Privacy

Date of Effect: August 17, 2026

This Data Privacy Policy details how PT POLA PAPERINDO JAYATAMA (hereinafter referred to as "we," "us," or "our") collects, processes, and protects your personal information when you use our mobile application, Mermaid's Call: School Lord, via the Google Play store. We manage your data strictly to deliver high-quality gaming features and to optimize your interactive experience.

1. How We Collect and Process Your Information

We acquire and maintain your personal data through multiple avenues, and we remain fully committed to keeping your information secure. The sections below outline the specific data categories we capture and how we handle them.

1.1 Information Captured During Use When you launch or interact with Mermaid's Call: School Lord, we may record the following broad categories of data:

Server and Network Details: Your IP address, connection timestamps, and hardware classification.

Device Specifications: Manufacturer, specific device model, operating system (including Android/Google OS versions), system language, and local time zone.

Hardware and Network Identifiers: Unique digital tags linked to your gaming device, such as your Google Advertising ID (GAID), Android Device ID, Google Play Games ID, and Google account identifier.

In-Game Activity: Your progress, top scores, earned achievements, and history of multiplayer engagements.

Purchase and Consumption History: Records of your transactions, used in-game items, customized settings, and logs detailing the acquisition of virtual currencies or digital goods.

1.2 Data from Third-Party Platforms If you elect to log into your account via external services, such as Google Play Games Services, we will pull relevant information (e.g., your public profile details and username) from that platform. This is done in strict compliance with the external network's authorization protocols and requires your prior consent to their data-sharing agreements.

To understand how these external platforms manage your data, please review their privacy policies:

Google Play Games / Google Services: https://policies.google.com/privacy

By using a third-party service to access Mermaid's Call: School Lord, you acknowledge that:

Your use of the game’s features complies with the current terms and conditions of that third-party provider.

You satisfy the minimum age limits set by the third-party platform under the laws of your local jurisdiction.

2. Why We Process Your Data

We utilize your personal information for the following core purposes, ensuring that all data processing is backed by an appropriate legal basis:

Delivering and Maintaining Services: To process transactions, respond to inquiries, facilitate communication, operate core game features, personalize your experience, and send technical alerts, security updates, and support messages.

Legal Basis: This is grounded in Article 6(1)(b) of the General Data Protection Regulation (GDPR) (contractual necessity). It is required to fulfill our user agreement, maintain backend infrastructure, and deploy software updates.

Product Enhancement and Marketing: To send you promotional materials from PT POLA PAPERINDO JAYATAMA or vetted third parties based on your preferences; to preserve your in-game settings; to analyze user metrics; to design new features; and to improve the overall quality of our software, marketing efforts, and customer service.

Legal Basis: This relies on GDPR Article 6(1)(f) (legitimate interests). We use this information to pursue our legitimate interest in offering engaging gameplay and continually elevating our operational standards.

Personalized Advertising: To display tailored advertisements and relevant promotional content to users who have agreed to share their device IDs with our marketing partners.

Legal Basis: This is also based on GDPR Article 6(1)(f). We process this data out of a legitimate interest in providing targeted marketing and improving our business offerings.

3. Data Retention Periods

We keep your personal details only for as long as it takes to provide our gaming services, satisfy legal requirements, and protect or establish our legal rights. To resolve disputes, enforce agreements, manage technical infrastructure, comply with the law, or maintain system integrity, we may archive certain data segments for a legally justifiable period.

Furthermore, we retain Usage Data for internal performance analysis. This information is generally kept for short durations, unless extended retention is required by law or is necessary to enhance system security and functionality.

4. How We Share Your Information

In accordance with your legal rights and GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may share or facilitate the transfer of your data with specific external parties under these circumstances:

External Partners: For collaborative service delivery, legal compliance, business asset transfers, or other projects for which you have given explicit consent.

Legal Authorities: If we suspect a breach of our policies, or if sharing the data is legally required to protect the public or defend the safety, rights, and intellectual property of PT POLA PAPERINDO JAYATAMA.

