This Privacy Policy explains how MergeJoy ("we," "us," or "our") collects, uses, and protects your personal data in connection with our merge-puzzle Application. By using MergeJoy, you acknowledge the practices described herein.
Article I — Key Definitions
| Term | Meaning |
|---|
| Application | MergeJoy, the merge-puzzle software we provide |
| Company | The entity that operates MergeJoy and determines how personal data is processed |
| Personal Data | Information that identifies or can reasonably identify an individual |
| Usage Data | Data generated automatically through use of the Application |
| Device | Any phone, tablet, or computer used to access MergeJoy |
| Service Provider | A third party that processes personal data on our behalf |
| Account | A profile that may store progress, preferences, or rewards |
Article II — What We Collect
2.1 Our systems automatically record technical data when you use the Application, including device specifications, network information, usage patterns, and diagnostic reports.
Collected automatically
- IP address, device type, OS, WebView version
- Identifiers (GAID, ANDROID_ID)
- Session length, merge actions, timestamps
- Crash reports and diagnostics
- Device model, carrier, network status
Collected with permission
- Advertising IDs (GAID, IDFA)
- Engagement and ad metrics
- PayPal email & name (withdrawals only)
Article III — How We Use Your Data
3.1 Personal data serves specific operational purposes:
- Operate — deliver merge puzzles, sync progress, maintain stability
- Accounts — registration, authentication, preferences
- Withdrawals — route eligible payouts via PayPal
- Communicate — support replies and service notices
- Improve — analyze play patterns, balance levels, fix bugs
- Offers — surface news or promotions where permitted
- Corporate events — support mergers or restructuring if they occur
Article IV — When We Share Your Data
4.1 Data sharing is limited to operational necessities:
- Service Providers — hosting, ads, analytics, support, payout tooling
- Business Transfers — mergers, acquisitions, or asset sales
- Affiliates — entities under common control, bound by this Policy
- Business Partners — joint promotions you opt into
- Public Interactions — content you deliberately share
- Legal Obligations — valid legal process or court orders
- With Consent — any extra purpose you clearly authorize
PayPal data protection: We will never sell or rent your PayPal account email. This information is shared only to process your withdrawal, with your consent, or as required by law.
Article V — Data Security
5.1 Industry-standard protections apply: TLS 1.2+ encryption in transit, strict access policies, scheduled vulnerability assessments, and contractual security requirements for partners. Absolute security cannot be guaranteed; commercially reasonable measures are maintained.
Article VI — Analytics & Endpoints
Endpoint: https://ppq.mergelamb.com — anonymized analytics, gameplay delivery, progress sync, updates, and support. Safeguards include TLS 1.2+, role-based access, data minimization, audits, and DPAs.
Article VII — Third-Party & Advertising Partners
7.1 Advertisements may be served through AppLovin and its mediation network.
| May be shared | Never shared |
|---|
- Resettable advertising IDs
- Device model, OS, screen size
- Session frequency & duration
- Ad impressions & clicks
- Country & language
|
- Email or phone
- Account credentials
- Merge progress / solutions
- User-generated content
- Precise geolocation
|
7.2 Partner privacy policies:
Article VIII — App Permissions
| Permission | Purpose | Data |
|---|
INTERNET | Online play, ads, updates | Network status |
ACCESS_NETWORK_STATE | Adapt to connection type | Network type |
ACCESS_WIFI_STATE | Prefer stable Wi-Fi | Wi-Fi status |
AD_ID | Personalized ads | Resettable ad ID |
VIBRATE | Haptics on merges / clears | None |
ACCESS_ADSERVICES_TOPICS | Ad topics | Topic signals |
ACCESS_ADSERVICES_ATTRIBUTION | Campaign measurement | Attribution data |
BIND_GET_INSTALL_REFERRER_SERVICE | Install source | Campaign params |
BIND_APPHUB_SERVICE | Ad optimization | Impression data |
ACCESS_ADSERVICES_AD_ID | Ad-service APIs | Ad-service IDs |
FOREGROUND_SERVICE | Background tasks | None |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internals | None |
Article IX — Data Retention
Personal data is retained only as long as necessary. After 90 days of inactivity, personal data is deleted from our active systems. Anonymized usage metrics may remain for internal analysis.
Article X — Your Data Rights
10.1 Depending on your location, the following rights may apply:
| Framework | Rights |
|---|
| CCPA / CPRA (California) | Know, Delete, Opt-Out of sale/sharing, Non-Discrimination |
| GDPR (EEA / UK) | Access, Rectification, Erasure, Restrict Processing, Object |
| VCDPA (Virginia) | Access & Confirm, Correct, Delete, Portability, Opt-Out |
Article XI — Opting Out
- Android: Settings → Google → Ads → Opt out of Ads Personalization
- iOS: Settings → Privacy & Security → Tracking / Apple Advertising → Limit Ad Tracking
- Sale of personal data: email subject "Do Not Sell" to nguyenvanhieu8998@icloud.com
11.1 We do not engage in profiling that produces legal or similarly significant effects.
Article XII — International Transfers
12.1 Personal data may be processed outside your home jurisdiction. Transfers rely on TLS 1.2+ and contractual safeguards so comparable protection is maintained.
Article XIII — Children's Privacy
13.1 MergeJoy is not intended for anyone under the age of
13. We do not knowingly collect personal data from children. Contact
nguyenvanhieu8998@icloud.com for prompt deletion if such data is discovered.
Article XIV — Disclosure Requirements
- Business transactions — data may transfer in a merger, acquisition, or asset sale
- Law enforcement — compliance with valid legal requests and court orders
- Safety — disclosure to protect rights, stop fraud, or keep users safe
Article XV — Third-Party Links
15.1 MergeJoy may contain links to external sites we do not operate. Their privacy practices are independent of ours.
Article XVI — Cookies & Similar Technologies
16.1 Where WebViews or partner SDKs are used, cookies or similar identifiers may store session state, measure ads, or remember preferences. Reset advertising IDs in device settings; clearing app data may remove local tracking tokens.
Article XVII — Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects. Puzzle difficulty and ad relevance may use simple heuristics without legally significant outcomes.
Article XVIII — Changes to This Policy
- Revised text shall be posted on this page
- The Effective Date above shall be updated
- Material changes may be communicated by email or in-app notice
Article XIX — Contact Us
19.1 Privacy inquiries shall receive a response within 48 hours.