This Privacy Policy explains how [[YOUR BUSINESS NAME]] ("we", "us", "our") collects, uses, shares, and protects information when you play Mega Rabbit (the "Game"), distributed through Google Play, and when you visit mega-rabbit.com (the "Site").

By downloading, installing, or playing the Game, you agree to this Policy. If you do not agree, please do not use the Game.

1. Who we are

The Game is developed and published by:

Developer[[YOUR BUSINESS NAME — must match the developer name shown on your Google Play store listing]]
Address612 Ilsan-ro, Ilsanseo-gu, Goyang-si, Gyeonggi-do 10372, Republic of Korea
Privacy contact[[privacy@mega-rabbit.com]]
Privacy officer[[NAME OF PERSON RESPONSIBLE]]

We are the data controller for the personal data described in this Policy.

2. Information we collect

2.1 Information you give us

2.2 Information collected automatically

2.3 Purchase information

In-app purchases are processed by Google Play, not by us. We receive a purchase token, order ID, product ID, and purchase status so we can deliver your item and handle support requests.

We never receive or store your payment card number, bank details, or billing address. Those are handled entirely by Google. See Google's Privacy Policy.

3. How we use information

For players in the European Economic Area, the United Kingdom, and Switzerland, the table below also states our legal basis under the GDPR.

PurposeData usedLegal basis (GDPR)
Operate the Game, save and sync your progressAccount identifier, game and save data, device infoPerformance of a contract
Fix bugs, diagnose crashes, improve stabilityCrash logs, device and app infoLegitimate interests
Understand how the Game is played and improve itUsage data, pseudonymous identifiersLegitimate interests
Deliver in-app purchases and provide supportPurchase token, order ID, account identifierPerformance of a contract
Show advertisingAdvertising ID, device info, IP-derived coarse locationConsent (EEA/UK) / Legitimate interests (elsewhere)
Detect cheating, fraud, and abuse; enforce our TermsDevice info, usage data, account identifierLegitimate interests
Meet legal, tax, and accounting obligationsTransaction recordsLegal obligation

We do not sell your personal data, and we do not use your data to build advertising profiles beyond what the advertising services described below do.

4. Advertising

The Game displays advertising through Google AdMob. To serve ads, AdMob may access your device's Google Advertising ID, IP address, device information, and information about your interaction with ads.

4.1 If you are in the EEA, the UK, or Switzerland

Before any personalized advertising or non-essential data processing takes place, we show a consent message using Google's User Messaging Platform (UMP). You can choose whether to allow personalized ads, and you can change your choice at any time from the Game's Settings → Privacy options screen.

4.2 If you are in California or another US state with privacy legislation

Sharing your advertising identifier with ad partners for personalized advertising may be treated as a "sale" or "sharing" of personal information under those laws. You can opt out at any time via Settings → Privacy options in the Game, or by enabling the device-level setting described below.

4.3 Controlling advertising on your device

Opting out of personalized ads does not remove ads from the Game — you will simply see less relevant ones.

5. Analytics and crash reporting

We use Google Analytics for Firebase and Firebase Crashlytics to understand how the Game is used and to find and fix problems. These tools collect pseudonymous identifiers and the device, usage, and crash data described in section 2.2. They do not tell us your name, email address, or any directly identifying information.

6. Who we share information with

We share personal data only with the service providers listed below, and only as needed to run the Game.

RecipientPurposeTheir privacy policy
Google AdMobServing advertisingpolicies.google.com/technologies/ads
Google Firebase (Analytics, Crashlytics)Analytics, crash reporting, cloud savefirebase.google.com/support/privacy
Google Play BillingProcessing in-app purchasespolicies.google.com/privacy

We may also disclose information where we are legally required to do so, to enforce our Terms of Service, to protect the rights or safety of players or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you before your data becomes subject to a different privacy policy).

7. International data transfers

We are based in the Republic of Korea, and our service providers operate globally. Your data may therefore be processed outside your country of residence, including in the United States.

Where data is transferred out of the EEA, the UK, or Switzerland, the transfer is protected by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism relied on by the relevant provider. The Republic of Korea has received an adequacy decision from the European Commission.

8. How long we keep data

DataRetention period
Account and save dataUntil you delete your account, or after 24 months of inactivity
Analytics and usage dataUp to 14 months (Firebase default retention)
Crash logsUp to 90 days
Support emails2 years from the last message
Purchase and transaction records5 years, as required by Korean commercial and tax law

9. Account and data deletion

You can delete your account and associated data at any time:

We will confirm your request and complete the deletion within 30 days.

What is deleted: your account identifier, display name, save data, game progress, purchase history linked to your account, and support correspondence.

What we may keep: transaction records that we are legally required to retain for tax and commerce purposes (5 years), and aggregated or anonymized statistics that can no longer be linked to you.

Deleting your account does not automatically refund unused in-app purchases, and progress cannot be restored afterwards. Please make sure this is what you want.

10. Your privacy rights

10.1 Everyone

You may ask us to access, correct, or delete your personal data, or to stop processing it, by contacting us at [[privacy@mega-rabbit.com]]. We respond within 30 days and will not charge you or treat you differently for exercising these rights.

10.2 EEA, UK, and Switzerland (GDPR)

You have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing (including profiling for advertising); receive your data in a portable format; and withdraw consent at any time without affecting processing carried out before withdrawal.

You also have the right to lodge a complaint with your local supervisory authority. A list is available at edpb.europa.eu.

10.3 California (CCPA/CPRA)

You have the right to know what personal information we collect and how it is used and shared; to request deletion or correction; to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising; and to non-discrimination for exercising these rights.

In the preceding 12 months we collected the categories described in section 2 (identifiers, commercial information, internet/app activity, and coarse geolocation) and shared identifiers and app activity with advertising partners as described in section 4. We do not sell personal information for money, and we do not knowingly sell or share the personal information of minors under 16.

10.4 Republic of Korea (PIPA)

Under the Personal Information Protection Act you may request access to, correction of, suspension of processing of, or deletion of your personal information. You may also file a dispute with the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972) or report to the Personal Information Protection Commission (privacy.go.kr, 182).

11. Children

The Game is intended for players aged 14 and over and is not directed to children. We do not knowingly collect personal data from children under 14 (or under the minimum age required for consent in your country, where that age is higher).

If we learn that we have collected personal data from a child below the applicable age without verified parental consent, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at [[privacy@mega-rabbit.com]].

12. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), access controls limiting who on our side can reach player data, and reliance on Google Cloud infrastructure for storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you in the Game before the changes take effect. Continuing to play after the changes take effect means you accept the updated Policy.

14. Contact us

Questions, requests, or complaints about this Policy or your personal data:

Email[[privacy@mega-rabbit.com]]
Privacy officer[[NAME]]
Postal address[[YOUR BUSINESS NAME]]
612 Ilsan-ro, Ilsanseo-gu
Goyang-si, Gyeonggi-do 10372
Republic of Korea