Privacy Policy

1. Categories of Information

The information we may collect is described below. It includes information you elect to provide and certain information that may be obtained automatically during use of the Services.

1.1 Information Supplied by You

You may voluntarily provide information when communicating with us, including:

• Contact information, such as the email address you supply when sending feedback or getting in touch with us.
• The communications themselves, including messages in which you request assistance or support.

You decide whether to provide this information. Its use is limited to answering your inquiries or improving the Services; providing it is voluntary. You do not need to create an account in order to use the Services.

1.2 Automatically Obtained Information

Certain information may be collected automatically while you use the Services. This may include the following categories:

• Details of your device, including its type and model, the operating system it runs, and its language preferences.
• The application version in use, together with basic information about how the application is used.
• Your IP address, which is used for security, analytical purposes, and compliance with regional requirements.
• An advertising identifier, namely the Google Advertising ID for Android or IDFA for iOS, used for analytics, attribution of advertising, and prevention of fraud.

You may reset an advertising identifier or opt out of advertising personalization through the relevant device controls:

• On Android, open Settings, then Google, then Ads, and select the option to reset the advertising ID or opt out of Ads Personalization.
• On iOS, open Settings, then Privacy & Security, then Tracking, and switch off "Allow Apps to Request to Track."

1.3 External Services and Software Development Kits

Our application may incorporate third-party services or software development kits, also known as SDKs, to support operation and improvement of the Services. The following are examples of the types that may be used, rather than an exhaustive list:

• Analytics SDKs: tools used to observe application performance and usage patterns, and to report crashes.
• Advertising SDKs: tools that display advertisements and measure how those advertisements perform.
• Attribution SDKs: tools used to evaluate the effectiveness of marketing campaigns.
• Customer support SDKs: tools that help manage feedback from users and requests for assistance.

In providing, improving, and analyzing the Services, these third-party tools may obtain information such as device details, usage records, and advertising identifiers. Each third-party service handles the information it collects under its own privacy policy.

We do not sell personal information about you. You can manage privacy preferences using the settings on your device, including the available option to decline personalized advertising.

1.4 Processing Grounds under the GDPR

Where applicable, our processing of personal information relies on the following grounds:

• Consent that you give, for example when you submit feedback or communicate with us by email.
• Our legitimate interests, including improving the Services and maintaining security, to the extent that applicable law permits reliance on those interests.

2. Purposes for Using Information

We handle personal information for legitimate purposes in connection with the Services. These purposes include:

• Making the Services available, operating them, and carrying out their maintenance.
• Improving application performance, the gameplay experience, and the features available to users.
• Answering questions and inquiries, and delivering customer support.
• Identifying, preventing, and addressing fraudulent activity, abuse, or access without authorization.
• Evaluating the effectiveness of advertising and measuring advertising attribution.
• Meeting obligations imposed by laws and regulations.

Personal information is not used by us to make automated decisions that have legal effects on individuals or consequences of a similarly significant nature.

3. Cookies and Comparable Technologies

The Services may use cookies and similar technologies. These may include:

• Functional cookies, which support the basic functions needed for the Services to work.
• Analytical cookies, which help us examine patterns of use and improve performance.

Non-essential cookies can be managed or disabled in your browser or device settings. If you disable cookies, some features of the Services may be affected. Continuing to use the Services signifies your consent to the cookie use explained in this policy.

4. Promotional Messages

To the extent allowed by law, we may send updates about the Services, announcements, or promotional messages. You can choose at any time to stop receiving non-essential promotional communications through either of these methods:

• Select the unsubscribe link included in an email.
• Get in touch with us directly using the contact details in this policy.

Choosing not to receive promotional messages does not affect delivery of essential communications relating to the Services.

5. Circumstances for Sharing Information

We do not sell your personal information. Disclosure of limited information may occur only in the circumstances described here:

• To trusted service providers and SDK partners that help us operate the Services and are subject to confidentiality obligations.
• Where disclosure is required by law, a legal process, or a request from a governmental authority.
• For protection of the rights, safety, and integrity of Fillmension Inc., people using the Services, or the public.

6. Retention Periods

We hold personal information only for the period needed to carry out the purposes stated in this policy. Information may be kept for longer where the law requires or permits an extended retention period.

