Privacy Policy | Hlight Games

A — General Privacy Information

A.1 Data Controller

Hlight Games Studios ("we", "us", or "our") develops and publishes mobile games and applications and operates the website Website: https://hlightgamesstudios.com. For the purposes of applicable data protection laws, including the EU General Data Protection Regulation ("GDPR"), the data controller responsible for the processing of personal data described in this Privacy Policy is: Legal name: Lovepreet Singh  Trading name / Brand: Hlight Games Studios  Legal form: Individual  Website: https://hlightgamesstudios.com Privacy contact: privacy@hlightgamesstudios.com If you have any questions about this Privacy Policy or about how we process your personal data, you can contact us at privacy@hlightgamesstudios.com

A.2 Scope of this Privacy Policy

This Privacy Policy explains how Hlight Games Studios ("we", "us", or "our") collects, uses, stores, discloses, and otherwise processes Personal Data when you interact with our services. This Privacy Policy applies to: • our official Website: Website: https://hlightgamesstudios.com • our mobile Games and Applications made available, published, distributed, or otherwise operated by Hlight Games Studios, whether currently available or made available in the future, on iOS, Android, or other supported platforms; • our customer support and help services, including support requests, bug reports, and other communications submitted through our Website, Games, Applications, or by email; and • other services or digital products operated by Hlight Games Studios that are expressly covered by this Privacy Policy. This Privacy Policy applies regardless of whether you access our services through a mobile device, computer, or other supported device. Our Website, Games, and Applications may use or interact with third-party services, software development kits (SDKs), advertising and mediation services, analytics and measurement services, crash and performance monitoring services, payment and in-app purchase technologies, and other third-party technologies. Information about the categories of Personal Data processed through these services, the purposes for which they are used, the relevant legal bases, and other applicable details are described in the relevant sections of this Privacy Policy. Some of our services may also be subject to additional privacy information, consent mechanisms, or privacy choices provided within the relevant Website, Game, or Application. Where applicable, users may manage or modify their privacy and consent preferences through the privacy settings or consent management tools made available within our Games, Applications, or Website. Third-party services, platforms, websites, and application stores that we use or that users may interact with in connection with our services may have their own privacy policies and terms. This Privacy Policy does not govern the privacy practices of third parties that operate independently from Hlight Games Studios. Where applicable, third-party providers and partners are identified in the relevant sections of this Privacy Policy, together with links to their official privacy information. The specific Games, Applications, features, services, platforms, and third-party technologies covered by this Privacy Policy may change over time. Such changes do not necessarily require this section to identify each individual Game, Application, service, or technology by name.

A.3 Definition of Personal Data

For the purposes of this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable individual, as defined by applicable data protection laws. An individual may be considered identifiable when they can be identified, directly or indirectly, including by reference to an identifier such as a name, identification number, online identifier, device identifier, or other information that can reasonably be used to identify or distinguish an individual. Depending on the services you use, Personal Data may include information that you provide directly to us, information generated or collected when you use our website or games, and information received from third-party service providers acting in connection with our services. Not all information processed by us will necessarily constitute Personal Data. Information that has been irreversibly anonymized so that it can no longer reasonably be associated with an identified or identifiable individual may no longer be considered Personal Data under applicable data protection laws. Where applicable, we will process Personal Data only for specified purposes and in accordance with the legal bases and other requirements described in this Privacy Policy and applicable data protection laws.

A.4 Global Availability

Our website, mobile games, and related services may be available to users in different countries and regions around the world. As a result, Personal Data may be processed in different jurisdictions and may be subject to different data protection and privacy laws depending on where you are located and the services you use. This Privacy Policy is intended to provide information about our privacy practices on a global basis. Where applicable, we provide additional information regarding specific rights, protections, and requirements that apply to users in particular jurisdictions, including the European Economic Area (EEA), the United Kingdom, Switzerland, the United States, and other jurisdictions with applicable data protection laws. The rights and protections available to you may therefore vary depending on your location and the laws that apply to the processing of your Personal Data. Where the laws of your jurisdiction provide additional or stronger privacy rights or protections, we will comply with those requirements to the extent applicable to our processing activities.

A.5 Data Protection Principles

We are committed to processing Personal Data in a lawful, fair, and transparent manner and in accordance with applicable data protection and privacy laws. When processing Personal Data, we seek to apply the following principles, where applicable: • Lawfulness, fairness, and transparency — We process Personal Data on a valid legal basis and provide clear information about how and why Personal Data is processed. • Purpose limitation — We collect and use Personal Data for specific, explicit, and legitimate purposes and do not process it in ways that are incompatible with those purposes. • Data minimization — We seek to collect and process only the Personal Data that is reasonably necessary for the relevant purposes. • Accuracy — We take reasonable steps to ensure that Personal Data is accurate and, where necessary, kept up to date. • Storage limitation — We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. • Security and confidentiality — We implement appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, alteration, disclosure, loss, destruction, unavailability, or other unlawful or unauthorized processing. • Accountability — We seek to maintain appropriate measures and records to demonstrate compliance with applicable data protection requirements where required by law.

A.6 Transparency

We are committed to providing clear, transparent, and easily accessible information about how and why we process Personal Data. This Privacy Policy is intended to explain, in a clear and understandable manner, the categories of Personal Data we may process, the purposes for which it may be used, the legal bases for processing where applicable, the categories of recipients with whom Personal Data may be shared, applicable retention periods, and the rights and choices available to you. Where the processing of Personal Data involves third-party service providers, advertising partners, analytics providers, SDKs, or other technologies, we provide additional information about the relevant processing in the applicable sections of this Privacy Policy. Where applicable, we may also provide additional or more specific privacy information at the time Personal Data is collected or through our website, games, consent management tools, privacy settings, or other appropriate interfaces. We seek to keep this Privacy Policy accurate and up to date so that it reflects our actual data processing practices.

A.7 Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, data processing practices, applicable laws, regulatory requirements, or other relevant circumstances. When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy. Where required by applicable law, we will provide additional notice or take other appropriate steps to inform you of material changes, particularly where such changes significantly affect how we process your Personal Data or your rights. We encourage you to review this Privacy Policy periodically to remain informed about how we process and protect your Personal Data. Your continued use of our services after an updated Privacy Policy becomes effective does not, by itself, constitute consent to processing where consent is required by applicable law.

A.8 Privacy Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our processing of Personal Data, you can contact us at: privacy@hlightgamesstudios.com You may also use this contact address to submit privacy-related requests or to ask for further information about how your Personal Data is processed. Where applicable, we will handle privacy requests in accordance with the rights and procedures provided by the data protection laws that apply to you.

B — Website Privacy

B.1 Website Information

Our official website, https://hlightgamesstudios.com/ (the "Website"), provides information about Hlight Games Studios, our games and applications, and the services we offer. The Website may provide information about our games, their availability on supported platforms, updates, announcements, and other information relating to Hlight Games Studios. The Website may also provide users with ways to contact us or request assistance, including through support or contact forms and email. When you access or use the Website, certain information may be processed automatically or provided by you directly. The types of information processed and the purposes for which it is used are described in the relevant sections of this Privacy Policy. The Website may also use certain third-party technologies and services to operate, secure, maintain, measure, or improve the Website. Where applicable, information about these technologies and the associated processing of Personal Data is described in the relevant sections of this Privacy Policy.

B.2 Information We Collect Through the Website

Depending on how you use the Website, we may process different categories of Personal Data. Information You Provide Directly You may voluntarily provide Personal Data when you contact us, submit a support or help request, report a bug, request assistance, or otherwise communicate with us through the Website. Depending on the nature of your request, this information may include your name, email address, the content of your communication, information about the relevant game or application, and any other information you choose to provide. We recommend that you do not provide sensitive or unnecessary Personal Data when contacting us. Information Collected Automatically When you access or use the Website, certain technical and usage information may be collected automatically by our hosting infrastructure, security systems, analytics tools, or other technologies used to operate and maintain the Website. Depending on the technologies and services in use, this information may include your IP address, browser type and version, device type, operating system, language settings, date and time of access, pages visited, referring website, and other technical or usage information. The specific categories of information collected automatically and the purposes for which they are processed are described in the relevant sections of this Privacy Policy. Information from Third Parties In certain circumstances, we may receive information from third-party service providers that support the operation, security, analytics, or other functions of the Website. We only describe third-party processing that is relevant to our actual use of such services in the applicable sections of this Privacy Policy.

B.3 Technical Information and Server Logs

When you access or use the Website, certain technical information may be processed automatically by our hosting infrastructure and related technical and security services. Depending on the configuration of the Website, this information may include your IP address, browser type and version, operating system, device type, language settings, date and time of access, referring website, requested pages or files, and other technical information associated with your connection to the Website. We may process this information for purposes including: • operating, maintaining, and delivering the Website; • ensuring the stability, availability, and performance of the Website; • detecting, preventing, and investigating security incidents, abuse, unauthorized access, and other technical threats; • diagnosing technical problems and errors; • protecting our systems, infrastructure, and users; and • complying with applicable legal obligations where required. Our Website is hosted using infrastructure provided by IONOS. IONOS may process certain technical information and server log data as part of providing the hosting service. The processing of technical information and server log data may be necessary for the operation, security, maintenance, and functionality of the Website, and may also be carried out for other legitimate purposes or to comply with applicable legal obligations, where permitted by law. Server logs and similar technical information are retained only for as long as reasonably necessary for the purposes for which they are processed, taking into account security, operational, and legal requirements. Where applicable, information processed through analytics services, including Google Analytics, is described separately in the relevant sections of this Privacy Policy.

B.4 Cookies and Similar Technologies

Our Website may use cookies and similar technologies, including local storage and other technologies that allow information to be stored on or accessed from your device. Cookies and similar technologies may be used for different purposes, including: • ensuring the proper operation, security, and functionality of the Website; • remembering preferences and settings; • understanding how users interact with the Website; • measuring and analyzing Website usage and performance; • improving the Website, its content, and user experience; and • supporting other functions or services provided through the Website, where applicable. Necessary Technologies Certain cookies or similar technologies may be necessary for the operation, security, and functionality of the Website. Where permitted by applicable law, such technologies may be used without consent where they are strictly necessary to provide a service explicitly requested by the user or to operate the Website. Analytics Technologies We may use analytics technologies to understand how visitors use the Website, measure Website performance, and improve our content and services. Where required by applicable law, analytics cookies or similar technologies will only be activated after obtaining the user's consent. Where specific analytics services are used, they will be identified in the relevant sections of this Privacy Policy and, where applicable, through the Website's cookie consent interface. Cookie Preferences and Consent Where consent is required, users may accept, reject, or manage applicable categories of cookies and similar technologies through the consent management mechanism made available on the Website. Where applicable, users may withdraw or modify their consent through the privacy or cookie settings made available on the Website. Users may also control or delete cookies through their browser settings. However, disabling certain necessary cookies or similar technologies may affect the functionality or availability of some features of the Website. Third-Party Technologies The Website may use technologies provided by third-party service providers, including analytics and other technical services. Where applicable, such third-party technologies may collect or process information in accordance with the purposes described in this Privacy Policy and the privacy information of the relevant third-party provider. Cookie Inventory The specific cookies and similar technologies used on the Website, including their names, providers, purposes, categories, retention periods, and whether they are first-party or third-party technologies, will be identified based on the actual configuration of the Website and the services enabled on it. Where required, this information will also be made available through the Website's cookie consent interface or a dedicated Cookie Policy.

B.5 Website Analytics and Measurement

We may use analytics and measurement services to understand how users interact with our Website, measure its performance, identify technical or usability issues, and improve its content, functionality, and user experience. Depending on the configuration of the Website, we may use Google Analytics or other analytics and measurement services provided by third parties. Depending on the configuration and applicable legal requirements, analytics services may process information such as technical information about the device and browser used to access the Website, information about Website interactions, pages viewed, approximate geographic information, referral information, and other usage or measurement information. Where required by applicable law, analytics technologies that are not strictly necessary for the operation of the Website will only be activated after obtaining the user's consent through the applicable consent management mechanism. Where consent is required, users may refuse or withdraw consent to analytics processing through the privacy or cookie settings made available on the Website. Analytics information may be processed by the relevant third-party provider in accordance with its own privacy practices and applicable contractual arrangements. Further information about the analytics services used on the Website, including applicable third-party privacy information, may be provided through the relevant third-party privacy information and, where applicable, the cookie information made available on our Website. We may review and adjust the analytics technologies used on the Website from time to time. Any material changes will be reflected in this Privacy Policy or in the applicable cookie information, where required.

B.6 Contact and Help Form

Our Website provides a contact and help form that allows users to contact Hlight Games Studios for customer support, technical assistance, bug reports, gameplay-related issues, and other inquiries relating to our Games and services. The Help Form may be accessed directly through the Website and may also be accessed through support links or Help options provided within our Games. Depending on the information voluntarily provided by the user, the Help Form may collect: • email address, if the user wishes to receive a response; • information about the reported problem or issue; • the platform on which the relevant Game is being used; • the name of the relevant Game; • information contained in the user's message or description of the issue; and • screenshots, video files, or other attachments voluntarily submitted by the user. Providing an email address is optional. Users who wish to receive a response or follow-up communication regarding their request must provide an email address. If an email address is not provided, we may still receive and review the submitted request, but we may be unable to respond directly to the user. Screenshots, videos, and other attachments are optional. Users should avoid submitting unnecessary Personal Data, sensitive information, account credentials, payment information, or other information that is not relevant to their support request. Before submitting a request through the Help Form, users may be asked to acknowledge that they have read the Privacy Policy. Such acknowledgement does not, by itself, constitute consent to processing where consent is required by applicable law. Personal Data submitted through the Help Form may be processed for purposes including: • responding to support requests and inquiries; • investigating and resolving technical problems and bugs; • communicating with users regarding their support request, where an email address has been provided; • improving the stability, functionality, and quality of our Games and services; and • preventing misuse, fraud, abuse, or security issues where reasonably necessary. We process the information submitted through the Help Form only to the extent reasonably necessary to handle the relevant support request and for related legitimate purposes or legal obligations, where applicable. Information submitted through the Help Form may be processed by service providers supporting the operation of our Website, communication systems, form infrastructure, hosting, or customer support services. Information submitted through the Help Form will be retained only for as long as reasonably necessary to handle the request, provide appropriate support, resolve related technical or security issues, maintain appropriate records, and comply with applicable legal obligations. The same privacy principles described in this Privacy Policy apply whether a user accesses the Help Form directly through the Website or through a support link provided within one of our Games.

B.7 Website Security

We take reasonable and appropriate technical and organizational measures designed to protect the Website and the Personal Data processed through it against unauthorized access, alteration, disclosure, loss, misuse, destruction, or other unlawful or unauthorized processing. Our security measures may include, where applicable: • secure hosting infrastructure; • HTTPS/TLS encryption for communications between users' devices and the Website; • access controls and authentication measures for administrative systems; • technical monitoring and measures designed to detect and prevent unauthorized access, abuse, malicious activity, and other security threats; • regular maintenance and updates of the Website and its underlying software and infrastructure; and • appropriate measures for protecting information submitted through our contact and help services. Our Website is hosted using infrastructure provided by IONOS. Security measures implemented by IONOS may apply to the hosting infrastructure used to provide our Website. We may also use additional security, monitoring, scanning, content delivery, or other infrastructure services in the future where appropriate. Where such services involve the processing of Personal Data, the relevant processing will be described in this Privacy Policy where required. While we take reasonable measures to protect the Website and Personal Data, no website, online service, transmission over the Internet, or storage system can be guaranteed to be completely secure. In the event of a personal data breach that is subject to notification requirements under applicable law, we will take the measures required by applicable data protection laws.

B.8 Website Data Retention

We retain Personal Data collected through the Website only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide our services, maintain the security and functionality of the Website, resolve support requests, comply with applicable legal obligations, and protect our rights and interests. Different categories of information may be retained for different periods depending on the nature of the information, the purpose of the processing, the applicable legal requirements, and the operational or security needs associated with the processing. Technical information and server logs may be retained for limited periods as necessary for the operation, security, maintenance, and protection of the Website and our infrastructure. Information submitted through the Contact and Help Form may be retained for as long as reasonably necessary to handle the relevant request, provide support, resolve related technical or security issues, maintain appropriate records, and comply with applicable legal obligations. Information processed through analytics and similar technologies may be retained in accordance with the applicable configuration, purposes, and retention settings of the relevant analytics service, as well as applicable legal requirements. Where Personal Data is no longer necessary for the purposes for which it was collected, we will delete it, anonymize it, or otherwise securely dispose of it, unless we are required or permitted by applicable law to retain it for a longer period. Specific retention periods or criteria may be described in the relevant sections of this Privacy Policy where the nature of the processing requires more detailed information.

C — Games & Applications Privacy

C.1 Games Covered by This Privacy Policy

This section of the Privacy Policy applies to the mobile games and applications developed, published, or otherwise made available by Hlight Games Studios (collectively, the "Games"). This Privacy Policy applies to our current Games and Applications, as well as Games and Applications that may be developed, published, or made available by Hlight Games Studios in the future, unless a separate privacy policy or specific privacy notice is provided for a particular Game, Application, or service. Our Games may be made available through platforms including the Apple App Store, Google Play, or other applicable distribution platforms. The Games may use common technical, advertising, analytics, monetization, crash reporting, performance monitoring, and other third-party services. Where the same technologies or services are used across multiple Games, the relevant processing described in this Privacy Policy may apply to all Games using those technologies. The specific information processed may vary depending on the Game, platform, features used, technical configuration, privacy settings, user choices, and third-party services integrated into the relevant Game. Where a particular Game uses additional technologies or processing activities that are not common to other Games, the applicable information may be described in the relevant sections of this Privacy Policy or through additional notices provided in connection with that Game. The list of Games and Applications made available by Hlight Games Studios may change over time. A Game may be added, removed, updated, discontinued, or replaced without requiring this section to list every individual Game by name.

