Privacy Policy

Last updated: 2026-06-10 · Effective: 2026-06-10

This Privacy Policy (“Policy”) describes how winsiner (“we”, “us”, “our”) collects, uses, shares, and protects personal information in connection with the games and apps we publish on the Apple App Store, Google Play, and the web (collectively, the “Services”).

By downloading, installing, or using any of our Services, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Services.

Contents

Who we are (Data controller)
What information we collect
Why we process your information (purposes & legal bases)
Who we share your information with
Third-party SDKs
International data transfers
How long we keep your information
How we protect your information
Your rights
Region-specific disclosures (EEA/UK, California, Korea)
Children's privacy
Changes to this Policy
Contact us

1. Who we are (Data controller)

The data controller for personal information processed under this Policy is winsiner. For any privacy-related inquiries, contact siner308@gmail.com.

2. What information we collect

We collect the following categories of information. Specific items vary by game and platform.

2.1 Information you provide directly

Category	Examples
Communications	Content of emails or messages you send to our support address.
Purchase confirmation	Receipt token returned by Apple App Store or Google Play after an in-app purchase (does not include your name, email, or payment method).

We do not ask you to create an account, register a username, or provide your name, email address (other than if you choose to email us), phone number, postal address, photos, contacts, microphone audio, precise location, or biometric data.

2.2 Information collected automatically

Category	Examples
Device identifiers	Advertising identifier (IDFA on iOS, AAID on Android), platform-provided vendor identifier, randomly generated install ID.
Device information	Device model, operating system version, app version, language and region settings, screen size.
Network information	IP address, mobile network or Wi-Fi carrier (as exposed by the platform).
Approximate location	Country and region inferred from IP address. We do not collect GPS or precise location.
Usage and gameplay	Aggregated counters such as level reached, sessions played, features used, in-app purchase events. Used for crash diagnostics and improving the game.
Advertising events	Ad impressions, clicks, completions, and rewarded-ad events.

2.3 Information stored on your device

The following are stored locally on your device (e.g., in localStorage, Capacitor Preferences, or equivalent platform storage) and are not transmitted to our servers:

Saved game state and progress
Settings and preferences (language, sound, vibration, etc.)
One-time onboarding flags (e.g., whether a tutorial has been viewed)
Local counters used by gameplay features

Uninstalling the app removes this data.

2.4 Information from third parties

We may receive limited information from the platforms that distribute our apps (Apple App Store, Google Play) related to in-app purchase verification and aggregate, non-identifying analytics. We do not receive your platform account credentials, name, email, or payment method.

3. Why we process your information (purposes & legal bases)

The table below summarizes the purposes for which we process personal information and the legal bases on which we rely under the EU/UK General Data Protection Regulation (“GDPR”).

Purpose	Categories used	Legal basis (GDPR)
To provide and operate the Services (deliver gameplay, save settings, restore in-app purchases on this device)	Device identifiers, device information, purchase confirmation, local on-device data	Performance of a contract (Art. 6(1)(b))
To diagnose crashes, fix bugs, and improve gameplay	Device information, usage and gameplay	Legitimate interests in maintaining and improving the Services (Art. 6(1)(f))
To show advertising and measure ad performance	Device identifiers (advertising ID), IP address, approximate location, advertising events	Consent (Art. 6(1)(a)) where required by applicable law (e.g., the App Tracking Transparency framework on iOS, and the EU ePrivacy Directive); otherwise legitimate interests (Art. 6(1)(f))
To verify and unlock in-app purchases	Purchase confirmation	Performance of a contract (Art. 6(1)(b))
To prevent fraud and abuse	Device identifiers, IP address, usage and gameplay	Legitimate interests in protecting the Services (Art. 6(1)(f))
To comply with legal obligations	All categories as required	Legal obligation (Art. 6(1)(c))

Where we rely on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

We share personal information only with the categories of recipients listed below. We do not sell personal information.

Advertising and analytics providers — see the Third-party SDKs table for the specific providers we currently use.
Platform stores (Apple App Store, Google Play) — for transaction processing, purchase verification, and platform-mandated reporting.
Hosting and infrastructure — GitHub Pages (for static websites, including this Policy).
Legal and regulatory authorities — where required by law or to defend our legal rights.

