Epic Puzzles Privacy Policy

The owner and data controller of this Game is:

• Company: Epic Labs Limited
• Address: Dar es Salaam, United Republic of Tanzania
• Email: hello@epiclabs.app

As the Data Controller, Epic Labs is responsible for determining the purposes and means of processing your personal data collected through Epic Puzzles and other services. We ensure that all processing of personal data is done in compliance with applicable privacy laws, including but not limited to:

• GDPR – EU General Data Protection Regulation
• CCPA – California Consumer Privacy Act
• DAAC – Canada’s Digital Privacy Laws (e.g., PIPEDA)
• DPAI – Japan’s Act on the Protection of Personal Information (APPI)

For any questions regarding your personal data or this Privacy Policy, you may contact us directly at the email above. We are committed to responding promptly and transparently.

A. Account Information
When you sign in using Google, Facebook, or Apple, we may receive:

• Your name
• Email address
• Profile picture (if available)
• Unique authentication ID

B. Automatically Collected Data by us or third-party services

• Device model and operating system
• IP address and approximate country/region
• Advertising identifiers (Google Advertising ID / IDFA)
• Gameplay progress and leaderboard scores
• Session duration and app interactions
• In-app purchase records
• Crash logs and diagnostics

C. Push Notifications
If enabled, we collect device push tokens to send gameplay-related updates such as rewards, events, or feature announcements. We do not collect sensitive personal data such as financial card details, passwords, or precise location data.

Overview

We process your personal data only when we have a valid legal basis under applicable privacy laws, including the General Data Protection Regulation (GDPR) and other relevant regulations.

Types of Legal Basis

Depending on the type of data and the purpose, our legal basis for processing may include:

• Consent: When you provide explicit permission for a specific purpose, such as enabling push notifications or accepting cookies.
• Performance of a Contract: When processing is necessary to provide you with the Game’s features, deliver purchased items, or maintain your account.
• Legal Obligation: When we must process your data to comply with applicable laws, regulations, or governmental requests.
• Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving game performance, analytics, fraud prevention, and security, provided your rights are not overridden.

Special Considerations

For certain categories of personal data (e.g., sensitive data), additional protections and explicit consent may be required. We do not knowingly collect sensitive personal data without your clear consent.

How This Applies to You

By using the Game or related services, you acknowledge and agree that we may process your data according to the legal bases listed above. You have the right to withdraw consent at any time for processing based on consent, without affecting the legality of prior processing.

Epic Puzzles is a free-to-play game supported by in-app advertising and optional in-app purchases.

To display advertisements, we use third-party advertising partners including:

• Google AdMob (operated by Google LLC)
• Meta Audience Network (operated by Meta Platforms, Inc.)

These advertising partners may collect and process certain information automatically when you use the Game, including but not limited to:

• Advertising identifiers (such as Google Advertising ID or Apple IDFA)
• Device information (model, OS version, language settings)
• IP address and approximate location (country/region level)
• App interaction data (ad views, clicks, engagement)
• Diagnostic and performance data

This data may be used to:

• Deliver contextual or personalized advertisements
• Measure ad performance
• Prevent fraud and abuse
• Improve advertising relevance

Independent Third-Party Processing

Please note that these advertising partners act as independent data controllers for certain processing activities. This means they may process personal data in accordance with their own privacy policies and internal data handling practices.

We do not control how these third parties process your information once it is collected through their services.

You are encouraged to review their privacy policies for detailed information about their data practices:

• Google Privacy Policy
• Google AdMob Policy Information
• Meta Privacy Policy

Managing Ad Preferences

You may manage or limit personalized advertising through your device settings:

• iOS: Settings → Privacy & Security → Tracking
• Android: Settings → Privacy → Ads

You may also opt out of certain interest-based advertising programs through:

• https://www.aboutads.info/choices
• https://www.youronlinechoices.eu

Please note that opting out does not remove ads entirely, but may make them less personalized.

Purpose of Analytics

We collect analytics data to understand how players use the Game, improve performance, enhance user experience, and guide product development. Analytics help us identify trends, troubleshoot issues, and optimize gameplay.

