Privacy Policy

Last Updated: August 9, 2026

Popseed Studio Limited ("Popseed Studio", "we", "us" or "our") is dedicated to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, and share your personal data (also known as personal information in certain jurisdictions) when you use our mobile game applications, websites, and other online products and services (collectively, the "Services"), including but not limited to TileCrush. The Services are operated by Popseed Studio Limited ("the Data Controller"), which is responsible for determining the means and purposes of processing your personal data.

Please review this Policy before using our Services. You can access our Privacy Policy at any time through the in-game settings. If you have any questions, please contact us using the details provided in Section 10.

1. What Personal Data We Collect

We will collect personal data in a lawful and fair manner: (a) personal data you provide directly to us; (b) personal data collected automatically when you use our Services; and (c) personal data we receive from third parties. We will only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

1.1 Personal Data You Provide to Us

  • Customer Service Data: We collect data that you provide directly to us when you contact customer support, give feedback, or participate in surveys or activities. This may include your contact email address, the content of your request, screenshots or attachments you choose to provide, and our communication records with you.

1.2 Personal Data We Collect Automatically

When you use our Services, we automatically collect certain data, which includes:

  • Identifiers Data: A unique, randomly generated user ID, device ID (e.g., IDFV, Android ID), IP-derived country and region information (raw IP addresses are not retained).
  • Device & Technical Data: Device model, device time zone, device country, system language, CPU information, storage capacity, screen information, network information, operating system information, and other technical data.
  • Gameplay Data: Data about your interaction with our Services, for example, game access time, usage logs, progress, achievements, play time and other gameplay information.

1.3 Personal Data We Receive from Third Parties

We may receive information about you from authorized third parties, specifically in the following scenarios:

1.4 About Sensitive Personal Data

Sensitive personal data refers to personal data that, once leaked or illegally used, will easily lead to infringement of human dignity or harm to the personal or property safety of a natural person. The scope of sensitive personal data may vary pursuant to different applicable data protection laws. Our Services are not designed to collect sensitive personal data. If we become aware that sensitive personal data has been inadvertently collected, we will take steps to delete it promptly.

2. How We Use Your Personal Data

We use your personal data for the following purposes:

Purpose Examples of Processing Activities Personal Data Categories Legal Basis
Service Provision & Maintenance To deliver games and ensure they function correctly on users' devices, provide updates, and fix bugs or crashes. Identifiers Data, Device & Technical Data, Gameplay Data Contractual necessity
Game Performance and User Experience Enhancement To improve game stability, security, and performance by analyzing how users interact with our games. To understand user trends, preferences, and interactions to refine and optimize our services. Identifiers Data, Device & Technical Data, Gameplay Data Legitimate interests
Customer Support and Inquiry Response To provide timely and accurate customer support, respond to inquiries, handle complaints, and improve services based on users' feedback. Customer Service Data Contractual necessity or Legitimate interests
Security Assurance To enhance game safety, detect and prevent fraud, verify identities, and protect user accounts. Identifiers Data, Gameplay Data Legitimate interests

Where we rely on legitimate interests, we have assessed that our processing is necessary for our legitimate business purposes and does not override your fundamental rights and freedoms. These interests include improving service quality, maintaining security, preventing fraud, understanding how our Services are used, and responding to user inquiries. You may object to such processing where required by applicable law.

3. How We Share Your Personal Data

We do not disclose your personal data to third parties without a valid legal basis. Such processing is justified on the basis of your consent, the necessity for the performance of a contract with you, compliance with a legal obligation, or the necessity for the purposes of our legitimate interests. We may share your personal data with the following categories of third parties:

  • Our affiliates. We may share your personal data with companies within our corporate family where necessary for the purposes set out in this Policy, and we ensure they are contractually bound. For international data transfers, we ensure an adequate level of data protection by implementing appropriate legal mechanisms, such as the Standard Contractual Clauses.
  • Technical service providers. We engage the following third-party service providers (Data Processors) to perform functions on our behalf in delivering our Services. We enter into data processing agreements with these providers that contractually obligate them to protect your data and process it only according to our instructions:
    • Analytics: Google Firebase Analytics provided by Google LLC (privacy policy).
    • Crash/error monitoring: Firebase Crashlytics provided by Google LLC (privacy policy).

