Subway Surfers

""Advertising ID" means the Apple Identifier for Advertisers ("IDFA") on Apple, and Google Advertising Identity ("GAID"). These are unique identifiers for mobile devices that SYBO and our advertising network partners use for interest-based advertising (targeted). They are consistent across all apps and thus allow cross-app tracking. These identifiers are used by ad networks for a number of purposes, in addition to targeted advertisement."

SYBO explicitly acknowledges that the advertising identifiers they share with ad network partners are consistent across all apps and enable cross-app tracking of users.

"Third-party ad serving and analytics technologies are integrated into our Services, so if you do not want to be subject to these technologies, do not use or access our Services. Our Services may also integrate third-party Application Program Interfaces (APIs) and/or SDK's, which allow others to collect and process information about you, including but not limited to your geo-location information, to provide you with targeted advertisements, offers, and other content."

Third-party SDKs and APIs are embedded directly in the app, allowing those third parties to collect data including geolocation directly from the user's device, with the only opt-out being to stop using the service entirely.

"Device information: about the device you use to access our Services, including information about the device's type, software and hardware, Media Access Control ("MAC") address, and other unique device identifiers (such as Device ID and Advertising ID), device token, mobile network information, and time zone."

SYBO collects MAC addresses, multiple device identifiers, hardware information, and mobile network details, which goes beyond what is necessary for a mobile game's core functionality.

"We collect location information in order to comply with legislation and policies that apply to your area. However, neither we nor our partners collect location information more granular than city level without your explicit consent. Our Services may also integrate third-party Application Program Interfaces (APIs) and/or SDK's, which allow others to collect and process information about you, including but not limited to your geo-location information."

SYBO collects city-level location without explicit consent and also embeds third-party SDKs that can collect geo-location information from users.

"We may amend and/or update this Privacy Policy from time to time by posting a new version in response to changing legal, technical or business reasons and developments. If we make material changes, we will notify you by revising the date at the top of the notice and, depending on the specific amendments, we may provide you with additional notice. Your continued use of the Services shall mean your acceptance of the changes to this Privacy Policy."

SYBO can change the privacy policy at any time, and continued use of the service is treated as acceptance of any new terms, with no guarantee of meaningful notice beyond updating the date.

"We retain your personal information collected as described in this Privacy Policy for as long as needed to provide you the Services or we have a legitimate business reason to do so. When we no longer have ongoing legitimate business reason to process your personal information, we will delete your data."

There is no specific retention period or deletion timeline — data is kept indefinitely as long as SYBO claims a 'legitimate business reason,' which is entirely self-defined.

"In order for you to exercise your data protection rights we are obliged to verify your identity. We can only verify your identity if you are logged in on one of our Services. You will therefore only be able to exercise your rights if you log in and follow the steps as explained."

Users can only exercise deletion and other data rights if they are logged into a service, creating a barrier for users who may have uninstalled the app or don't have an active login.