Pocket Sort: Coin Merge Puzzle

"Device Information: We collect information about the device you use to access the App, including information about the device manufacture, device model, device's OS, time zone of device, language of device. Device identifiers: We collect online identifiers of the device you use to access the App, including IDFA, Google Ads ID, Google Device ID, Game Center ID, Google Play Account ID."

A mobile game collects multiple device identifiers (IDFA, Google Ads ID, Google Device ID, Game Center ID, Google Play Account ID) and detailed device metadata, much of which serves advertising rather than core game functionality.

"We use or may use the following advertising network companies: MoPub, Inc., Facebook, Inc., Google LLC, Unity Technologies, IronSource, Applovin Corporation, Vungle, Inc., ByteDance Ltd. (TikTok), Amazon.com, Inc., Fyber, MobFox US LLC, TapJoy, Inc, Snapchat (Snap Inc.), Tencent Holding Ltd. In connection with our processing, we use following data processors such as server hosting providers, technical service providers for supporting internal operations, user login services and analytics service providers: Tenjin, Inc., Facebook Analytics, Firebase, Appfigures."

User data is shared with over 14 advertising networks and multiple analytics providers, creating a vast web of third-party data recipients for a simple mobile game.

"Device identifiers: We collect online identifiers of the device you use to access the App, including IDFA, Google Ads ID, Google Device ID, Game Center ID, Google Play Account ID. If you log into the App using a third party site or platform such as Facebook, Apple Game Center and Google Sign-In, we access information about you from that site or platform, such as your screen name, profile information and friend lists."

Collection of multiple advertising identifiers (IDFA, Google Ads ID) combined with third-party login data enables cross-service tracking and profile linking across platforms and apps.

"Log Information: We log information about your use of the App, including the type of device you use, the features you use, access times and your IP address. Device Information: We collect information about the device you use to access the App, including information about the device manufacture, device model, device's OS, time zone of device, language of device."

IP addresses are collected and logged, which enables IP-based geolocation. Combined with time zone data, this allows approximate location tracking without explicit GPS access.

"We update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, depending on the specific changes, we will provide you with additional notice or require a renewed consent."

Changes to the privacy policy may be communicated only by updating the date at the top of the document, with additional notice being discretionary ('depending on the specific changes'), making it easy to miss material changes.

"SayGames will store your personal data for as long as necessary in order to provide you with the App or otherwise fulfil the purposes as described above, unless further storage is required in order to establish, exercise or defend a legal claim or to comply with applicable law, including accounting rules. Your personal data are deleted or anonymized as soon as it no longer serves one of the above mentioned purposes and in any event no later than three (3) years after your interaction with SayGames has ceased."

Personal data is retained for up to three years after you stop using the app, and potentially longer for legal or accounting purposes — a lengthy retention period for a casual mobile game.

"In order for your data to be erased you can contact SayGames by info@say.games with request. Mandatory verification: We will need to verify your identity before processing your request. However, because you cannot create an account with the App, and you do not provide us with any information directly, we only collect information automatically, we may use limited verification methods. In certain circumstances, we may decline the request, mainly where we are unable to verify your identity."

There is no self-service deletion option — users must email support. The company may decline deletion requests if they cannot verify identity, which is a catch-22 since the app doesn't collect identifying information directly.