• Monitor in-game behavior (e.g., level completion, feature usage, session length)
• Measure player engagement and retention
• Identify and fix errors or crashes
• Improve the design and functionality of future updates

Tools We Use

To provide these insights, we use third-party services, including:

• Firebase Analytics: Operated by Google LLC
• Crashlytics: Operated by Google LLC, for crash reporting

These services may automatically collect certain information from your device, such as:

• Device type, model, and operating system version
• Unique device identifiers
• IP address and approximate location (country/region level)
• App usage statistics (e.g., sessions, screens viewed, feature interactions)
• Error and crash reports, including stack traces

Data Usage

Analytics and crash data are used exclusively to:

• Analyze game performance and user engagement
• Identify and resolve bugs, errors, or crashes
• Enhance gameplay experience and app stability
• Guide decisions on updates, features, and content

Independent Third-Party Processing

Our analytics providers act as independent data controllers for the data they collect. We do not control their data processing practices beyond what is necessary to provide the Game. You are encouraged to review their privacy policies:

• Firebase Privacy Policy: https://policies.google.com/privacy
• Crashlytics Privacy: https://firebase.google.com/support/privacy

User Control

You may limit or opt-out of certain analytics and crash reporting features through your device settings:

• iOS: Settings → Privacy → Analytics & Improvements
• Android: Settings → Google → Usage & Diagnostics

Please note that opting out may limit our ability to detect issues and improve the Game experience.

Overview

Epic Puzzles offers optional in-app purchases (“IAPs”) that allow you to unlock additional features, virtual items, or game content. These purchases are entirely voluntary and do not affect your ability to play the free portions of the Game.

Purchase Process

All in-app purchases are processed through the app stores and payment platforms associated with your device, such as:

• Apple App Store (Apple Inc.)
• Google Play Store (Google LLC)
• Other platform-specific payment providers, if applicable

The Game does not collect or store your payment card details directly. Payment information is handled securely by the platform provider in accordance with their privacy policies.

Data Collected During IAPs

When you make an in-app purchase, the following information may be collected and processed by the platform provider:

• Account information associated with your app store account
• Transaction details (e.g., item purchased, purchase date, amount)
• Device information necessary to process the transaction

Use of Purchase Data

Purchase-related data is used to:

• Deliver the purchased items or features
• Confirm and manage transactions
• Prevent fraud and unauthorized purchases
• Provide support for purchase-related issues

Third-Party Processing

Platform providers act as independent data controllers for the payment data. We do not control their data handling practices beyond what is necessary to deliver the purchased content. You are encouraged to review their privacy and payment policies:

• Apple Privacy Policy: https://www.apple.com/legal/privacy/
• Google Privacy Policy: https://policies.google.com/privacy
• Google Play Billing Policy: https://support.google.com/googleplay/answer/2476088

User Control

You can manage or restrict in-app purchases through your device settings:

• iOS: Settings → Screen Time → Content & Privacy Restrictions → iTunes & App Store Purchases → In-App Purchases
• Android: Google Play Store → Settings → User Controls → Require Authentication for Purchases

Please note that restricting purchases may prevent the acquisition of paid content but will not remove advertisements or free features.

Data Retention

We retain your personal data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

• Accounts created via Google, Facebook, or Apple Sign-In are retained until you delete the account or request data deletion.
• Push notification preferences and device identifiers are stored as long as you use the Game, unless you opt out.
• Data collected for analytics or advertising purposes may be retained for a limited period in accordance with our third-party partners’ policies.

Data Security

Epic Labs implements industry-standard technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

• Encryption: Sensitive information is encrypted in transit (HTTPS) and, where appropriate, at rest.
• Access Control: Only authorized personnel with a legitimate need may access your personal data.
• Regular Audits: Systems and processes are periodically reviewed to maintain security standards.
• Third-Party Security: We require our partners (e.g., Firebase, AdMob) to maintain appropriate security measures for data processing.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, Epic Labs will promptly notify you in accordance with applicable law and take all reasonable steps to mitigate potential harm.

User Responsibility

While we take security seriously, you are responsible for keeping your login credentials secure and notifying us immediately if you suspect unauthorized access to your account.

Your privacy rights may vary depending on your location and the applicable privacy regulations. The following overview includes rights under major frameworks such as:

• EU General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Digital Privacy Act / DAAC (Canada)
• Act on the Protection of Personal Information (DPAI / Japan)
• EU online advertising opt-out: YourOnlineChoices

Access and Portability

You may request access to your personal data we hold and obtain a copy in a structured, commonly used, machine-readable format (GDPR Articles 15 & 20, CCPA Section 1798.100-110).

Rectification / Correction

You can request corrections to inaccurate or incomplete personal data (GDPR Article 16, CCPA Section 1798.105).

Erasure / Right to be Forgotten

You may request deletion of personal data where it is no longer necessary for the purposes collected, or if consent is withdrawn (GDPR Article 17, CCPA Section 1798.105).

Restriction of Processing

You can request limits on processing your data in certain situations, such as when contesting accuracy or legality of processing (GDPR Article 18).

Objection

You have the right to object to certain types of processing, including direct marketing and processing based on legitimate interests (GDPR Article 21).