Following deletion of an account or a request from a user, we will erase or anonymize the user's personal data within 30 days. The exception is information that the law requires us to retain.

7. Deleting Data

Registration of an account is not required by the Services. The Services also do not keep persistent user profiles that identify individual people.

Data Saved on Your Device

Game information held locally, such as your progress and settings, is automatically deleted when you uninstall the application. Uninstalling is sufficient for that local deletion; no further action is necessary. There is no separate in-app function for deleting data or an account.

Data Handled by Third Parties

Third-party SDKs, including analytics, attribution, or advertising providers, may process certain anonymous or aggregated information. Their respective privacy policies govern that processing.

Although we do not control these third parties' retention policies, we require them to observe the data-protection laws that apply to them.

Questions and Deletion Requests

If you have a question about data handling or want to exercise a privacy right available under relevant law, you can contact us at:

Email: [email protected]

We will handle your request within 30 days. Once deletion occurs, all of your game progress, Virtual Items, and associated personal information are permanently removed. Those deleted records and items cannot be recovered.

Some information may nevertheless need to be retained to meet a legal requirement. An example is a transaction record that must be kept for tax purposes.

8. Protecting Information

We apply reasonable safeguards of an administrative, technical, and organizational nature to protect personal information. These measures are intended to guard against unauthorized access, misuse, loss, and alteration.

No means of storing or transmitting information can be entirely secure, however. Accordingly, absolute security cannot be guaranteed by us.

9. Age Restriction — 18+

The Services are not aimed at anyone below 18 years of age. If the minimum age of digital consent in your country is higher than 18, that higher age applies. Anyone below the applicable threshold is prohibited from accessing or using the Services.

We do not knowingly obtain children's personal information, and we do not use children's personal information for behavioral or targeted advertising.

If you are a parent or legal guardian and believe your child has supplied personal information to us without your consent, notify us immediately. After verification, we will review and delete the information in accordance with the applicable legal requirements, including COPPA where applicable.

10. Transfers between Countries

Personal information may be sent to, stored in, and processed in the United States or another location in which our servers are situated.

For transfers originating in the European Economic Area (EEA), the United Kingdom, or Switzerland, the mechanisms on which we rely are:

• The European Commission's approved Standard Contractual Clauses (SCCs).
• Other lawful mechanisms for transferring data, as required under the applicable law.

The data-protection rules in a processing location may differ from those of the country where you live. Wherever processing takes place, we take steps to keep your information secure and to ensure that it is treated consistently with this policy.

11. Exercising Privacy Rights

The rights available to you depend on your place of residence and the laws that apply, such as the GDPR, CCPA, or CPRA. Depending on those requirements, you may be entitled to:

• Ask to access your personal data, have it corrected, or have it deleted.
• Obtain a copy of your data in a portable form.
• Object to certain processing or request restrictions on that processing.
• Revoke your consent at any time when consent is the basis for processing.
• Opt out of personal information being sold or shared under the CCPA/CPRA.

To exercise a right, send a verifiable request using the contact details provided below. Before processing a request, we may require verification of your identity.

Our response will be provided within 30 days after receipt of the request, or within the period required by applicable law.

12. Additional California Rights

Residents of California have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

The categories of personal information collected during the past 12 months are set out below:

We do not sell personal information in the conventional sense of a sale. Nevertheless, California law may treat the provision of data to advertising partners for targeted advertising as a "sale" or as "sharing."

You can opt out of such sale or sharing by either of the following means:

• Turn off personalized advertising in your device settings, as explained in Section 1.2.
• Send an email to [email protected] using the subject line "Do Not Sell or Share My Personal Information".

We will not treat you discriminatorily because you exercise rights provided by the CCPA or CPRA.

13. Do Not Track Preferences

A Do Not Track (DNT) option is available in some web browsers. At present, the Services do not respond to these signals. To manage your privacy preferences, use your device settings or contact us directly.

14. Updates to this Policy

We may revise this policy periodically. Its current version will always be available at:

Pumpkin Moon Fortune Privacy Policy

If you continue using the Services after a change takes effect, that continued use constitutes acceptance of the revised policy.

15. Contact Details

Please direct questions or concerns about this policy to:

Fillmension Inc. Email: [email protected]

Address: 400 S Colorado Blvd, Denver CO 80246