable law. Your personal data are deleted or anonymized as soon as it no longer serves one of the above mentioned purposes and in any event no later than three (3) years after your interaction with HIGAME has ceased."

A three-year retention period after the user stops using the app is excessively long for a mobile game, especially given the sensitive device identifiers and behavioral data collected.

"We update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, depending on the specific changes, we will provide you with additional notice or require a renewed consent."

The company reserves the right to change the privacy policy at any time, with notification limited to updating a date on the page. Whether additional notice or renewed consent is required is entirely at their discretion.

"In order for your data to be erased you can contact HIGAME GLOBAL by Store@higame.com.vn with request. Mandatory verification: We will need to verify your identity before processing your request. In certain circumstances, we may decline the request, mainly where we are unable to verify your identity, for example, if you disable cookies, changed the device you used to access the App or you already requested us to delete your personal data."

There is no in-app deletion option — users must email a support address. The company can also decline deletion requests if they cannot verify identity, which is made harder by the fact they collect data automatically without accounts.