C.2 Information Collected Through the Games

Depending on how you use our Games, we may process different categories of Personal Data and other information generated or collected through the Games. The information processed may include: • information provided directly by you, where applicable; • device and technical information associated with the device used to access a Game; • identifiers associated with the device, application, advertising environment, or installation, where applicable; • information relating to your use of the Games, including gameplay activity, interactions, preferences, progress, and other usage information; • advertising and measurement information, where applicable; • analytics, performance, crash, and diagnostic information; • information relating to purchases or transactions made through the Games, where applicable; and • information generated or provided through third-party services, SDKs, advertising partners, analytics providers, mediation services, or other technologies integrated into the Games. The categories of information processed may vary depending on the Game, operating system, features used, consent choices, technical configuration, and third-party services integrated into the relevant Game. Some information may be collected automatically when you use a Game, while other information may be provided voluntarily by you or generated as a result of your interactions with the Game. Where required by applicable law, certain processing activities may depend on your consent or other privacy choices. Your choices may affect the availability or functionality of certain features, including advertising or other monetization-related functionality. We seek to collect and process only information that is reasonably necessary for the relevant purposes described in this Privacy Policy and applicable data protection laws. The specific categories of information, purposes of processing, legal bases, recipients, retention periods, and applicable privacy choices are described in the relevant sections of this Privacy Policy.

C.3 Device and Technical Information

When you use our Games, certain technical and device-related information may be collected automatically or generated as part of operating, maintaining, securing, and improving the Games. Depending on the Game, operating system, device, technical configuration, privacy settings, and third-party services integrated into the Game, this information may include: • device type, model, manufacturer, and hardware characteristics; • operating system and operating system version; • Game and application version and relevant configuration information; • language, country, region, and similar device or system settings; • IP address and other network-related information; • information about the availability and status of the network connection; • unique or persistent identifiers associated with the device, application, installation, or advertising environment, where applicable; • advertising identifiers, including Apple's Identifier for Advertisers (IDFA) on iOS and Google's Advertising ID on Android, where applicable and subject to the user's privacy choices and applicable platform requirements; • information relating to the installation, launch, and use of the Games; • technical information relating to communications between the Games, our services, and third-party services; • information relating to permissions granted or available on the device, where relevant to the operation of particular features or services; and • other technical information reasonably necessary to operate, maintain, secure, troubleshoot, and improve the Games. Depending on the configuration of the Games and applicable third-party services, certain advertising or monetization services may use device-related information or identifiers for purposes such as advertising delivery, measurement, attribution, fraud prevention, and other related functions. The Games may request or use certain device permissions where supported and necessary for particular services or functionality. Network-related permissions may be used to provide online functionality and load advertising content. The Games may process approximate or precise location information where such information is made available to or collected by applicable advertising, analytics, measurement, or other third-party services, subject to applicable permissions, consent requirements, user choices, platform requirements, and applicable law. On iOS, access to the IDFA is subject to Apple's App Tracking Transparency (ATT) framework and the user's applicable authorization choice. On Android, advertising-related services may use the Google Advertising ID or other applicable identifiers subject to the user's device settings, applicable platform requirements, and privacy choices. We do not necessarily request or use all available permissions or identifiers on every device. The information and permissions actually used may vary depending on the Game, operating system, device, SDK configuration, available services, and user choices. Certain processing activities may require or be affected by privacy choices made through platform-level mechanisms, including Apple's ATT framework, as well as consent mechanisms made available through our Games. For users in jurisdictions where consent is required for particular processing activities, our Games may provide applicable consent management mechanisms. Users may also be able to review or modify certain privacy and consent preferences through the privacy settings or consent management options available within the Games. Technical and device information may be used for purposes including: • operating and providing the Games; • maintaining the security, stability, and functionality of the Games; • detecting and preventing fraud, abuse, unauthorized activity, and security threats; • troubleshooting technical problems and errors; • monitoring and improving Game performance; • understanding technical compatibility across different devices and operating systems; and • supporting analytics, advertising, monetization, attribution, and other functions described in the relevant sections of this Privacy Policy, where applicable. Some technical and device information may constitute Personal Data under applicable laws where it can be linked or reasonably associated with an identified or identifiable individual. The specific third-party services that may process device and technical information are described in the relevant sections of this Privacy Policy.

C.4 — Game Usage and Gameplay Information

When you use our Games, we may process information relating to your interactions with and use of the Games. Depending on the Game, features used, technical configuration, and services integrated into the Game, this information may include: • Game sessions, including session start, duration, and related activity; • gameplay progress, levels, scores, achievements, and other game-related status information; • interactions with Game features, menus, buttons, settings, advertisements, and other elements of the Games; • information about how features are used, including events and actions performed within the Games; • preferences and settings selected within the Games; • information relating to Game installations, launches, updates, and uninstallations, where available; • information relating to advertising interactions, such as advertisements displayed, viewed, clicked, or otherwise interacted with, where applicable; • information relating to purchases or other monetization-related interactions, where applicable; • technical or gameplay events generated during use of the Games; • information used to measure engagement, retention, performance, and other Game usage metrics; and • other information generated through your interactions with the Games that is reasonably necessary for the purposes described in this Privacy Policy. We may use Game usage and gameplay information for purposes including: • providing and operating the Games and their features; • maintaining and improving Game functionality and user experience; • understanding how users interact with and use the Games; • measuring Game performance, engagement, retention, and other usage trends; • identifying technical issues, errors, or abnormal activity; • detecting and preventing fraud, abuse, manipulation, or other unauthorized activity; • supporting analytics, attribution, advertising, and monetization activities, where applicable; and • developing and improving our Games, features, and services. The specific information processed may vary depending on the Game, operating system, features available, SDK configuration, third-party services, and the user's choices. Some Game usage information may be associated with device identifiers, advertising identifiers, installation identifiers, or other technical information described in this Privacy Policy. Where such information can reasonably be associated with an identifiable individual, it may constitute Personal Data under applicable law. We do not necessarily collect or process all of the categories described above in every Game or for every user. The information actually processed depends on the relevant Game, its configuration, the features used, the services integrated into it, and applicable privacy choices. Where Game usage or gameplay information is processed through third-party analytics, advertising, mediation, or other services, the relevant providers and processing activities are described in the applicable sections of this Privacy Policy.

C.5 — Advertising and Advertising Identifiers

Our Games may display advertisements and may use advertising, mediation, measurement, attribution, and related technologies provided by third-party advertising and monetization partners. Depending on the Game, platform, technical configuration, available advertising services, and the user's privacy choices, information processed in connection with advertising may include: • device and technical information; • IP address and network-related information; • advertising identifiers, including Apple's Identifier for Advertisers (IDFA) on iOS and Google's Advertising ID on Android; • application, installation, and device-related identifiers; • approximate or precise location information, where the relevant permissions are available and applicable; • information relating to advertisements displayed, viewed, clicked, or otherwise interacted with; • information relating to advertising requests, impressions, clicks, conversions, and attribution; • information relating to the Game, including application version and relevant usage information; • information relating to consent and privacy choices; and • other information reasonably necessary for advertising delivery, measurement, attribution, fraud prevention, and related advertising functions. We use advertising mediation and related services to request, manage, deliver, measure, and optimize advertisements displayed in our Games. These services may involve multiple advertising partners and demand sources. The advertising and mediation services used by our Games may change over time. We may add, remove, enable, disable, or modify advertising partners, networks, adapters, or related services depending on technical, commercial, performance, security, or operational requirements. Advertising partners and other third-party services may process information in accordance with their own privacy policies and applicable legal requirements. The relevant providers and their privacy information are identified or linked in the applicable third-party services section of this Privacy Policy. iOS Advertising and App Tracking Transparency On iOS, our Games may use Apple's App Tracking Transparency (ATT) framework where access to the Identifier for Advertisers (IDFA) or other tracking activity is applicable. Where required, users are presented with Apple's ATT authorization request and may choose whether to allow or deny tracking. If a user does not grant the applicable ATT permission, access to the IDFA is restricted in accordance with Apple's platform requirements. Other advertising or measurement technologies may nevertheless continue to operate where permitted by applicable law and platform rules. The ATT permission is separate from consent mechanisms required under applicable data protection and privacy laws. Android Advertising On Android, advertising services may use Google's Advertising ID and other applicable device or advertising identifiers, subject to the user's device settings, applicable platform requirements, and privacy choices. Where applicable, advertising services may also process technical information and location information for advertising-related purposes, subject to the relevant permissions, consent requirements, and configuration. Personalized and Non-Personalized Advertising Depending on the user's location, applicable law, consent choices, platform settings, and the configuration of the relevant advertising services, advertisements may be personalized or non-personalized. Personalized advertising may involve the use of information such as advertising identifiers, device information, approximate location, advertising interactions, or other information permitted for advertising purposes. Where personalized advertising or related processing requires consent under applicable law, we will request or otherwise manage the applicable consent through the consent mechanisms made available in our Games. Where consent is not provided, is withdrawn, or is not required, advertising may be provided using non-personalized, contextual, technical, or otherwise permitted methods, depending on the applicable advertising service and configuration. Consent and Privacy Choices For users in jurisdictions where consent is required for particular advertising or tracking activities, our Games may provide consent management mechanisms through which users can make or modify applicable privacy choices. Users may also be able to access privacy or consent settings within the Games and modify their choices after the initial consent interaction. Changing or withdrawing certain privacy choices may affect the availability, personalization, measurement, or functionality of advertising and other monetization-related services. The availability and effect of particular privacy choices may depend on the user's jurisdiction, operating system, advertising service, applicable law, and technical configuration. Advertising Partners and Mediation Our Games may use an advertising mediation platform and multiple third-party advertising networks or demand sources. The specific advertising partners available through our mediation configuration may change over time. The relevant third-party services may process information for purposes including advertising delivery, measurement, attribution, fraud prevention, frequency management, optimization, and reporting. The categories of advertising partners and third-party services that may process Personal Data through our Games are described in the relevant sections of this Privacy Policy, together with links to their applicable privacy information where appropriate.

