PRIVACY POLICY

Effective Date: 2026-03-18
Last Updated: 2026-03-18

Herdoza Studio (“Herdoza Studio”, “we”, “us”, or “our”) provides websites, mobile games, and mobile applications (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal data when you use our Services.

Where required by applicable law, we use consent management mechanisms before enabling certain non-essential advertising, personalization, attribution, analytics, or similar processing performed through software development kits (“SDKs”), cookies, local storage, device identifiers, and related technologies. In other cases, we process personal data only on another valid legal basis described in this Privacy Policy.

Please read this Privacy Policy carefully. If you do not agree with it, please do not use the Services.

1. Who We Are

Herdoza Studio is the developer and operator of the Services.

Controller:
Herdoza Studio

Privacy contact:

CONTACT WITH US

See more

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• our mobile applications and games;
• our website and related pages;
• update notifications, support requests, contact forms, and similar communications that we provide.

This Privacy Policy does not apply to third-party websites, app stores, social networks, advertising platforms, mediation platforms, analytics platforms, or other third-party services that may be linked from or integrated into our Services. Those third parties may process personal data under their own privacy policies and terms.

3. How We Obtain and Manage Consent

When required by applicable law, we present a consent management interface when you first open the app, and we may request your choices again if your consent expires, becomes invalid, or if we materially change our data practices.

We use the consent management interface to manage advertising personalization choices and certain third-party SDK settings where required by applicable law.

Depending on the specific app version, technical implementation, and service involved, some limited technical functions, settings, or controls may initialize before the consent flow is completed, including functions related to app startup, app instance or installation management, remote configuration delivery, security, diagnostics, crash reporting controls, and similar operational support functions. Where required by applicable law, we use consent signals to manage how non-essential advertising, attribution, analytics, and related SDK functions operate.

You may review, withdraw, or change your privacy choices at any time through the in-app Privacy Settings or similar in-app privacy options, where available, or by contacting us using the contact details provided in this Privacy Policy. Withdrawal of consent does not affect processing that took place before the withdrawal.

We may keep a record of your privacy choices, consent status, notice version, timestamp, region/country, and related compliance logs for accountability, security, legal compliance, and audit purposes.

4. Personal Data We May Collect

The personal data processed through the Services depends on the app, app version, distribution store, country or region, device settings, SDK integrations, mediation setup, enabled features, and your privacy choices.

4.1 Data you provide directly

We may collect personal data that you choose to provide to us, such as:

• your email address if you voluntarily submit it through a Google Form, contact form, sign-up form, or similar form to receive updates, announcements, replies, or support;
• the content of your message if you contact us;
• any information you include in a support request, bug report, or privacy request.

4.2 Data collected automatically through the Services and integrated technologies

We and our service providers may automatically collect technical and usage data, including:

• device type, device model, operating system, OS version, app version, language, time zone, country or region;
• IP address, approximate location inferred from IP or regional settings, network type, carrier, connection status, and diagnostic data;
• advertising identifiers, device identifiers, app instance identifiers, Firebase Installation ID, platform-specific IDs, or similar identifiers;
• app events, session data, interaction events, screen views, ad impressions, clicks, attribution or referrer data, campaign-related data, and anti-fraud signals;
• crash data, performance data, and diagnostic information;
• cookies, local storage, SDK storage, and similar technologies when you use our website or app features that rely on them.

In limited cases, if a specific feature requests location permission and you choose to grant it, we may process location-related data according to that feature and the permissions you grant.

4.3 Data we may receive from partners

We may also receive technical, attribution, campaign-related, anti-fraud, analytics, or similar data from third-party partners, such as advertising networks, mediation platforms, analytics providers, attribution providers, app stores, payment platforms, and infrastructure providers, depending on the specific Service and app version.

5. How We Use Personal Data

We may use personal data for the following purposes:

• to provide, operate, maintain, secure, and improve the Services;
• to enable app features you request;
• to personalize content or app functionality, where applicable;
• to measure app performance, user flows, attribution, campaign effectiveness, return on ad spend, anti-fraud indicators, and related analytics;
• to conduct analytics, diagnostics, troubleshooting, debugging, quality assurance, and service improvement;
• to run, mediate, optimize, measure, and limit advertising, including personalized advertising where permitted and, where required, consented to;
• to process update subscriptions, replies, and support communications that you request;
• to comply with legal obligations, enforce agreements, prevent abuse, defend legal claims, and protect users, us, and third parties;
• to maintain records of privacy choices, consent, and compliance actions.

