DATA DISCLOSURE
Data Practices
Review data collection and third-party processing by type.
Effective date: September 28, 2026 Version: 1.0
This appendix lists the personal information collected by the App, its uses, retention and sharing with third parties. The App contains no advertising, analytics or cross-app tracking SDKs and does not use information for targeted advertising or tracking across companies.
1. Personal information we collect
| Data type | What we collect | Purpose | When | Linked to account? | Retention |
|---|---|---|---|---|---|
| Device identifier | iOS-assigned IDFV | Create guest account, maintain sign-in, protect accounts | Sign-in and later requests | Yes | IDFV in the account table is replaced on deletion; sessions, logs and necessary audits are retained as described in Privacy Policy Section 5 |
| Device and network | Device model, OS version, App version, source IP, language preference | Sign-in, compatibility, network troubleshooting | Registration, sign-in and service requests | Yes (IP appears in request logs) | Short rolling system logs |
| Credentials | Chosen username and a one-way hash of the password | Create and verify registered account | Registration and sign-in | Yes | Anonymized after account deletion |
| Platform sign-in | One-time identity token, platform name and unique platform user identifier when you choose Apple or Google sign-in | Verify identity, sign in, link or unlink | Apple on iOS; Google on Android | Yes | Token used for verification only; account link removed when unlinked or the account is deleted |
| Sign-in and activity records | Account creation and sign-in session times | Maintain sign-in; calculate aggregate new users, daily active users and retention | Registration and sign-in | Yes | Until account deletion; exported reports contain aggregates only |
| Game data | Cloud-save snapshots, battle actions and save-detail summaries | Restore progress, replay battles, investigate errors | Saves and battle completion | Yes | Deleted upon account deletion; detailed archive copies cleared after about 30 days |
| Transactions | Order number, product, amount, currency and Apple transaction identifier | Deliver purchases, reconcile, support refunds and investigate fraud | In-app purchases | Yes | Retained after account deletion for accounting, disputes and security; may contain an internal account number |
| User content | Discussion text, report reasons, block actions and support-request descriptions | Moderate the community and answer requests | When submitted by you | Yes | Deleted upon account deletion |
| Support email | Your sender address, message and information you choose to attach | Respond to and handle requests | When you email support | May be linked if you provide account details | Kept for handling and follow-up; you may request deletion except where law requires retention; game account deletion does not automatically erase emails |
| Diagnostics | Error type, code, context, App version, device model, stack summary and similar details | Find and fix faults | Automatic error reporting, at most 20 reports per session | Linked after sign-in; not linked before sign-in | Not stored in the business database; server logs roll over under size limits |
2. Information we do not collect
The App does not actively access or request precise location, photo-library, camera or microphone permissions, contacts, health or biometric information, browsing or search history, or the advertising identifier (IDFA). Information you voluntarily attach to a support email is covered by the support-email entry above. The current version requests no system permissions.
3. Sharing with third parties
We do not sell personal information. We share only the minimum needed to provide the service:
| Third party | Information and direction | Purpose | Processing | Privacy policy |
|---|---|---|---|---|
| Apple Inc. | You initiate Apple authorization; Apple returns an identity token to us and processes transactions (identifier, product and amount) | Apple identity verification, in-app purchases and refunds | Apple sign-in and IAP | Apple Privacy Policy |
| Google LLC | You initiate Google authorization on Android; Google returns an identity token to us | Google identity verification | Google sign-in | Google Privacy Policy |
| Alibaba Cloud (Hong Kong ECS and OSS) | Data hosted for the game, including accounts, saves and related logs | Service operation and storage | Processing on our behalf with access controls and encryption | Alibaba Cloud Privacy Policy |
| Microsoft (Hotmail) | Support emails you choose to send, including your sender address | Receive, store and respond to support emails | Processed by the email service; storage in Hong Kong is not guaranteed | Microsoft Privacy Statement |
We also provide information when lawfully required by courts, regulators or other authorities.
4. Your rights
See Section 6 of the Privacy Policy for access, correction, deletion, account closure and withdrawal of consent. In brief:
- Delete your account in the App at Settings → Account → Delete Account. Choose deletion as soon as the system processes it or a seven-day waiting period that you can cancel.
- Withdraw consent in the App at Settings → Privacy Settings → Withdraw Privacy Consent.
- For other requests, contact sgzkmz@hotmail.com or Player Support.
5. Other terms
- This list is an appendix to the Privacy Policy. If they differ, the Privacy Policy prevails. A listed data type is collected when its related feature is used, not necessarily on every App launch.
- When the scope of data processing changes, this list and the policy are updated together.
Yu Li