Other Users: When you participate in global leaderboards, multiplayer matches, or public gaming forums.

4.1 Advertising Networks Subject to your consent under GDPR Article 6(1), we will share your device identifiers with advertising networks to enable personalized ad delivery. Our current and potential advertising partners include:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Note: This Privacy Policy does not cover how these external companies handle your data. We highly recommend reading their individual privacy statements if you have any concerns.

4.2 Analytics and Backend Partners To support our game's infrastructure, we collaborate with specialized third-party data processors, including hosting providers, analytics platforms, and authentication services:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

5. Policy on Children’s Privacy

Mermaid's Call: School Lord is not intended for, nor targeted at, children under the age of 13. We do not knowingly collect personally identifiable information from anyone below this age limit. If we discover that we have accidentally captured such data, we will immediately delete it from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us right away so we can take appropriate action.

6. Security Measures

We deeply value your trust and utilize commercially reasonable security protocols to safeguard your personal information. However, please understand that no method of electronic storage or transmission over the internet is completely secure, and we cannot guarantee the absolute safety of your data.

7. Push Notifications

If you have opted in, we may send critical updates, game alerts, and promotional campaigns directly to your Android/Google device. You have the right to revoke this permission at any point by adjusting your device's notification settings.

8. Your Privacy Rights and Options

8.1 EEA User Rights We are dedicated to handling your privacy requests swiftly, generally within one month of receipt. For highly complex requests, we may extend this timeframe by up to three additional months, as allowed by GDPR Article 12, and we will notify you of any delays.

Right of Access: Under GDPR Article 15, you can request full details regarding the data we hold about you, including processing motives, data types, recipients, and retention periods. You may also request a digital copy, provided it does not infringe on intellectual property or trade secrets.

Right to Object: Under GDPR Article 21, you can object to data processing based on "legitimate interests" (Article 6(1)(f)). We will stop processing unless we have compelling legal grounds that override your rights. You also have an absolute right to object to processing for direct marketing.

Right to Rectification: Under GDPR Article 16, you can request corrections to any incomplete or inaccurate personal data.

Right to Restriction: Under GDPR Article 18, you may ask us to pause the active processing of your data under certain conditions. Once restricted, we will only process it with your consent, for legal claims, or for significant public interest.

Right to Withdraw Consent: Under GDPR Article 7, if processing relies on your consent, you can withdraw it at any time. This stops future processing but does not affect the legality of processing that occurred before the withdrawal.

Right to Data Portability: Under GDPR Article 20, you have the right to receive your data in a structured, commonly used machine-readable format, and to request its transfer to another controller.

8.2 California User Rights

Response Time: We aim to respond to verified consumer requests within 45 days. If we require more time (up to a total of 90 days), we will inform you in writing of the reason and the updated timeline.

Scope of Disclosure: Information provided will only cover the 12-month period immediately preceding your verifiable request and will be formatted for easy data portability.

Right to Opt-Out: Under the CCPA, you have the right to demand that businesses stop selling your personal data to third parties.

Right to Know: You have the right to know exactly what types of personal data we collect and our reasons for doing so. This is detailed in this Privacy Policy, which is updated at least once a year.

Right to Access: You may ask for a comprehensive breakdown of the specific personal data we have collected about you over the past 12 months, including collection methods, purposes, and third-party sharing. This can be requested for free twice a year.

Right to Deletion: You can request the permanent erasure of personal data collected over the past 12 months. Certain exemptions apply, such as when the data is needed to troubleshoot issues, provide active services, protect free speech, or comply with legal obligations.

9. How to Request Data Deletion

When it is no longer necessary for us to keep your personal data, you may request its secure deletion. To initiate a data erasure request, please contact us using the email provided below.

10. Contact Us

If you have any questions, privacy concerns, or requests regarding this Data Privacy Policy, please contact us at: Email: [email protected]