6. Legal Bases for Processing

The legal basis may vary depending on the specific Service, app version, feature, territory, and applicable law.

Depending on the context, jurisdiction, and purpose, we rely on one or more of the following legal bases:

• Consent, for example where required for personalized advertising, attribution, analytics, and similar non-essential processing;
• Legitimate interests, for example to secure, maintain, troubleshoot, improve, defend, and operate the Services, where those interests are not overridden by your rights;
• Performance of a contract or steps taken at your request, where processing is necessary to provide a feature, communication, or service you request;
• Compliance with legal obligations, where we must process personal data to comply with applicable law.

If we rely on consent, you may withdraw it at any time as described in this Privacy Policy.

7. Advertising, Analytics, Attribution, and Other SDK Providers

Depending on the specific app, app version, distribution store, territory, mediation setup, enabled features, and your privacy choices, we may use cookies, local storage, mobile device identifiers, analytics tools, attribution tools, advertising technologies, APIs, and third-party SDKs.

These may include, for example:

• Google AdMob;
• Google Firebase and related Google services;
• SolarEngine;
• Unity;
• Meta;
• AppLovin;
• Yandex;
• Mintegral;
• Liftoff;
• InMobi;
• BidMachine;
• Chartboost;
• ironSource;
• Google Analytics;
• Google Analytics Advertising Features;
• Weplan SDK;
• Anyip SDK;
• Complementics SDK;
• Tenjin SDK;
• Sightengine AI;
• and other mediation, bidding, analytics, infrastructure, AI, or support providers actually integrated into the relevant app version.

Some providers may be present only in certain current or legacy versions of an app that may still be available in one or more app stores. The third-party providers used may therefore vary depending on the version of the app you install or use.

Depending on the service used and your privacy choices, these providers may receive or process technical data such as device identifiers, advertising identifiers, app instance identifiers, IP address, app events, crash information, diagnostic information, approximate location, ad interaction data, attribution/referrer data, and related technical data.

Depending on the provider and the service, a third party may act:

• as a processor or service provider on our behalf; or
• as an independent controller under its own privacy policy.

We recommend that you also review the privacy information of the relevant providers used in the specific Service you are using.

8. SolarEngine

We use SolarEngine as a service provider for mobile attribution, campaign measurement, return on ad spend analysis, user behavior analysis, A/B testing, anti-fraud support, analytics, and related optimization services.

On our behalf, SolarEngine may process information such as advertising identifiers, device identifiers, app instance identifiers, IP address, app events, attribution/referrer information, app version, device model, operating system information, language, time zone, network status, anti-fraud indicators, and other technical data necessary to provide these services.

Where required by law, we provide notice to users regarding SolarEngine’s processing and use consent management mechanisms in relation to SolarEngine processing where applicable.

SolarEngine may process and transfer personal data in accordance with our instructions, the features we enable, applicable law, and its own privacy documentation.

9. Firebase and Google Services

We may use Google Firebase and related Google services for app analytics, diagnostics, crash reporting, messaging, performance, installation or app instance management, remote configuration, and related functions, depending on the Service and app version.

Depending on the specific implementation of a Service, certain Firebase-related functions may initialize when the app starts or before the consent flow is completed, including analytics collection settings, crash reporting controls, app instance management, and remote configuration functions. Other advertising-related or non-essential functions may be managed based on the user’s privacy choices where required by applicable law.

If you voluntarily provide your email through a Google Form or another Google-hosted form to receive updates or communications, that form and the resulting submission may also be processed through Google’s infrastructure subject to Google’s own terms and privacy practices.

10. Anyip SDK

Some versions of our apps may include Anyip SDK.

In our implementation, Anyip SDK is enabled only while the app is open and actively running in the foreground. It is not intended to run when the app is closed, minimized, or running in the background.

Depending on the specific app version, integration settings, and technical flow, Anyip SDK may use network connectivity and limited technical information necessary to provide its functionality while the app is in active use.

Where required by applicable law, we use consent management mechanisms to manage non-essential processing choices.