In addition, we may disclose your personal data in the following cases:

  • In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business or assets, your personal data may be transferred as part of that transaction. Where required by applicable law, we will provide notice before your personal data becomes subject to a different privacy policy.
  • Where required to do so by applicable law, regulation, legal process, or enforceable governmental request, or where we believe disclosure is necessary to protect our rights, investigate fraud, enforce our Terms, or protect the safety of users or others.

4. International Transfer of Data

Your personal data may be processed by our service providers in countries outside your country of residence. We rely on Google Firebase for analytics and crash reporting, and data processed through Firebase is handled in accordance with Google's data processing practices and location policies.

Where the transfer of your personal data to a recipient located in a foreign country constitutes an international or cross-border transfer under applicable law, we rely on approved legal transfer mechanisms and implement appropriate safeguards to protect your data, such as the Standard Contractual Clauses approved by the European Commission.

5. Data Security and Data Retention

We are committed to keeping your personal data safe. We take reasonable and appropriate administrative, technical, organizational, and physical security and risk management measures in accordance with applicable laws to ensure that your personal data is adequately protected against accidental or unlawful destruction, damage, loss or alteration, unauthorized or unlawful access, disclosure or misuse, and all other unlawful forms of processing of your personal data in our possession.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes set out in this Policy. We will either delete or anonymize your personal data when it is no longer required to satisfy the purposes set out in this Policy unless otherwise specified by applicable laws.

6. Your Legal Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you.
  • Right of Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request that we delete your personal data, subject to certain exceptions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
  • Right to Data Portability: You have the right to request a copy of your personal data in a structured, machine-readable format, and to transmit that data to another controller.
  • Right to Object: You have the right to object to our processing of your personal data based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent: Where we rely on consent as the legal basis for processing, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to Opt-Out of Sale or Sharing: If you are a resident of California or other applicable U.S. states, you have the right to opt-out of the "sale" or "sharing" of your personal data for cross-context behavioral advertising. You can exercise this right by clicking the "Do Not Sell or Share My Personal Information" link on our Privacy Policy page, or by contacting us at support@popseedstudio.net.

How to Exercise Your Rights:

You can exercise these rights by contacting us at support@popseedstudio.net with your request. Please include sufficient information to verify your identity.

We will respond to your request within 30 days of receipt. If we require more time, we will inform you of the reason and extension period within the initial 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. For EEA/UK residents, you can contact your local Data Protection Authority. For Hong Kong residents, you can contact the Office of the Privacy Commissioner for Personal Data.

7. Children's Privacy

Our Services are not intended for children. If you are a minor (defined as being under the age of 16 in the European Union and the United Kingdom, under the age of 13 in the United States, or under the minimum legal age required to consent to data processing in your jurisdiction), you must not provide any personal information to us.

We do not knowingly collect personal data from children as defined above. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at support@popseedstudio.net. If we become aware that we have collected personal data from a child without the required consent, we will take steps to delete such information as soon as possible.

8. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Policy on our website https://www.popseedstudio.net/ and updating the "Last Updated" date at the top of this Policy.

Your continued use of the Services after the changes take effect constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications that are not owned or controlled by us. This Privacy Policy does not apply to the practices of those third parties, and we are not responsible for their content or privacy practices. We recommend that you review the privacy policies of any third-party websites or services you visit.

Additionally, our Services integrate with third-party SDKs and APIs (such as advertising networks, analytics tools, and attribution platforms). These third parties may collect personal data as independent controllers. We encourage you to review their privacy policies to understand how they process your data.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us: