Ranked #22 of 30 in Game Strategy
Red Flags
2"We may collect the profile name, profile photos or other in-game content you upload to our Services or provide to us when you interact with our Applications or interact with us on social media; and if you send us email messages or other communications, we collect and retain those communications. We collect the content of your communications when you use our Services to send messages to others."
The company collects and retains all user-generated content including profile photos, in-game uploads, social media interactions, and the full content of private messages sent through their services.
Warnings
7"When you use our Services, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as advertising IDs, such as IDFA, IMEI, MAID, and other unique identifiers), device type/model, your device's operating system, and other software including type, version, language, network provider, memory data, and configuration."
The app collects hardware-level identifiers like IMEI (a permanent, non-resettable phone identifier), multiple advertising IDs (IDFA, MAID), and detailed device configuration data โ well beyond what a gaming app needs for core functionality.
"We automatically log your activity on our Sites, Applications and connected products. We may also collect information about your activities on third party sites and services. We combine information we collect from different sources for these purposes and to give you a more seamless, consistent, and personalized experience."
The company tracks user activity on third-party sites and services and combines data from multiple sources to build unified user profiles, enabling cross-service tracking beyond their own apps.
"Third party analytics and advertising companies may also collect personal information through our Services, including identifiers and device information (such as device IDs, MAIDs, and IP address), IP address, usage data, and inferences based on and associated with that data. Some of the disclosures to these third parties may be considered a "sale" or "sharing" of personal information as defined under the laws of California and other U.S. states."
Numerous third-party partners (AppsFlyer, Facebook, ThinkingData, Firebase, etc.) collect data directly from users through the app's embedded SDKs, giving these companies access to device identifiers, usage data, and inferences.
"In the case you request to remove or delete your personal information, we will retain your data as long as necessary for applicable laws and regulations, such as to comply with our legal obligations, resolve disputes, and/or enforce the agreements between you and us. Details of retention periods for different aspects of your personal information are available from us on request by contacting us using the contact details provided under the "Contact Us" section above."
The policy provides no specific retention timelines and states data will be kept even after a deletion request for vaguely defined legal and business purposes. Users must contact the company just to learn how long their data is kept.
"This Privacy Policy is subject to change from time to time. Unless stated otherwise, our current Privacy Policy applies to all personal information that we have about you. If we make material changes to the Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law. Your continued access to or use of our Services after such notice has been given and such revised Privacy Policy has come into effect shall constitute your acceptance of the revised Privacy Policy."
The company can change the privacy policy at any time, and simply continuing to use the app is treated as acceptance of any new terms, with no requirement for explicit consent beyond what local law mandates.
"When you use our Services, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers (such as advertising IDs, such as IDFA, IMEI, MAID, and other unique identifiers), device type/model, your device's operating system, and other software including type, version, language, network provider, memory data, and configuration."
The company automatically collects IP addresses, which enable geolocation tracking, along with network provider information โ collected passively on every use without requiring explicit user action.
"You acknowledge and agree that as a result of deleting your account, you will lose access to game related services, including the account information and game-related information linked to such account and lose the possibility to access other services through the account. In the case you request to remove or delete your personal information, we will retain your data as long as necessary for applicable laws and regulations."
Account deletion results in total loss of game progress and purchased content, while the company still retains user data indefinitely for vaguely defined legal purposes โ creating a punitive dynamic that discourages deletion.