11. Local Notifications

Some versions of our apps may schedule local notifications on your device in order to remind you to return to the app or to inform you about app-related activity. On supported operating system versions, the app may request notification permission from the operating system before displaying notifications.

You can manage notification permissions in your device settings at any time.

12. Email Updates, Contact Forms, and Communications

If you voluntarily provide your email address through a Google Form, contact form, or another sign-up form in order to receive updates, announcements, replies, or support, we process that email address and related message data for that purpose.

We use your email address for these communications on the basis of your consent or, where applicable, to respond to your request.

You may withdraw your consent and unsubscribe at any time by contacting us using the contact details provided below or by using the unsubscribe method provided in the communication, where available.

13. Cookies, Local Storage, and Similar Technologies

Our website and some app components may use cookies, SDK storage, local storage, and similar technologies to:

• remember settings;
• support security and fraud prevention;
• enable analytics and diagnostics;
• support advertising and attribution;
• improve performance and user experience.

Where required by law, non-essential cookies or similar technologies are used only after consent.

14. International Data Transfers

Some of our service providers operate internationally. As a result, personal data may be processed in countries outside your country of residence.

Where required by applicable law, we rely on appropriate safeguards for international data transfers, such as contractual safeguards, adequacy decisions, or other lawful transfer mechanisms.

Because some third-party providers process data under their own privacy frameworks, the applicable transfer mechanism may also depend on that provider’s role and the service involved.

15. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide and improve the Services;
• maintain security and prevent fraud;
• comply with legal obligations;
• resolve disputes and enforce agreements;
• document privacy choices and compliance actions.

Retention periods may vary depending on the data category, the specific app or website, the feature involved, and the third-party provider processing the data.

If you subscribe to update notifications or similar communications, we generally retain your email address until you unsubscribe, request deletion, or the communication list is discontinued, unless a longer retention period is required by law or necessary to keep a record of your request.

Some data may be retained directly by our service providers under their own retention schedules and privacy policies.

16. Your Privacy Rights

Subject to applicable law, you may have rights to:

• request access to certain personal data;
• request correction of inaccurate personal data;
• request deletion of certain personal data;
• request restriction of processing;
• object to certain processing;
• withdraw consent where processing is based on consent;
• receive a copy of certain personal data in a portable format;
• lodge a complaint with a competent supervisory authority.

Your rights may vary depending on your country, region, and the legal basis for processing.

17. How to Submit a Privacy Request

To submit a privacy request, please contact us at:

CONTACT WITH US

See more

Because we generally do not maintain a direct user account profile for in-app analytics, attribution, mediation, and advertising data, we may ask you to provide enough information to help us identify the relevant app installation or record, such as:

• app name and app version;
• device model and operating system version;
• country or region;
• approximate date and time of use;
• Firebase Installation ID, app instance ID, advertising ID, or another device/app identifier shown in the app, where available;
• the email address you used, if you subscribed to updates or contacted us.

If we cannot reasonably identify you or the relevant record, we may not be able to fulfill the request in full. In that case, we will explain the limitation and, where appropriate, direct you to the relevant third-party provider’s privacy request process.

Where we control the relevant personal data, we will review and handle your request directly. Where the relevant personal data is processed by third-party providers under their own systems or roles, we may use reasonable efforts to coordinate the request or direct you to the appropriate provider.

18. Third-Party Links and Content

Our Services may contain links to third-party websites, app stores, social media pages, advertising destinations, or other third-party content.

We do not control the privacy practices of those third parties. Please review their privacy policies before providing personal data to them or using their services.

19. Children

Our Services are not directed to children below the minimum age at which personal data processing requires parental consent under applicable law.

If you believe that a child has provided personal data through the Services without appropriate permission, please contact us. Where reasonably possible and legally required, we will take steps to review the situation and delete or stop processing the relevant personal data.

20. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, and misuse.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may provide additional notice through the app, the website, or other appropriate means where required by law. The “Last Updated” date at the top of this Privacy Policy indicates when this version was last revised.

Your continued use of the Services after the effective date of an updated Privacy Policy means that the updated Privacy Policy will apply to your use of the Services from that date forward. This does not replace any consent choices that must be obtained separately where required by law.

22. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

Herdoza Studio

CONTACT WITH US

See more