5. Third-party SDKs

Our apps integrate the following third-party software development kits. Each provider acts as an independent controller for the data it collects through its SDK and is governed by its own privacy policy.

Provider	Purpose	Data accessed	Privacy policy
Google AdMob (Google Ireland Limited / Google LLC)	In-app advertising, including banner, interstitial, and rewarded ads	Advertising ID, IP address, device information, approximate location, ad interaction events	policies.google.com/technologies/ads
Apple App Store (Apple Inc.)	App distribution and in-app purchase processing on iOS	Purchase receipt, account-level data handled by Apple (not received by us)	apple.com/legal/privacy
Google Play (Google LLC)	App distribution and in-app purchase processing on Android	Purchase receipt, account-level data handled by Google (not received by us)	policies.google.com/privacy

This list reflects the SDKs in our currently published apps. If we integrate additional SDKs in a future release, we will update this Policy before doing so.

6. International data transfers

The Services are operated from the Republic of Korea. The third-party providers listed above process data in the United States, the European Union, and other jurisdictions. When personal information is transferred from the EEA, the UK, or Switzerland to a third country, those providers rely on safeguards such as the European Commission's Standard Contractual Clauses or recognized adequacy decisions. Please consult each provider's privacy policy for the specific transfer mechanisms they employ.

7. How long we keep your information

On-device data — stored on your device until you uninstall the app or clear app data.
Purchase confirmation — retained only as long as needed to provide the corresponding entitlement on your device.
Support communications — retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter to maintain support history (typically up to 2 years).
Data held by third-party SDK providers — governed by each provider's privacy policy.

8. How we protect your information

We use commercially reasonable technical and organizational measures to protect personal information against loss, misuse, and unauthorized access, including transport-layer encryption (HTTPS/TLS) for any data transmitted between our Services and third parties. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you;
Request correction or deletion of your personal information;
Object to or restrict certain processing;
Withdraw your consent (where processing is based on consent);
Receive your personal information in a portable format;
Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at siner308@gmail.com. For advertising identifiers and IP-based data processed by Google AdMob, you may also contact Google directly; in addition, you can opt out of personalized advertising via the device-level controls below.

iOS: Settings → Privacy & Security → Tracking → turn off “Allow Apps to Request to Track”.
Android: Settings → Google → Ads → turn on “Opt out of Ads Personalization”.

10. Region-specific disclosures

10.1 European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, the UK, or Switzerland, our processing is governed by the GDPR (or the UK GDPR or Swiss Federal Act on Data Protection, as applicable). The legal bases on which we rely are described in Section 3. You have the right to lodge a complaint with your local data protection authority.

10.2 California, United States

If you are a California resident, the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”) provide you with rights to know what personal information we collect, to delete personal information, to correct inaccurate personal information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.

We do not sell personal information in exchange for monetary consideration. The use of advertising identifiers for personalized ads may, however, qualify as “sharing” under the CPRA. You can opt out of personalized advertising using the device-level controls described in Section 9, and you can submit any other CCPA/CPRA request by emailing us.

10.3 Republic of Korea

If you are a resident of the Republic of Korea, your personal information is processed in accordance with the Personal Information Protection Act (“PIPA”). Specifically:

Items collected — see Section 2.
Purposes — see Section 3.
Retention period — see Section 7.
Right to refuse consent — you may refuse to consent to the collection and use of your personal information, in which case some functionality (such as personalized advertising) may not be available.
Outsourced processing / third parties — see Section 4 and Section 5.
Personal Information Protection Officer — winsiner, contactable at siner308@gmail.com.

11. Children's privacy

Our Services are not directed at children under the age of 13 (or under the equivalent minimum age in other jurisdictions, such as 14 in Korea or 16 in some EEA countries). We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will take prompt action to delete it.

Our games are rated 4+ on the Apple App Store and Everyone on Google Play, and do not contain violence, sexual content, gambling, or other restricted themes. Advertising shown in our games is configured at the SDK level to comply with policies for general audiences.

12. Changes to this Policy

We may revise this Policy as our Services evolve. The “Last updated” date at the top of this page reflects the most recent revision. Where a change materially affects how we handle your personal information, we will use reasonable means to notify you (for example, by an in-app notice) before the change takes effect.

13. Contact us

For any questions about this Policy or to exercise your rights:

winsiner
Email: siner308@gmail.com