Privacy Policy
Ball Merge Master · Effective July 22nd, 2026
1. Key Definitions
- Application
- Ball Merge Master and related online services.
- Company
- The operator of the Application ("we", "us", "our").
- Personal Information
- Information that identifies or can reasonably be linked to you.
- Usage Data
- Information collected automatically when you interact with the App.
- Device
- Any phone, tablet, or computer used to access the App.
- Service Provider
- A third party that processes personal information on our behalf.
- Account
- Your in-app profile, progress, or session identity.
2. What We Collect
Our systems gather two kinds of information: data recorded automatically and data you choose to provide.
| Type | Examples | How Obtained |
|---|---|---|
| Usage Data | Ball merge progress, session length, crash logs | Automatic |
| Device Info | Model, OS, app version, screen size | Automatic |
| Identifiers | IP address, GAID, ANDROID_ID | Automatic |
| Ad IDs | GAID / IDFA (with permission) | Consent-based |
| PayPal Info | Email and name for withdrawals | You provide |
3. How We Use Your Data
- Operate the service — deliver ball-merge gameplay and sync progress
- Manage accounts — authentication, preferences, and support
- Process withdrawals — fulfill PayPal payouts and prevent fraud
- Communicate — respond to requests and send allowed service notices
- Improve & analyze — measure performance, campaigns, and stability
- Comply & transition — meet legal duties and support corporate changes
5. Data Security
We apply commercially reasonable safeguards, including TLS 1.2+ encryption in transit, role-based access controls, periodic security reviews, and contractual security obligations for processors. No method of transmission or storage is perfectly secure.
6. Third-Party Services & Ad Partners
Advertisements are served through AppLovin and its mediation partners.
May Be Shared
- Resettable advertising identifiers
- Device model, OS, screen size
- Session frequency and duration
- Ad impressions, clicks, conversions
- Country and language
Never Shared
- Email or phone number
- Account credentials
- Identity-linked merge progress
- Precise GPS location
- PayPal payout details
Partner Privacy Policies
7. App Permissions
Ball Merge Master requests only permissions needed for core features:
| Permission | Purpose |
|---|---|
INTERNET | Network access for gameplay, ads, and updates |
ACCESS_NETWORK_STATE | Detect connectivity to optimize performance |
ACCESS_WIFI_STATE | Confirm Wi-Fi status for stable sessions |
AD_ID | Access resettable advertising identifier |
VIBRATE | Haptic feedback during merges |
ACCESS_ADSERVICES_TOPICS | Privacy Sandbox Topics API |
ACCESS_ADSERVICES_ATTRIBUTION | Measure ad campaign attribution |
BIND_GET_INSTALL_REFERRER_SERVICE | Determine install source |
BIND_APPHUB_SERVICE | Optimize ad delivery |
ACCESS_ADSERVICES_AD_ID | Support latest ad-service APIs |
FOREGROUND_SERVICE | Maintain critical foreground tasks |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal broadcasts |
8. Analytics & Endpoints
Our backend at https://shsu.blockpzen.com supports gameplay sync, anonymized analytics, performance monitoring, and support operations.
- TLS 1.2+ on all transfers
- Role-based access for authorized staff only
- Data minimization at each processing stage
- Regular audits and vulnerability assessments
- Data Processing Agreements with processors
9. Your Privacy Rights
GDPR (EEA)
- Access
- Rectification
- Erasure
- Restrict Processing
- Object
CCPA / CPRA
- Right to Know
- Right to Delete
- Right to Opt-Out
- Non-Discrimination
VCDPA (Virginia)
- Access
- Correct
- Delete
- Portability
- Opt-Out
Email phamthanhbe7588@icloud.com to exercise any right.
10. Opting Out
Advertising Personalization
- Android: Settings → Google → Ads → Opt out of Ads Personalization
- iOS: Settings → Privacy & Security → Tracking → Allow Apps to Request to Track (off)
Sale / Sharing
Email phamthanhbe7588@icloud.com with subject "Do Not Sell My Personal Information".
11. Data Retention
We keep personal information only as long as needed for the purposes in this policy. Accounts inactive for 90 consecutive days trigger deletion of associated personal information. Anonymized usage metrics may be retained for analysis.
12. International Transfers
Data may be processed on servers outside your country. Transfers are protected with TLS encryption and contractual safeguards designed to provide equivalent protection.
13. Children's Privacy
The App is not directed to children under 13. We do not knowingly collect personal information from minors. Contact us to request prompt deletion if you believe a child provided information.
14. Disclosure Requirements
- Business transactions — data may transfer during mergers or acquisitions with notice where required
- Law enforcement — disclosure when compelled by valid legal process
- Safety — to protect rights, investigate abuse, or prevent harm
15. Third-Party Links
External sites linked from the App have their own policies. We are not responsible for third-party practices — review their notices before sharing information.
16. Data Breach Notification
In the event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours of becoming aware of the incident, where required by applicable law.
17. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
18. Changes to This Policy
- Updated versions are posted on this page with a revised effective date
- Material changes may be announced by email or in-app notice
- Continued use after changes constitutes acceptance
19. Contact Us
Questions or privacy requests:
Email: phamthanhbe7588@icloud.com
In-App: Settings → Help & Support
We respond within 48 hours.