C.6 Analytics and Measurement

Our Games use analytics and measurement technologies to understand how users interact with the Games, measure performance and engagement, identify trends, evaluate user acquisition and retention, and improve our Games and services. Depending on the Game, operating system, technical configuration, and analytics services enabled, information processed for analytics and measurement purposes may include: • Game sessions and session duration; • Game launches and related events; • gameplay progress and interactions; • levels, scores, achievements, and other gameplay events, where applicable; • interactions with Game features and functionality; • information about advertisements and advertising interactions, where applicable; • device and technical information; • application and Game version information; • approximate location or country/region information, where applicable; • identifiers associated with the device, application, installation, or analytics service, where applicable; • information relating to playtime, engagement, retention, user acquisition, cohorts, funnels, and other usage or measurement metrics; and • other event or measurement information generated through the use of the Games. We use analytics and measurement information for purposes including: • understanding how users use and interact with our Games; • measuring engagement, playtime, retention, gameplay activity, and other usage trends; • analyzing user acquisition and the performance of acquisition activities; • analyzing cohorts and user behavior over time; • evaluating funnels and interactions with different Game features; • improving Game design, features, functionality, and user experience; • identifying technical or gameplay issues; • evaluating the performance of Game features and updates; • measuring the effectiveness of advertising and marketing activities, where applicable; • supporting attribution and monetization analysis, where applicable; and • developing and improving our Games and related services. Firebase Analytics Our Games may use Google Firebase Analytics to collect and analyze information relating to Game usage, user interactions, events, acquisition, cohorts, and other measurement information. Firebase Analytics may process information such as Game events, session information, device and technical information, application and Game version information, acquisition-related information, and other information generated through interactions with the Games. The specific events and analytics information processed may vary depending on the Game and its configuration and may be modified or expanded over time. GameAnalytics Our Games may use GameAnalytics, an independent third-party analytics service, to collect and analyze information relating to Game usage, gameplay, engagement, and user behavior. Depending on the configuration of GameAnalytics and the relevant Game, information processed may include playtime, new user information, retention and related metrics, cohorts, funnels, gameplay events, engagement information, and other analytics information generated through interactions with the Game. The specific events and metrics processed through GameAnalytics may vary depending on the Game and its configuration and may be modified or expanded over time. Analytics services may use identifiers or other technical information to associate events or activity with a particular installation, device, or user over time. Such information may constitute Personal Data where it can reasonably be associated with an identifiable individual. The information processed for analytics purposes may vary depending on the Game, platform, SDK configuration, services enabled, and the user's applicable privacy choices. Where analytics processing requires consent under applicable law, the relevant consent or privacy mechanisms described in this Privacy Policy will apply. Users may also be able to manage applicable privacy or consent choices through the mechanisms made available within the Games. Analytics providers may process information in accordance with their own privacy policies and applicable legal requirements. The relevant third-party providers and their privacy information are identified or linked in the third-party services section of this Privacy Policy.

C.7 — Crash, Performance and Diagnostic Data

Our Games may generate or make available crash, performance, diagnostic, and technical information to help identify, investigate, prevent, and resolve technical problems and to improve the stability, security, and performance of the Games. Depending on the Game, operating system, device, technical configuration, and services enabled, this information may include: • crash reports and crash information; • error messages and error codes; • diagnostic information generated when a technical error occurs; • device type, model, manufacturer, and operating system information; • operating system and Game version information; • application and installation information; • information relating to memory, performance, loading times, and other technical performance characteristics; • network and connectivity information; • information relating to the circumstances surrounding a crash, error, or technical issue; • technical logs and diagnostic events; • information about the Game state or activity occurring when an error or crash takes place, where available; and • identifiers or other technical information that may be used to associate diagnostic information with a particular device, application, or installation. We may use crash, performance, and diagnostic information for purposes including: • detecting and investigating crashes, errors, bugs, and other technical problems; • improving the stability and reliability of the Games; • monitoring and improving Game performance; • identifying compatibility problems across devices and operating systems; • diagnosing problems affecting particular Game versions or features; • preventing abuse, security incidents, or other technical threats where relevant; and • developing, testing, maintaining, and improving the Games. Crash and diagnostic information may be made available through platform services and developer tools provided by the relevant application platform, including Apple and Google, where applicable. We do not currently use a dedicated third-party crash reporting SDK such as Firebase Crashlytics in our Games. The specific information available through platform-level diagnostic and crash reporting services may vary depending on the operating system, platform, device, Game version, and configuration of the relevant platform services. Crash, performance, and diagnostic information may be associated with device, application, installation, or other technical identifiers. Where such information can reasonably be associated with an identifiable individual, it may constitute Personal Data under applicable law. The processing of crash, performance, and diagnostic information may be necessary for the security, stability, maintenance, and functionality of the Games or may be carried out on another applicable legal basis, depending on the nature and circumstances of the processing. The relevant third-party providers and platform services are identified or linked in the applicable sections of this Privacy Policy.

C.8 In-App Purchases and Payments

Our Games may offer optional in-app purchases or other paid features through the applicable application platform. Depending on the Game and platform, purchases may be processed through Apple's App Store, Google's Google Play Store, or another applicable platform or payment service. When you make an in-app purchase, the relevant platform may process payment and transaction information necessary to complete and manage the purchase. We generally do not receive or store your full payment card number, bank account details, or other complete payment credentials used to complete purchases through Apple or Google. Depending on the platform, Game, and type of transaction, we may receive or have access to limited transaction-related information, which may include: • information indicating that a purchase or transaction has occurred; • the purchased product or in-game item; • transaction or purchase identifiers; • transaction status, such as successful, failed, refunded, or cancelled; • purchase date and time; • information relating to subscriptions or other purchase entitlements, where applicable; and • other information made available to us by the relevant application platform for purposes of validating, providing, restoring, or managing purchased content. We may use transaction and purchase information for purposes including: • processing and validating purchases; • providing purchased items, features, or other digital content; • restoring previously purchased content where supported; • managing purchase entitlements; • preventing and detecting fraudulent or unauthorized transactions; • handling refunds, cancellations, chargebacks, or purchase-related support requests; • maintaining appropriate transaction records; and • complying with applicable legal and accounting obligations. Apple and Google may independently process payment and transaction information in accordance with their own terms, privacy policies, and applicable laws. We do not control the payment processing practices of Apple, Google, or other independent payment providers. Their processing of payment information is governed by their respective terms and privacy policies. If you contact us regarding an in-app purchase or transaction, we may process information that you voluntarily provide to us, such as your email address, transaction identifier, purchase details, or information necessary to investigate and resolve the relevant issue. We recommend that users do not send payment card numbers, passwords, authentication credentials, or other unnecessary sensitive information when contacting us. The specific purchase functionality and transaction information processed may vary depending on the Game, platform, product, and technical configuration.

C.9 Third-Party SDKs and Services

Our Games may use third-party software development kits (SDKs), libraries, services, and other technologies to support advertising, monetization, analytics, gameplay functionality, security, performance, and other features or services. The specific third-party SDKs and services used may vary between Games and may change over time depending on the Game, platform, technical configuration, features, and operational requirements. Third-party services may process certain information described in this Privacy Policy, depending on their role and the configuration of the relevant Game. Some third-party services may process information on our behalf, while others may process information independently in accordance with their own privacy policies and applicable legal requirements. Further information regarding advertising, mediation, analytics, third-party SDKs, information shared with third parties, and applicable third-party privacy policies is provided in Section D — Advertising, Mediation & Third-Party SDKs.

C.10 Game Data Retention

We retain Personal Data and other information processed through our Games only for as long as reasonably necessary for the purposes for which it was collected or generated, taking into account the nature of the information, the purposes of the processing, the services involved, and applicable legal requirements. The retention period may vary depending on the category of information and the purpose for which it is processed. Depending on the circumstances, different categories of information may be retained for different periods, including: • information required to operate and provide the Games and their features; • Game usage and gameplay information used for analytics, measurement, and improvement; • advertising, measurement, and attribution information processed through advertising and mediation services; • purchase and transaction-related information; • technical, diagnostic, and performance information; • information submitted through customer support and help services; and • information required to comply with legal, accounting, security, fraud-prevention, or other regulatory obligations. Information processed by third-party providers, including advertising networks, mediation providers, analytics services, application platforms, and other SDK providers, may be retained by those providers in accordance with their own privacy policies, contractual obligations, applicable legal requirements, and their applicable retention practices. We do not control the retention periods applied by independent third-party providers acting as independent controllers. Where a third-party provider processes Personal Data on our behalf as a processor or service provider, we seek to ensure that the retention and deletion of such information are handled in accordance with our instructions, contractual requirements, and applicable law. Information submitted through our customer support and help services is retained only for as long as reasonably necessary to handle the relevant request, provide support, investigate related issues, maintain appropriate records, and comply with applicable legal obligations. Where Personal Data is no longer reasonably necessary for the purposes for which it was processed, we may delete it, anonymize it, aggregate it, or otherwise securely dispose of it, unless retention is required or permitted by applicable law. Certain information may need to be retained for longer periods where necessary to establish, exercise, or defend legal claims, comply with legal or regulatory obligations, prevent fraud or abuse, resolve disputes, enforce agreements, or maintain appropriate business and security records. Anonymized or aggregated information that can no longer reasonably be associated with an identified or identifiable individual may be retained for longer periods where permitted by applicable law. The actual retention period for a particular category of information may therefore depend on the Game, platform, service provider, purpose of processing, technical configuration, and applicable legal requirements.

