MISTPLAY: Play to Earn Money

"information related to the apps installed in your device; Session ID, information on how you access the Services (including frequency, what time, how long, and from which device(s), active users and intervals), your approximate and precise location or the country from which you are accessing the Services ("Usage Data"). We may process your biometric data using facial scan technology to prevent fraudulent, synthetic, or illegitimate users from misusing the Mistplay loyalty rewards program."

Mistplay collects a broad range of device data including all installed apps, precise geolocation, device IDs, advertising identifiers, and biometric data from facial scans — going well beyond what a game discovery/rewards app would minimally require.

"IP address (including approximate location and country), exact geolocation data (including longitude and latitude), mobile device identifier, advertising identifier (e.g. Google advertising ID) or other unique identifiers... your approximate and precise location or the country from which you are accessing the Services."

Mistplay collects both approximate and precise geolocation data (longitude and latitude), going beyond what is needed for a game recommendation and rewards app.

"We partner with certain providers, including but not limited to Google, Unity, and social media companies, to display, target, and suppress Mistplay advertisements on their or their partner sites. Personal information we disclose to these providers include device identifiers (e.g., Google Advertising Identifier), IP addresses, time and event data for certain actions. We work with analytics service providers... such as Appsflyer, also measure, verify, and analyze performance of our marketing campaigns."

Mistplay shares personal data with a wide ecosystem of third parties including advertising platforms (Google, Unity, social media companies), analytics providers (Appsflyer), Game Partners, and their respective SDKs and measurement partners.

"we must allow tracking and collection of certain personal data by applicable Game Partners and their analytics providers, such as your game installs or survey answers, for purposes of reporting, attribution, and billing. The user must grant permission to both the Partner App and the installed Game Partner to collect a device identifier that tracks the user across apps and services."

Mistplay tracks users across multiple apps and services using device identifiers and advertising IDs, combining data from Game Partners, Partner Apps, and its own platform to build comprehensive user profiles.

"This Notice is incorporated into and forms a part of Mistplay's Global Terms of Use (the "Terms"). Where an Annex applies to you, the terms of the Annex shall control to the extent it is in conflict with or different from this Notice."

The privacy notice is incorporated into the Terms of Use, and while the document has a "last updated" date, there is no mechanism described for notifying users of material changes or obtaining consent before new terms take effect.

"Specifically, we destroy your personal information or store it separately if you do not interact with our Services for 5 years. Note, if a User does not use the Services for at least one hundred eighty days, the User's inactive account may be terminated, Units earned may automatically expire and personal data may be deleted. Personal data derived from facial scans are stored by Mistplay for six months for purposes of preventing fraudulent activity."

Mistplay retains personal data for up to 5 years after last interaction and biometric facial scan data for 6 months. The language around 180-day account termination uses "may" rather than definitive deletion commitments, creating ambiguity about actual deletion timelines.

"By deleting your account, any Units that you have earned and not redeemed will be deleted. Please note that we will send you an email requesting your confirmation before we delete your account, and we may not be able to delete all data you requested, for instance to comply with applicable tax laws."

Account deletion results in forfeiture of all unredeemed rewards (creating a disincentive to delete), requires an additional email confirmation step, and Mistplay reserves the right to retain some data even after deletion.