Privacy Policy Template - TikTok Mini Games (WebGL)

1. Information We Collect

1.1 Information you provide directly

Login is handled by the TikTok Mini Games platform. We do not require additional personal information.

1.2 Information collected automatically

• Game progress data: levels completed, high scores, booster inventory, in-game currency. Stored locally on the player's device. Not transmitted to our servers.
• App interactions: gameplay events (level start/complete/fail, scores, sessions) sent to GameAnalytics only when the player consents.
• Crash reports: anonymized stack traces when the Game crashes, collected by GameAnalytics.

1.3 Information collected by third parties

2. How We Use Information

• To operate and maintain the Game inside TikTok.
• To improve gameplay balance, difficulty, and content.
• To prevent fraud, cheating, and abuse.

3. Legal Basis (GDPR)

• Consent (Art. 6(1)(a) GDPR): analytics on WebGL (player opt-in).
• Contract (Art. 6(1)(b) GDPR): processing necessary to deliver the Game and IAP.
• Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention.

To exercise GDPR rights, email hello@kientaoso.com.

4. Data Retention

• Local game progress is retained until the player clears browser storage.
• Analytics data is retained for 14 months, then aggregated and deleted.
• Crash reports are retained for 90 days.

5. Children's Privacy

Rated Everyone / 4+. No personal information is knowingly collected from children under 13 (COPPA) or under 16 (GDPR). TikTok's own age-gating applies.

6. Your Rights

Access, correction, deletion, restriction, portability. Email hello@kientaoso.com. We respond within 30 days.

7. International Transfers

Data is processed in the United States, the European Union, and Singapore (TikTok data centers). We rely on TikTok's and GameAnalytics' Standard Contractual Clauses for lawful transfers out of the EEA/UK.

8. Security

TLS in transit, encrypted storage at rest on TikTok's platform. No method is 100% secure.

9. Changes to This Policy

We will notify you of material changes by posting the new policy and updating the "Last updated" date.

10. Contact

11. Permissions Requested by the Game

The Game does NOT request: camera, microphone, contacts, location, photos, SMS, calendar, call logs, or biometric data.