D — Third-Party Services & SDKs

D.1 Advertising and Mediation

Our Games may display advertisements and may use advertising, mediation, monetization, measurement, and related technologies provided by third-party services. Advertising may include formats such as banner, interstitial, rewarded, native, or other advertising formats supported by the relevant Game and third-party services. Our Games may use mediation services to manage and optimize advertising delivery by allowing multiple advertising networks or other advertising providers to compete for or provide advertising opportunities within a Game. The specific advertising networks, mediation services, SDKs, adapters, and other third-party technologies used may vary between Games and may change over time depending on the Game, platform, technical configuration, availability of services, performance considerations, monetization requirements, and other operational factors. A third-party service or advertising network described in this Privacy Policy may therefore not be active or used in every Game at all times. Depending on the services enabled in a particular Game, advertising and related services may process information such as device and technical information, advertising identifiers, IP address, approximate location where permitted and available, information about advertising interactions, and other information necessary for advertising delivery, measurement, attribution, fraud prevention, or related purposes. Where required by applicable law, advertising-related processing may be subject to the user's privacy choices, consent, or applicable platform permissions. The third-party providers involved in advertising and mediation may process information in accordance with their own privacy policies and applicable contractual and legal requirements. Further information about relevant providers and their processing practices is provided in the following sections of this Privacy Policy.

D.2 Appodeal

Some of our Games may use Appodeal as an advertising mediation and monetization platform. Appodeal may facilitate the delivery, mediation, optimization, measurement, and management of advertising through multiple third-party advertising networks and advertising providers. Depending on the configuration of the relevant Game, Appodeal and the third-party services integrated through Appodeal may process information such as device and technical information, advertising identifiers, IP address, approximate location where permitted, information relating to advertising interactions, and other information required for advertising delivery, measurement, attribution, fraud prevention, and related purposes. The specific advertising networks, adapters, SDK components, and other third-party services available through Appodeal may vary between Games and may be added, removed, enabled, or disabled over time. Not every advertising network or service available through Appodeal is necessarily active or used in every Game. Where applicable, Appodeal and the relevant advertising providers may receive or process information in accordance with the user's privacy choices, applicable consent requirements, platform permissions, and the configuration of the relevant Game. Appodeal may also provide or support consent management and communication of applicable privacy choices to participating advertising providers where such functionality is enabled. The processing carried out by Appodeal and by advertising providers participating in the mediation process may be subject to their respective privacy policies and applicable legal requirements. Further information concerning third-party advertising providers and services that may be used through Appodeal is provided in the relevant sections of this Privacy Policy.

D.3 Advertising Partners and Ad Networks

Our Games may use advertising networks, advertising technology providers, demand partners, exchanges, supply-side platforms, bidding partners, measurement providers, and other third-party advertising services. These services may be integrated directly into a Game or made available through advertising mediation platforms such as Appodeal or other mediation technologies. Depending on the configuration of the relevant Game, these services may process information such as device and technical information, advertising identifiers, IP address, approximate location where permitted, information relating to advertising requests and interactions, and other information necessary for advertising delivery, measurement, attribution, fraud prevention, frequency management, and related purposes. The advertising partners and networks used in our Games may vary depending on the Game, platform, mediation configuration, technical requirements, availability, performance, monetization requirements, and other operational considerations. Advertising partners and networks may be added, removed, enabled, or disabled from time to time. A particular advertising provider may therefore not be active or used in every Game. Advertising providers may include companies operating advertising networks, exchanges, bidding platforms, demand-side or supply-side platforms, mediation services, measurement services, and other advertising technologies. Advertising providers may process information independently or in connection with mediation and bidding systems, subject to their own privacy policies, contractual arrangements, applicable legal requirements, and the privacy choices communicated through the relevant consent mechanisms. Where required by applicable law, advertising-related processing may be limited or affected by the user's consent, privacy choices, platform permissions, or other applicable controls. Because the advertising services integrated into our Games may change over time, the specific providers and technologies used may also change without requiring this section to identify every individual provider or advertising network by name. Relevant third-party providers and their privacy information may be identified or linked in the applicable third-party services sections of this Privacy Policy.

D.4 Analytics Providers

Our Games may use analytics, measurement, attribution, and related services to help us understand how our Games are used, measure performance, evaluate user engagement, improve our Games, and support advertising and monetization activities. Depending on the configuration of the relevant Game, these services may include analytics, attribution, measurement, or related technologies provided by third-party service providers. The specific analytics and measurement providers used may vary between Games and may change over time depending on the Game, platform, technical configuration, features, operational requirements, and other considerations. A particular analytics or measurement provider may therefore not be active or used in every Game. Depending on the service and configuration, analytics and measurement providers may process information such as device and technical information, application and Game information, advertising or other identifiers, IP address, information about Game usage and interactions, performance information, attribution information, and other information necessary for the relevant analytics, measurement, attribution, or related purposes. The information processed may include events and measurements relating to activities such as Game launches, sessions, user engagement, gameplay activity, progression, retention, acquisition, advertising interactions, conversion events, and other events or metrics configured within the relevant Game. Analytics and measurement services may process information independently or on our behalf, depending on the service and the applicable relationship between Hlight Games Studios and the relevant provider. Where required by applicable law, analytics and measurement processing may be subject to the user's consent, privacy choices, or other applicable legal requirements. The specific providers, SDKs, events, measurements, and configurations used in our Games may change over time without requiring this section to identify every individual analytics service or event by name.

D.5 GameAnalytics

Some of our Games may use GameAnalytics, a third-party analytics service, to collect and analyze information relating to Game usage, engagement, performance, and player behavior. Depending on the configuration of the relevant Game, GameAnalytics may process information relating to Game sessions, playtime, new and returning users, retention, progression, engagement, funnels, events, and other gameplay or usage measurements configured within the Game. The information processed may include Game and application information, device and technical information, identifiers, information relating to Game usage and interactions, and other information necessary for analytics and measurement purposes. The specific events, metrics, funnels, configurations, and information processed through GameAnalytics may vary between Games and may change over time. GameAnalytics may process information on our behalf or as otherwise described in its applicable terms and privacy documentation, depending on the relevant service and configuration. Where required by applicable law, processing through GameAnalytics may be subject to the user's consent, privacy choices, or other applicable legal requirements. The use of GameAnalytics may vary between Games, and GameAnalytics may not be active or used in every Game.

D.6 Firebase / Google Services

Some of our Games may use Firebase and other Google services to support analytics, measurement, technical functionality, and other services associated with the operation and improvement of the Games. Depending on the configuration of the relevant Game, Firebase Analytics may be used to collect and analyze information relating to Game usage, engagement, acquisition, events, sessions, and other measurements configured within the Game. The information processed through Firebase or other applicable Google services may include device and technical information, application and Game information, identifiers, IP address, information relating to Game usage and interactions, and other information necessary for the relevant service and purposes. The specific Firebase or Google services used, as well as the events, measurements, configurations, and information processed, may vary between Games and may change over time. Firebase or other Google services may process information on our behalf or as otherwise described in the applicable Google or Firebase documentation and privacy policies, depending on the relevant service and configuration. Where required by applicable law, processing through Firebase or other Google services may be subject to the user's consent, privacy choices, or other applicable legal requirements. A particular Firebase or Google service may not be active or used in every Game.

D.7 Other Third-Party SDKs

Our Games may use additional third-party software development kits (SDKs), libraries, frameworks, tools, services, or other technologies to support the operation, functionality, security, analytics, advertising, monetization, communication, or improvement of the Games. The specific third-party SDKs and services used may vary between Games and may change over time depending on the features, platform, technical configuration, operational requirements, and other considerations applicable to the relevant Game. These technologies may process information such as device and technical information, application and Game information, identifiers, network information, usage information, diagnostic information, or other information reasonably necessary for the relevant service. A third-party SDK or service may be integrated into only one or some of our Games and may not be active or used in every Game. Third-party SDKs and services may process information on our behalf or independently, depending on the nature of the service and the relationship between Hlight Games Studios and the relevant provider. Where required by applicable law, processing through third-party SDKs and services may be subject to applicable consent requirements, privacy choices, platform permissions, or other legal requirements. The specific third-party technologies used in our Games may be added, removed, replaced, enabled, or disabled over time. Accordingly, this section is intended to describe the categories and nature of such technologies rather than provide an exhaustive list of every SDK or software component used in every Game.

