Privacy Policy

01Who we are

Marbles Rush (the "Game") is developed and published by XOIGAME ("we", "us"), based in Vietnam. This policy explains what data the Game collects, why we collect it, who we share it with, and what control you have.

It covers the Android and iOS versions of the Game distributed through Google Play and the Apple App Store. It does not cover websites, stores or apps operated by anyone else, even where we link to them.

For the purposes of the EU/UK General Data Protection Regulation, we are the data controller for the data described below. Where our advertising partners use that data for their own purposes, they act as independent controllers under their own policies, which are linked in section 4.

02Data we collect

Data you give us directly

None is required to play. The Game has no sign-up, no user profile and no in-game chat. The only way you give us data directly is by emailing our support address, in which case we receive your email address and whatever you write to us.

Data collected automatically for advertising

The Game includes advertising software (SDKs) supplied by the companies listed in section 4. When an ad is requested or shown, those SDKs collect:

• Advertising identifiers — the Android Advertising ID (AAID) or Apple Identifier for Advertisers (IDFA), and similar app- or vendor-scoped identifiers. These are resettable IDs assigned by your device, not your name.
• IP address, which is used to estimate approximate location at country or city level, and to detect fraud. We do not collect GPS or precise location.
• Device and app information — device model and manufacturer, operating system version, screen size, language, country, network type, and the version of the Game you are running.
• Ad interaction data — which ads were requested, shown, skipped, watched to completion or clicked, and coarse in-game context such as the moment an ad was triggered.
• Diagnostic data — crash reports and basic performance data generated by the advertising SDKs, used to diagnose faults.

Advertising SDKs may also read and write identifiers in your device's local storage, which serve a purpose similar to cookies on the web.

Data that stays on your device

Your progress, scores and settings are saved in the Game's local storage on your device. We do not upload them, and we cannot read them. Uninstalling the Game deletes them.

What we do not collect

The Game does not access your contacts, photos, files, camera, microphone, call logs, SMS, health data or precise location, and does not require you to grant any of those permissions.

03Why we use it

• To show ads and keep the Game free. Advertising is how the Game is funded.
• To measure ads and get paid. Counting impressions and clicks is what determines the revenue we receive.
• To prevent fraud and abuse, such as automated or faked ad impressions.
• To find and fix problems using crash and performance diagnostics.
• To comply with legal obligations and to respond to lawful requests.

If you are in the European Economic Area, the United Kingdom or Switzerland, our legal basis is your consent for personalised advertising and for the storage of and access to information on your device. You give or refuse that consent in the dialog shown when you first open the Game, and you may change your mind at any time as described in section 5. Where we rely on legitimate interests — non-personalised advertising, fraud prevention and crash diagnostics — we have weighed those interests against your rights, and you may object as described in section 10.

04Advertising partners

We share the data described in section 2 with Google, which supplies the advertising software in the Game, so that it can select, deliver and measure ads. Google handles that data as an independent controller under its own privacy policy.

AdMob runs an auction for each ad request. Third-party advertisers and demand partners bidding in that auction may receive the same categories of data listed in section 2, under Google's terms and their own privacy policies. We have no direct relationship with those bidders and we do not receive your data back from them.

We may also disclose data where we are legally required to, or to protect our rights, safety or property, or in connection with a merger or acquisition, in which case this policy will continue to apply to the transferred data until it is replaced.

05Your ad choices

You can stop the use of your data for personalised ads without losing access to the Game. You will still see ads, but they will be non-personalised — selected from context rather than from a profile.

In the Game

If you are in the EEA, the UK or Switzerland, the Game shows a consent dialog on first launch, provided by Google's User Messaging Platform. You can reopen it and change your answer from the settings screen inside the Game at any time.

On Android

Open Settings → Google → Ads, then turn on "Opt out of Ads Personalisation" or select "Delete advertising ID". Deleting the ID stops apps from receiving it altogether.

On iOS

Open Settings → Privacy & Security → Tracking and turn off "Allow Apps to Request to Track", or switch off tracking for the Game specifically. If you declined the App Tracking Transparency prompt, the Game does not receive your IDFA.

Industry opt-outs

You can also use the opt-out tools offered by each partner in section 4, and the industry programmes run by the Network Advertising Initiative and the Digital Advertising Alliance.

06Sharing and "selling" of personal information

We do not sell personal information for money. However, under the California Consumer Privacy Act as amended by the CPRA, and under similar laws in other US states, sharing an advertising identifier with ad networks for cross-context behavioural advertising can qualify as a "sale" or "share" of personal information.

To opt out, use the device controls in section 5, or email us at xoistudio@gmail.com with the subject line "Do Not Sell or Share". We do not discriminate against you for exercising this right — the Game behaves the same either way.

We do not knowingly sell or share the personal information of anyone under 16.

07How long data is kept

We do not operate servers for the Game and do not maintain our own database of player data. What we see are aggregated, non-identifying reports in our advertising dashboards.

Our advertising partners keep the data they collect for the periods stated in their own policies, which is typically a matter of months for identifiers and event data. Support emails are kept for as long as needed to resolve your issue and then deleted, normally within 24 months.

08International transfers

Our advertising partners are global companies and process data on servers in several countries, including the United States, which may not offer the same level of data protection as your own. Where required, those transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. Details are in each partner's privacy policy, linked in section 4.

09Children

The Game is not directed to children. It is intended for players aged 13 and over, or 16 and over in countries where that is the applicable age of digital consent. We do not knowingly collect personal information from children below those ages.

If you are a parent or guardian and believe your child has provided personal information through the Game, email xoistudio@gmail.com and we will take steps to have it deleted, including asking our advertising partners to delete data tied to the device's advertising ID.

10Your rights

Depending on where you live, you may have the right to access the personal data held about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, to withdraw consent at any time, and to opt out of targeted advertising and of the sale or sharing of your data.

Because the Game collects no account data, we usually cannot identify you from a request on our own. The fastest route is to use the device controls in section 5 and the partner tools in section 4, which act directly on the identifier involved. If you write to us at xoistudio@gmail.com, include your advertising ID and the approximate date and time you played, and we will pass the request to the relevant partner. We answer within 30 days.

If you are in the EEA or the UK and are unhappy with our response, you may lodge a complaint with your national data protection authority.

11Security

Data sent between the Game and our advertising partners travels over encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we keep the SDKs we ship up to date and we hold no player database of our own that could be breached.

12Changes to this policy

We update this policy when the Game changes or when the law requires it. The date at the top always shows the current version. If a change materially affects how your data is used, we will give notice inside the Game before it takes effect, and ask for fresh consent where consent is the basis for the processing.

13Contact