Last Asylum: Plague

"your Google Advertising ID (GAID) or Identifier For Advertising (IDFA), but only if you affirmatively allow us to collect them. Third-party advertising companies and third-party analytics technologies integrated into our Services may (including SDK [Software Development Kit] and API [Application Program Interfaces] integrations) combine the information they collect in connection with your use of our Services with information they have independently collected over time and/or across different platforms."

Third-party SDKs embedded in the app collect advertising IDs and combine data across platforms and over time to build cross-service profiles, even though the company frames this as third-party activity rather than its own.

"Third-party advertising companies and third-party analytics technologies integrated into our Services may (including SDK [Software Development Kit] and API [Application Program Interfaces] integrations) combine the information they collect in connection with your use of our Services with information they have independently collected over time and/or across different platforms. Many of these companies collect and use information pursuant to their own privacy policies. They collect the information directly from you, and we do not share any information we collect from you with the third-party advertising companies or third-party analytics technologies."

The app integrates third-party advertising and analytics SDKs that collect user data directly from the device under their own privacy policies, effectively sharing user access with these third parties while disclaiming responsibility.

"If you access the Websites and Services via a mobile device, we may also collect information like: Your country; and, Your approximate location information. GEOLOCATION DATA, (e.g. geolocation based on IP address, IP address), collected from you (both directly and through your use of our games and services). We collect such category of your personal information to support the functionality of our service."

The app collects geolocation data including country and approximate location via IP address. While they state it is not precise, IP-based geolocation is still collected passively during use.

"This Privacy Policy may change from time to time, so please check back periodically to ensure that you are aware of any changes. If we make a material change to this Privacy Policy, we will notify you by posting the change on our websites or in this Privacy Policy and, if necessary, give you additional choices regarding such change prior to the change becoming effective. Your continued use of the websites or other Last Asylum: Plague' products or services will signify your acceptance of these changes."

The company can change the privacy policy at any time and treats continued use as acceptance. The phrase 'if necessary' for providing additional choices gives them discretion over whether users get meaningful consent for material changes.

"We will keep your information as long as reasonable and necessary for providing service to you. We determine the retention period for each of the categories of personal information listed above based on (1) the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, (2) any legal or regulatory requirements applicable to such information, (3) internal operational needs, and (4) any need for the information based on any actual or anticipated investigation or litigation."

There is no specific deletion timeline. Retention is based on vague criteria like 'internal operational needs' and 'anticipated investigation or litigation,' which could justify indefinite retention.

"If you access or use our Websites or Services via social network operators or a third party, we may receive some information about you automatically... Examples of information that may be collected: the social network ID numbers or the ID number on the third party platform and other public data for your friends; your physical location and that of the devices you use to access our Services or Websites; your gender; your birthday and/or age range."

The app collects friends' social network IDs and public data when users connect via social platforms, accessing information about people who haven't consented to the app's data collection.

"If you want to stop us from actively using your information, or delete your information, please send an email to globallaas@gmail.com. We will respond to your request within one (1) month. You may require us to delete your information at any time by email to globallaas@gmail.com, We will respond to your request within one (1) month."

There is no self-service account or data deletion option. Users must email support and wait up to one month for a response, creating friction that discourages exercising deletion rights.