D.8 Data Shared With Third Parties

Depending on the Game, services used, and applicable configuration, certain information may be disclosed to or made available to third-party service providers and partners that support the operation, analytics, advertising, monetization, security, measurement, and other functionality of our Games. The information that may be disclosed or made available may include, where applicable: • device and technical information; • application and Game information; • advertising or other identifiers; • IP address and network-related information; • approximate location information where permitted and available; • information relating to Game usage, interactions, events, and measurements; • advertising and attribution information; • diagnostic, performance, and technical information; and • other information reasonably necessary for the relevant service or purpose. The specific information made available to a third party depends on the relevant service, the configuration of the Game, the technical integration, the purposes of processing, applicable privacy choices, and applicable legal requirements. Third-party providers may receive information directly from the Games or through other integrated services, including mediation, analytics, advertising, measurement, or other technologies. We do not disclose more information than is reasonably necessary for the relevant purpose, subject to the technical operation of the applicable third-party service and the requirements of applicable law. Third parties may process information on our behalf or independently, depending on their role and relationship with Hlight Games Studios. Where a third party processes information independently, its own privacy policy and applicable legal requirements may also apply. The specific third parties and services involved may vary between Games and may change over time as our Games, SDKs, advertising partners, analytics services, and other technologies are added, removed, replaced, enabled, or disabled.

D.9 Third-Party Privacy Policies

Our Games may use third-party services whose processing of information is governed, in whole or in part, by the privacy policies and other privacy documentation of the relevant providers. Relevant third-party providers may include advertising and mediation providers, advertising networks, analytics and measurement providers, SDK providers, and other services used in connection with our Games. The specific third-party services used may vary between Games and may change over time. Accordingly, the relevant providers and their applicable privacy documentation may also change. For services provided through Appodeal, Appodeal provides information about its advertising partners and their applicable privacy policies through its partner privacy information page. Users may review the applicable third-party privacy information through the following resources: • Appodeal Privacy Policy — https://appodeal.com/privacy-policy/ • Appodeal Partners and Privacy Policies — https://appodeal.com/partners-privacy-policies/ • GameAnalytics Privacy Notice — https://www.gameanalytics.com/trust/privacy-notice Additional third-party privacy policies may be provided where appropriate for services used directly by a Game or otherwise relevant to the processing described in this Privacy Policy. Users should review the privacy policies of the relevant third-party providers for information about their processing activities, practices, and applicable privacy choices. Third-party providers may process information independently or on behalf of Hlight Games Studios depending on the nature of the relevant service and their relationship with us. Their processing may be subject to their own privacy policies, terms, and applicable legal requirements.

D.10 Third-Party Processing and Responsibilities

Third-party providers used by our Games may process information in connection with the services they provide. Depending on the nature of the service and applicable law, a third-party provider may process information on our behalf or may process information independently for its own purposes. Third-party providers may have their own privacy policies, terms, and legal obligations governing their processing activities. The specific role and responsibilities of a third-party provider may vary depending on the service, Game, technical configuration, and applicable legal requirements. Further information about relevant third-party providers and their privacy policies is provided in Section D.9 — Third-Party Privacy Policies.

E — Consent, Tracking & Privacy Choices

E.1 Consent Management

Depending on your location, applicable law, and the processing activities involved, our Games may use consent management mechanisms to provide users with information about certain data processing activities and to collect and manage privacy choices where consent is required. These mechanisms may be provided through our Games or through third-party consent management services integrated into the Games. Depending on the applicable requirements, users may be asked to make choices regarding activities such as personalized advertising, measurement, analytics, or other processing activities that require or may be affected by user consent. Where consent is required, we seek to obtain it before carrying out the relevant processing, in accordance with applicable law and the requirements of the relevant platform or service. The consent choices available to a user may vary depending on the user's location, applicable legal requirements, operating system, Game, and third-party services integrated into the relevant Game. Consent management mechanisms may also communicate applicable privacy choices to advertising, analytics, mediation, and other third-party services where necessary to respect those choices. Providing or refusing consent may affect certain processing activities or the availability of certain advertising or other monetization-related functionality, where permitted by applicable law. Where processing does not require consent under applicable law, another lawful basis may apply. Our consent management practices may be updated from time to time as applicable laws, platform requirements, or the third-party services used by our Games change.

E.2 GDPR and Regional Consent

For users in the European Economic Area (EEA), the United Kingdom, Switzerland, and other jurisdictions where applicable privacy laws require consent or other privacy choices, our Games may provide consent management mechanisms for relevant processing activities. Depending on the applicable requirements, users may be asked to provide or manage consent for activities such as personalized advertising, advertising measurement, analytics, or other processing involving Personal Data or access to information stored on their device. Where applicable, our consent management mechanisms may use the IAB Europe Transparency and Consent Framework (TCF), including the applicable version of the TCF in effect at the relevant time, or other recognized consent mechanisms to communicate users' privacy choices to relevant third-party providers. The information and choices presented to users may include the purposes of processing, relevant third-party providers, applicable legal bases, and the consequences of providing or refusing consent, where required by the applicable framework. Consent choices may be communicated to relevant advertising, mediation, analytics, and measurement providers so that those providers can respect the user's applicable privacy choices. The specific consent requirements and available choices may vary depending on the user's location, applicable law, Game, operating system, and third-party services used by the relevant Game. Where processing is permitted on a legal basis other than consent, such processing may continue where permitted by applicable law, subject to any applicable right to object or other privacy choice. We may update our consent mechanisms from time to time to reflect changes in applicable laws, regulatory requirements, industry frameworks, platform requirements, or the third-party services used by our Games.

E.3 iOS App Tracking Transparency and Advertising Identifiers

On iOS, our Games may use Apple's App Tracking Transparency (ATT) framework where access to the Identifier for Advertisers (IDFA) or tracking-related processing requires authorization under applicable Apple requirements. Where applicable, users may be presented with Apple's ATT authorization request and can choose whether to allow or deny tracking. If ATT authorization is not granted, access to the IDFA is restricted in accordance with Apple's requirements. Other identifiers or technical information may still be processed where permitted by applicable law, platform requirements, and the user's applicable privacy choices. On Android, our Games may use Google's Advertising ID or other applicable identifiers for advertising, measurement, attribution, fraud prevention, analytics, or related purposes, subject to the user's device settings, applicable consent requirements, and platform rules. Advertising identifiers and other device-related identifiers may be used by our advertising, mediation, analytics, measurement, and other third-party service providers for purposes described in the relevant sections of this Privacy Policy. The availability and use of advertising identifiers may vary depending on the operating system, device settings, user choices, applicable consent, the Game, and the third-party services integrated into the Game.

E.4 Withdrawal of Consent and Privacy Choices

Where processing is based on consent, users may withdraw or modify their consent at any time through the privacy or consent management options made available within our Games, where applicable. For users in jurisdictions where applicable consent choices are provided through a consent management mechanism, the available privacy options may allow users to review or change their preferences regarding advertising, analytics, measurement, or other processing activities. On iOS, users may also manage certain tracking-related permissions through the privacy settings provided by Apple, including the settings associated with App Tracking Transparency. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Depending on the processing involved, withdrawing or changing a privacy choice may affect the availability, personalization, measurement, or functionality of certain advertising or other monetization-related services. Certain processing activities may continue where another lawful basis applies or where processing is otherwise permitted by applicable law. The specific privacy choices available to users may vary depending on their location, operating system, Game, applicable law, and the third-party services integrated into the Game.

E.5 Consent Records

Where processing is based on consent, we may retain or otherwise maintain records of users' consent choices and related privacy preferences to the extent reasonably necessary to demonstrate and respect those choices and to comply with applicable legal requirements. Such records may include information relating to the consent or privacy choice provided, the relevant purposes or categories of processing, the date and time of the choice, and other information reasonably necessary to maintain an appropriate record of the user's preferences. Consent records may be maintained through our Games, consent management systems, or third-party services used to manage and communicate privacy choices. The information contained in consent records will be retained only for as long as reasonably necessary for the purposes for which it is maintained, including demonstrating compliance with applicable legal requirements and respecting the user's privacy choices. The specific technical methods used to record, store, or communicate consent choices may change over time as our Games, consent management systems, third-party services, or applicable legal requirements change.

F — Help & Support

F.1 Support Services

Hlight Games Studios provides customer support and help services for users of our Games and related services. Users may contact us through support and help functionality made available through our Website, including the Help Form described in Section B.6, or through support links and help options provided within our Games. Support services may be used for purposes including: • responding to questions and support requests; • investigating and resolving technical problems and bugs; • assisting with gameplay-related issues; • addressing problems relating to Game features or functionality; • investigating purchase or transaction-related issues, where applicable; • reviewing reports of inappropriate, abusive, fraudulent, or unauthorized activity; and • communicating with users regarding their support requests. The information processed through support services depends on the nature of the request and the information voluntarily provided by the user. The same privacy principles and safeguards described in this Privacy Policy apply to Personal Data processed through our support services.

