EvoCreo2: Monster Trainer RPG

"Your basic computer information (such as your device ID, your routing device, operating system, IP Address, amount of free hard drive space and your RAM) in anonymized form... Your Google Advertising ID on Android devices, and ID For Advertising ("IDFA") or ID For Vendor ("IDFV") on iOS devices."

The app collects hardware details like device ID, RAM, free hard drive space, and advertising identifiers (Google Ad ID, IDFA/IDFV), which goes beyond what a game typically needs to function.

"Your coarse location data in anonymized form"

The game collects location data, even if coarse and anonymized, which is not essential for a single-player monster-collecting game.

"We contract with third parties who help us with our Services. Currently the third parties are: Game Analytics to operate automatic collection during your use of our Services. Unity Analytics for crash reports from in Game user behavior... We take commercially reasonable precautions to prevent such third parties from disclosing your Personal Information... However, we cannot guarantee that such third parties will not disclose your information."

User data is shared with Unity Analytics and GameAnalytics, and the company explicitly disclaims the ability to guarantee these third parties won't further disclose personal information.

"Your Google Advertising ID on Android devices, and ID For Advertising ("IDFA") or ID For Vendor ("IDFV") on iOS devices."

Collection of Google Advertising ID and IDFA enables cross-app tracking and ad targeting across different services and apps on the user's device.

"We retain information about you as long as it is necessary for us to fulfill the purposes outlined in this Privacy Policy. In addition, we may retain your information for an additional period as is permitted or required to (for example to comply with our legal obligations, resolve disputes, and enforce agreements)."

There is no concrete deletion timeline; data is kept as long as deemed "necessary" plus an undefined additional period, giving the company broad discretion to retain data indefinitely.

"We may make changes to this Privacy Policy from time to time. If so, we will notify you of any changes by posting a notice within our Services. If you receive notification of a change in our Privacy Policy, you must review the new Privacy Policy carefully to make sure you understand our practices and procedures. We raise your attention that you may not be able to receive notices from us, including such of changes to the Privacy Policy, if your cookies are disabled."

The company can change the privacy policy at any time with only an in-app notice, and acknowledges users may not even receive the notification if cookies are disabled, effectively making changes without meaningful consent.