Withdraw Consent

Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing (GDPR Article 7).

Opt-Out of Interest-Based Advertising

You can manage or limit personalized advertising via:

• Device settings: iOS Settings → Privacy & Security → Tracking | Android Settings → Privacy → Ads
• Industry programs: AboutAds | YourOnlineChoices (EU)

Note: opting out may reduce personalization but does not remove ads entirely.

Complaint to Supervisory Authority

You may lodge complaints with relevant authorities if you believe your data has been processed in violation of applicable laws:

• EU: Supervisory Authority in your member state (GDPR)
• California: California Attorney General (CCPA)
• Canada: Office of the Privacy Commissioner (DAAC)
• Japan: Personal Information Protection Commission (DPAI)

How to Exercise Your Rights

To exercise any of these rights, contact us at admin@epiclabs.app. We will respond in accordance with applicable laws and timelines.

Protecting the privacy of children is a top priority. Epic Puzzles and Epic Labs products are not intended for children under the age of 13 (or the minimum age required by local law, such as 16 in the EU). We do not knowingly collect personal data from children without parental consent.

Collection

We may collect limited information from children only as necessary to provide the services, and always with parental consent where required. Personal information such as name, email, or account login should only be provided by a parent or legal guardian for children under applicable age limits.

Parental Consent

Where applicable (GDPR Article 8, CCPA Section 1798.120, DAAC Canada), parental or guardian consent is required for collection or use of personal information of minors. Parents can review, manage, or request deletion of their child’s personal information at any time by contacting us at admin@epiclabs.app.

Third-Party Services and Ads

Some games may display advertisements or include third-party services. These partners are required to comply with applicable children’s privacy regulations, and we advise parents to monitor in-app activity. We do not knowingly allow targeted advertising based on children’s personal data.

Rights of Children

Children (through their parents/guardians) have the right to access, correct, or delete personal data collected about them and to withdraw consent where applicable.

Safety & Compliance

We comply with international regulations including GDPR (EU), CCPA (California), DAAC (Canada), and DPAI (Japan) in relation to children’s data. Our products are designed to minimize data collection and to ensure safety and privacy for minors.

Epic Labs reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, regulatory requirements, or the functionality of our games and apps. Any updates will be posted on this page with the "Last Updated" date at the top.

Notification of Changes

We may notify users of significant changes to the policy through in-app notifications or email where applicable. We encourage users to review this Privacy Policy periodically to stay informed about how we are protecting personal information.

Regulatory Compliance

This Privacy Policy is designed to comply with global data protection laws, including:

• General Data Protection Regulation (GDPR) – European Union
• California Consumer Privacy Act (CCPA) – California, USA
• Data Protection Act / DAAC – Canada
• Data Protection and Privacy Act (DPAI) – Japan
• YourOnlineChoices – EU Digital Advertising Preferences

Questions & Contact

If you have any questions regarding this Privacy Policy, wish to exercise your rights, or need assistance with your personal data, please contact us at:
📧 Email: admin@epiclabs.app
We will respond promptly and in accordance with applicable laws.

For clarity, the following definitions apply throughout this Privacy Policy:

• Personal Data: Any information relating to an identified or identifiable individual, such as name, email, account ID, device identifiers, IP address, or usage behavior.
• Usage Data: Data generated automatically through use of the Game, including session times, interactions, crashes, in-app activity, and analytics information.
• User / You: Any individual who accesses or uses the Game, including those who create an account or play as a guest.
• Data Subject: An individual whose personal data is collected, processed, or stored by Epic Labs.
• Data Controller (Owner): Epic Labs is the data controller responsible for determining the purposes and means of processing your personal data.
• Data Processor: Any third-party service provider (e.g., Firebase, AdMob, Crashlytics) that processes personal data on behalf of Epic Labs.
• This Application / Service: Refers to Epic Puzzles and any other mobile games or related services offered by Epic Labs.
• EU: European Union, applicable for GDPR compliance.
• Cookie: Small data files stored on your device by the Game or third-party services to track usage, preferences, or authentication.
• Tracker: Any software or script used to collect analytics, advertising, or behavioral data (e.g., Firebase Analytics, Google AdMob, Meta Audience Network).

Legal References and Compliance:

• GDPR – EU General Data Protection Regulation (Regulation (EU) 2016/679)
• CCPA – California Consumer Privacy Act, California, USA
• DAAC – Canada’s Digital Privacy Laws (e.g., PIPEDA)
• DPAI – Japan’s Act on the Protection of Personal Information (APPI)
• YourOnlineChoices – EU self-regulatory initiative for online behavioral advertising

This section ensures that all terms used in this Privacy Policy are legally clear and consistent with international privacy standards.