F.2 Information Submitted Through Support

When you contact Hlight Games Studios for support or assistance, we may process the information you voluntarily provide as part of your request. Depending on the nature of the request, this may include: • your email address, where provided; • your name, where provided; • the name of the relevant Game; • the platform on which the Game is being used; • information about the problem, question, or request; • information about the Game version or relevant feature; • screenshots, videos, or other attachments voluntarily submitted; • transaction or purchase information relevant to a support request, where applicable; and • other information that you choose to include in your communication. Providing an email address is generally optional. However, if you provide an email address, we may use it to communicate with you regarding your support request. . Users should avoid submitting sensitive or unnecessary Personal Data, account credentials, payment card information, passwords, authentication codes, or other information that is not relevant to their support request. We process information submitted through support services only to the extent reasonably necessary to handle the relevant request, provide assistance, investigate related issues, maintain appropriate records, and comply with applicable legal obligations.

F.3 Communication and Bug Reports

When you contact us for support, report a bug, or communicate with us regarding our Games or services, we may process the content of your communication and information reasonably necessary to understand, investigate, and respond to the relevant request. This information may include: • the content of your message or communication; • information about the reported bug, error, or technical issue; • the name and version of the relevant Game; • the platform and device information voluntarily provided by you; • steps or circumstances that may have led to the reported problem; • screenshots, videos, or other files voluntarily submitted with the report; • relevant purchase or transaction information, where necessary to investigate a purchase-related issue; and • other information that you voluntarily provide in connection with the support request. We may use this information to: • investigate and reproduce reported bugs or technical problems; • identify and resolve errors or other issues affecting the Games; • provide technical assistance; • improve Game stability, functionality, and user experience; • investigate reports of abuse, fraud, or unauthorized activity where relevant; and • communicate with you regarding the reported issue, where contact information has been provided. We may also receive or generate limited technical information associated with a support request where reasonably necessary to investigate a reported problem. Such information may include Game version, operating system, device type, error information, or other diagnostic information available through the relevant platform or technical systems. We do not require users to provide unnecessary Personal Data when reporting a bug or contacting support. Users should avoid including passwords, authentication codes, payment card details, or other sensitive information that is not necessary to investigate the reported issue.

F.4 Support Data Retention

Personal Data and other information submitted through our support and help services are retained only for as long as reasonably necessary to handle the relevant request, provide support, investigate and resolve reported issues, maintain appropriate records, and comply with applicable legal obligations. The retention period may vary depending on the nature and complexity of the request and the type of information involved. Where a support request relates to a technical problem, security issue, fraud investigation, purchase dispute, legal claim, or other matter requiring further investigation, relevant information may be retained for a longer period where reasonably necessary for those purposes. Where information is no longer reasonably necessary for the purposes for which it was processed, we may delete it, anonymize it, or otherwise securely dispose of it, unless a longer retention period is required or permitted by applicable law. Information that has been irreversibly anonymized so that it can no longer reasonably be associated with an identified or identifiable individual may be retained for longer periods where permitted by applicable law. Information processed by third-party service providers supporting our Website, communications, hosting, forms, or support infrastructure may be subject to the retention practices of those providers, in accordance with applicable contractual and legal requirements.

G — Children & Minors

G.1 Age Requirements and Children's Privacy

Our Games and related services are not designed for or directed at children under the age of 13. If you are under 13, you should not use our Games or provide Personal Data through our services. We do not generally ask users to provide their date of birth. Where required by applicable law, including in connection with consent for personalized advertising or other privacy-related choices, we may ask you to confirm whether you meet the applicable age requirement. We use this confirmation only to determine whether you may provide the relevant consent or use the applicable service. Certain advertising, mediation, analytics, and other third-party services used in our Games may apply additional age requirements or restrictions. Where applicable, these requirements may affect the availability of certain services or processing activities. Age ratings assigned by app stores, such as the Apple App Store or Google Play, may reflect content classification criteria established by those platforms. An App or Game being rated as suitable for users under a particular age does not by itself mean that our Games are designed for, directed at, or intended for children for purposes of applicable privacy laws. We encourage users between 13 and 18 to review this Privacy Policy with a parent or legal guardian or another trusted adult before using our Games or providing Personal Data. If you are a parent or legal guardian and believe that a child under 13 has provided us with Personal Data, please contact us using the privacy contact information provided in Section A.8 — Privacy Contact. Where required by applicable law, we will take appropriate steps to address the situation.

G.2 Children's Data and Applicable Laws

The privacy protections applicable to children and minors may vary depending on the user's location, age, the relevant processing activity, and applicable law. Where applicable, our processing practices are designed to comply with children's privacy requirements under relevant laws, including the EU General Data Protection Regulation (GDPR), the United Kingdom data protection framework, the Children's Online Privacy Protection Act (COPPA) in the United States, and other applicable children's privacy laws. Where applicable law requires parental or guardian consent or other protections before Personal Data relating to a child may be processed, we will apply the requirements applicable to the relevant processing activity.

G.3 Accidental Collection of Children's Data

If we become aware that Personal Data relating to a child under 13 has been collected through our services in circumstances where such collection is not permitted, we will take appropriate steps to address the situation in accordance with applicable law. Depending on the circumstances and applicable legal requirements, such measures may include deleting the relevant Personal Data, restricting further processing, or taking other appropriate corrective measures. If you are a parent or legal guardian and believe that a child under 13 has provided Personal Data to us, you may contact us using the privacy contact information provided in Section A.8 — Privacy Contact.

H — International Data Transfers & Security

H.1 International Data Processing

Hlight Games Studios may use service providers, technology providers, advertising partners, analytics providers, hosting providers, and other third-party services located in countries other than the country in which you are located. As a result, Personal Data processed through our Website, Games, and related services may be processed in different countries or jurisdictions. The location of processing may vary depending on the services used, the Game, the platform, the user's location, and the technical configuration applicable at the relevant time. Where required by applicable law, we take appropriate measures to ensure that international processing and transfers of Personal Data are carried out in accordance with applicable data protection requirements.

H.2 International Data Transfers and Transfer Mechanisms

Where Personal Data is transferred to a country that is not recognized as providing an adequate level of data protection under applicable law, we may rely on an appropriate legal mechanism for the transfer. Depending on the circumstances and applicable legal requirements, international transfers may be carried out on the basis of an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism recognized under applicable data protection law. The specific transfer mechanism may depend on the location of the recipient, the services involved, the applicable legal framework, and the circumstances of the relevant processing.

H.3 Standard Contractual Clauses

Where required and appropriate, we or the relevant third-party service provider may rely on Standard Contractual Clauses or equivalent contractual safeguards approved or recognized under applicable data protection law for international transfers of Personal Data. The applicable safeguards may vary depending on the service provider, the nature of the processing, the destination country, and the legal framework applicable to the transfer. Where a third-party provider is responsible for its own international transfer arrangements, the provider's applicable privacy documentation and contractual safeguards may also apply.

H.4 Security Measures

We take reasonable and appropriate technical and organizational measures designed to protect Personal Data against unauthorized access, alteration, disclosure, loss, misuse, destruction, or other unlawful or unauthorized processing. Depending on the nature of the information and the services involved, security measures may include access controls, authentication mechanisms, secure communications, hosting and infrastructure protections, monitoring, maintenance, software updates, and measures designed to detect and prevent unauthorized activity. Security measures may vary depending on the Website, Game, platform, service, and type of information involved. No method of transmission over the Internet or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of Personal Data.

H.5 Personal Data Breaches

If we become aware of a Personal Data breach affecting Personal Data under our responsibility, we will assess the incident and take appropriate measures in accordance with applicable law. Depending on the nature and severity of the incident, such measures may include investigating and containing the incident, taking steps to restore the security of our systems, documenting the incident, and notifying competent authorities or affected individuals where notification is required by applicable law. We may also take additional measures reasonably necessary to prevent or reduce the likelihood of similar incidents occurring in the future.

H.6 Data Deletion and Retention

Personal Data is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Different categories of Personal Data may therefore be retained for different periods depending on the purpose of processing, the nature of the information, legal or regulatory requirements, security considerations, and other legitimate business needs. When Personal Data is no longer reasonably necessary for the purposes for which it was processed, we may delete it, anonymize it, or otherwise securely dispose of it, subject to applicable legal or operational requirements. Where Personal Data is processed by third-party service providers, the applicable provider may retain information in accordance with its own contractual, legal, and operational requirements. Information that has been irreversibly anonymized so that it can no longer reasonably be associated with an identified or identifiable individual may be retained for longer periods where permitted by applicable law.

I — Privacy Rights by Jurisdiction

I.1 EEA / European Union

For users in the European Economic Area (EEA), the processing of Personal Data is subject, where applicable, to the General Data Protection Regulation (GDPR) and other applicable European and national data protection laws. Depending on applicable law, users may have rights regarding access, correction, deletion, restriction, objection, portability, withdrawal of consent, and other applicable data protection rights. These rights are subject to the conditions and exceptions provided by applicable law. Users may exercise their rights as described in Section J — Exercising Your Privacy Rights. Users may also have the right to lodge a complaint with the competent data protection supervisory authority.

I.2 United Kingdom and Switzerland

For users in the United Kingdom, the processing of Personal Data may be subject to the UK GDPR, the Data Protection Act 2018, and other applicable UK privacy and data protection laws. Depending on applicable law, UK users may have rights including access, correction, deletion, restriction, objection, data portability, and other applicable privacy rights. For users in Switzerland, the processing of Personal Data may be subject to the Swiss Federal Act on Data Protection and other applicable Swiss privacy laws. The rights available to users in the United Kingdom and Switzerland may differ from those available under EU law depending on the applicable legal framework and circumstances. Users may exercise applicable rights as described in Section J — Exercising Your Privacy Rights and may have the right to contact the relevant supervisory or regulatory authority.

