Daily Number Match

"We may also access your contacts to enable you to invite friends to join you in the Services. We may collect the name you have associated with your device, device type, telephone number, country, and any other information you choose to provide, such as username, character name, or e-mail address. This information is typically collected through the use of third-party mobile device software development kits."

The app accesses contacts and collects telephone numbers, device names, and device identifiers — data that goes beyond what is needed for a mobile game's core functionality.

"We may ask you to identify which country you are in when you use or access some of the Services, or we may rely on your IP address to identify which country you are located in. When we rely on your IP address, we cannot apply the terms of this section to any individual that masks or otherwise hides their location information from us so as not to appear located in the Designated Countries."

The company uses IP addresses to geolocate users and also collects country, time zone, and locale data, enabling passive location tracking without explicit GPS consent.

"We may share information we collect or derive with third parties for the following purposes: With service providers that perform services on our behalf; With our affiliates; For analytics and research purposes; As part of a business transfer such as a merger, acquisition, or at bankruptcy; We may share aggregate or anonymous information about you with advertisers, publishers, business partners, sponsors, and other third parties."

Data is shared broadly with affiliates, analytics providers, advertisers, publishers, business partners, and sponsors — a wide range of third parties with vague limitations on use.

"When you access our Services, we may collect certain technical information about your mobile device or computer system, including IP Address, mobile device ID (IDFA, Google Advertising ID or other identifiers), and the version of your operating system. This information is typically collected through the use of third-party mobile device software development kits."

Collection of IDFA, Google Advertising ID, and other identifiers via third-party SDKs enables cross-app and cross-service tracking for advertising purposes.

"Game Maker Ltd. retains your personal data for as long as needed to provide you Services, unless we are required by law to delete or if Game Maker Ltd. accepts your request to delete the information. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."

There is no specific retention timeline — data is kept 'as long as needed' with broad exceptions for legal obligations and dispute resolution, effectively allowing indefinite retention.

"We may update this Policy to reflect changes to our data and information privacy practices. If we make any material changes we will notify you by means of a notice on the Services prior to the change becoming effective. Please note that if Game Maker Ltd. needs to adapt the policy to legal requirements, the new policy will become effective immediately or as required."

The company can change the privacy policy at any time, and legally-motivated changes take effect immediately without user consent or meaningful notice period.

"To exercise your right to know and right to deletion, please submit a request by: Emailing gamemakerbiz@gmail.com with the subject line 'California Rights Request.' We will need to verify your identity before processing your request. In order to verify your identity, we will generally require the matching of sufficient information you provide us to the information we maintain about you in our systems. In certain circumstances, we may decline a request to exercise the right to know and right to deletion, particularly where we are unable to verify your identity."

There is no self-service deletion option — users must email a Gmail address and pass identity verification, and the company can decline deletion requests if it cannot verify identity.