I.3 United States and California

For users in the United States, privacy rights may depend on the state in which the user resides and on whether the applicable state privacy law applies to the relevant processing activities. Depending on the applicable law, users may have rights relating to access, correction, deletion, portability, objection, restriction, or other privacy choices. For California residents, additional rights may apply under the California Consumer Privacy Act (CCPA), as amended by applicable California privacy legislation. Where applicable, California residents may have rights concerning access to Personal Information, correction, deletion, information about disclosures or sharing, and certain choices concerning the use or disclosure of Personal Information, subject to applicable exceptions and limitations. The availability and scope of these rights may depend on the applicable law, the user's circumstances, and whether the relevant legal requirements apply to Hlight Games Studios or the particular processing activity. Users may exercise applicable rights as described in Section J — Exercising Your Privacy Rights.

I.4 Canada

For users in Canada, the processing of Personal Information may be subject to applicable federal or provincial privacy laws, depending on the circumstances. Where applicable, users may have rights to obtain information about the Personal Information held about them, request access to such information, challenge its accuracy, and request correction, subject to applicable legal requirements and exceptions. Additional rights or requirements may apply under provincial privacy legislation. Users may exercise applicable rights as described in Section J — Exercising Your Privacy Rights and may also have rights to raise privacy concerns with the relevant privacy regulator.

I.5 Brazil

For users in Brazil, the processing of Personal Data may be subject to the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — LGPD) and other applicable Brazilian laws. Depending on applicable law, users may have rights relating to confirmation of processing, access, correction, deletion, information about processing and sharing, portability where applicable, and other rights provided by the LGPD. Users may exercise applicable rights as described in Section J — Exercising Your Privacy Rights.

I.6 Australia

For users in Australia, the processing of Personal Information may be subject to the Privacy Act 1988, the Australian Privacy Principles, and other applicable Australian privacy laws. Depending on applicable law, users may have rights including access to and correction of their Personal Information and other applicable privacy rights. Users may exercise applicable rights as described in Section J — Exercising Your Privacy Rights and may also have the right to raise a privacy complaint with the relevant privacy regulator.

I.7 Japan

For users in Japan, the processing of Personal Information may be subject to the Act on the Protection of Personal Information (APPI) and other applicable Japanese privacy laws. Depending on applicable law, users may have rights concerning information about the handling of their Personal Information, access or disclosure, correction, cessation of use or deletion in applicable circumstances, and other rights provided by applicable law. Users may exercise applicable rights as described in Section J — Exercising Your Privacy Rights.

I.8 Other Applicable Jurisdictions

Users located in jurisdictions not specifically described in this section may have additional or different privacy rights under the laws applicable to them.  Where applicable privacy laws apply to our processing activities, the relevant requirements and rights under those laws will apply.  Where a local privacy law provides rights or protections that differ from those described in this Privacy Policy, the applicable local law will prevail to the extent required.  Users may contact us using the privacy contact information provided in Section A.8 — Privacy Contact to exercise applicable rights or request additional information regarding the privacy requirements applicable to their circumstances.

J — Exercising Your Privacy Rights

J.1 How to Submit a Privacy Request

Depending on your location and applicable data protection laws, you may have rights regarding the Personal Data we process about you. To exercise an applicable privacy right, you may contact us using the privacy contact information provided in Section A.8 — Privacy Contact. When submitting a request, please provide sufficient information for us to understand the nature of your request and, where reasonably necessary, to locate the relevant Personal Data. You may be asked to provide additional information where reasonably necessary to verify your identity or protect against unauthorized requests. You do not need to provide more Personal Data than is reasonably necessary to process and verify your request. We will handle valid privacy requests in accordance with applicable data protection laws.

J.2 Verification and Response

Where reasonably necessary and permitted by applicable law, we may take appropriate steps to verify the identity of a person submitting a privacy request. The information requested for verification will depend on the nature of the request and the level of risk associated with disclosing the requested information. We will not use verification information for unrelated purposes except where permitted or required by law. We will respond to privacy requests within the time periods required by applicable law. Where permitted by law, we may extend the response period when a request is particularly complex or when multiple requests are submitted, and we will provide any notice required regarding such an extension. If we are unable to fulfill a request in whole or in part, we will explain the applicable reason to the extent required by law.

J.3 Types of Privacy Requests

Depending on your jurisdiction and applicable law, you may have the right to request: • access to Personal Data we hold about you; • information about how your Personal Data is processed; • correction of inaccurate or incomplete Personal Data; • deletion of Personal Data, subject to applicable exceptions; • restriction of certain processing activities; • objection to certain processing activities; • portability of certain Personal Data, where applicable; • withdrawal of consent where processing is based on consent; and • other rights provided by applicable data protection laws. The availability and scope of these rights may vary depending on your location, the applicable legal framework, the legal basis for processing, and applicable exceptions or limitations. These rights apply to Personal Data that we hold, process, or control, as applicable. We are not responsible for Personal Data processed independently by third-party providers where those providers determine the purposes and means of their own processing. Where processing is based on consent, withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

J.4 Appeals and Complaints

Where applicable law provides a right to appeal or request a review of our response to a privacy request, you may contact us using the privacy contact information provided in Section A.8 — Privacy Contact. You may also have the right to lodge a complaint with the competent data protection or privacy supervisory authority in your jurisdiction. For users in jurisdictions that provide specific complaint, appeal, or regulatory procedures, additional information is provided in the relevant jurisdiction-specific sections of this Privacy Policy. We encourage users to contact us first where appropriate so that we can review and attempt to resolve privacy-related concerns directly, without limiting any statutory rights to contact a supervisory authority or other competent body.

K — Third-Party Links & External Services

K.1 Third-Party Websites

Our Website and Games may contain links, references, or integrations that allow users to access websites, platforms, or services operated by third parties. These third-party websites and services are not operated or controlled by Hlight Games Studios. When you access a third-party website or service, its own privacy policy, terms, and data processing practices may apply. We are not responsible for the privacy practices, content, security, or processing activities of third-party websites or services that operate independently from Hlight Games Studios. We encourage users to review the applicable privacy information before providing Personal Data to third-party websites or services.

K.2 App Store and Google Play

Our Games may be distributed through third-party application platforms, including the Apple App Store and Google Play. Apple and Google operate these platforms independently from Hlight Games Studios and may process information in connection with the distribution, installation, updating, security, purchase, and use of applications. Their processing of Personal Data is governed by their respective privacy policies, terms, and applicable laws. Information that we receive from or through these platforms may be processed as described in the relevant sections of this Privacy Policy.

K.3 External Privacy Policies

Third-party providers and services used in connection with our Website or Games may maintain their own privacy policies describing how they collect, use, retain, disclose, and otherwise process information. Where appropriate, this Privacy Policy identifies relevant third-party providers and provides links to their official privacy information. Users should review the privacy policies of relevant third-party providers to understand their independent processing practices, particularly where those providers operate as independent controllers or otherwise determine their own processing purposes and means.

K.4 Independent Third-Party Controllers

Certain third-party providers that interact with our Website or Games may process Personal Data as independent controllers or in another legally recognized capacity rather than solely on our instructions. Where a third party determines its own purposes and means of processing, that processing is governed by the third party's own privacy policy and applicable legal requirements. Examples may include application platforms, advertising providers, analytics providers, payment platforms, and other third-party services, depending on the specific service, the role of the provider, and applicable law. We do not control the independent processing activities of such third parties. Where required, we provide users with appropriate information about relevant third-party processing and links to applicable privacy information.

L — Final Provisions

L.1 Changes to Processing

Our privacy practices may change over time as we develop new Games, features, services, technologies, or business activities. Where our processing of Personal Data materially changes, we will update this Privacy Policy and provide any additional information, notices, or privacy choices required by applicable law. Changes to third-party services, SDKs, advertising partners, analytics providers, or other technologies may also result in updates to the information described in this Privacy Policy.

L.2 Severability

If any provision of this Privacy Policy is determined to be invalid, unlawful, or unenforceable under applicable law, that provision will be interpreted or limited to the extent necessary to comply with applicable law, and the remaining provisions will continue to apply to the extent permitted by law.

L.3 Applicable Privacy Laws

This Privacy Policy is intended to describe our processing of Personal Data in accordance with applicable data protection and privacy laws. The specific rights, obligations, legal bases, protections, and requirements applicable to a particular user may depend on the user's location, applicable law, and the nature of the relevant processing activity. Where mandatory requirements of applicable law differ from the provisions or general descriptions contained in this Privacy Policy, the applicable legal requirements will prevail to the extent required by law.

L.4 Contact Information

If you have questions about this Privacy Policy, our privacy practices, or the processing of your Personal Data, you can contact Hlight Games Studios using the privacy contact information provided in Section A.8 — Privacy Contact.

L.5 Effective Date

This Privacy Policy is effective as of the date indicated at the beginning or end of this document and remains applicable until replaced or updated. The date of the most recent update will be indicated in the Privacy Policy so that users can identify when the current version became effective.