Privacy Policy

General Information

Nanjing Xingqun Network Technology Co. Ltd. (“Xingqun,” “we,” “us,” or “our”) develops and publishes casual games and related services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, store, and otherwise process personal data when you use the Services.

“Personal data” or “personal information” means information that identifies, relates to, describes, or could reasonably be linked with an individual or device. Tile Pop Mahjong does not provide user registration or login and does not ask you to create a user account.

Our games may include virtual items or in-game currencies that are intended solely for use within the relevant game. They do not support external redemption or exchange for anything of real-world value unless a particular game expressly states otherwise.

Data We Collect

Tile Pop Mahjong does not request profile information such as your name, email address, telephone number, gender, or social-media account. Depending on your device, region, consent choices, and use of the game, we and our advertising partners (including our ad mediation platforms, analytics services, attribution providers, and the ad networks connected to them) may process the following limited categories:

• Device and network information: device model, operating system and version, screen size, language, IP address, network connection state, advertising identifiers (such as Google Advertising ID or iOS IDFA), and similar technical identifiers used for advertising, security, and compatibility.
• Usage and advertising interactions: game or app interactions, ad impressions, clicks, views, and other events connected with advertisements delivered through our mediation platforms and ad networks.
• Diagnostics: crash logs, error reports, loading time, latency, and other app-performance or technical diagnostic information.
• Approximate location: country or general area inferred from the IP address. Tile Pop Mahjong does not request precise or approximate device-location permission.
• Support communications: information that you choose to include if you contact us for support or submit a privacy request.
• SDK and local technologies: data collected by the TopOn SDK, Firebase, AppsFlyer, and the ad-network SDKs listed in the List of Partners below, plus local storage needed to deliver ads, remember consent choices, prevent fraud, measure campaigns, and operate the game.

Our partners’ processing may vary according to the ad format, SDK version, device settings, region, consent status, and whether personalized or non-personalized advertising is used.

How We Share Data

We may disclose personal data in the following circumstances:

• Ad mediation platforms, ad networks, analytics services, attribution providers, and technical service providers. We may share device, network, advertising-interaction, consent, and diagnostic data with TopOn, Firebase, AppsFlyer, and the ad networks connected through them, as well as vendors that help deliver, measure, secure, and limit advertising. The complete partner list is set out in the List of Partners section.
• Corporate affiliates. We may share data among entities under common control for the purposes described in this Policy.
• Legal, safety, and security purposes. We may disclose data when reasonably necessary to comply with law, legal process, or requests from authorities; protect rights and safety; prevent fraud or abuse; or investigate security incidents.
• Corporate transactions. Data may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
• With your direction or consent. We may share data when you direct us to do so or provide consent.

We may share aggregated or de-identified information where it cannot reasonably be used to identify you.

How We Use Data

• Provide, operate, maintain, troubleshoot, and improve the Services.
• Save local game progress, deliver features, and administer virtual items.
• Analyze performance, crashes, and limited feature engagement.
• Deliver, measure, personalize, and limit advertising in accordance with your choices and applicable law.
• Measure advertising campaigns, attribute installs, and prevent invalid advertising activity through AppsFlyer.
• Detect fraud, abuse, cheating, security threats, and abnormal activity.
• Comply with legal obligations and protect the rights of users, partners, and Xingqun.

Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following:

• Consent, including consent for personalized advertising, local storage, or optional permissions where required.
• Performance of a contract, where processing is necessary to provide a Service you request.
• Legitimate interests, such as improving the Services, preventing fraud, securing systems, and understanding product performance, provided those interests are not overridden by your rights.
• Legal obligations, including responding to lawful requests and maintaining required records.

Cookies and Tracking Measures

Our website and Services may use local storage, advertising SDKs (including the TopOn SDK, Firebase, AppsFlyer, and the ad-network SDKs listed in the List of Partners), and similar technologies for technical operation, consent storage, fraud prevention, advertising delivery, campaign measurement, and install attribution. Some processing may depend on your consent or device settings.

Where required, we provide a consent or opt-out mechanism. You may also reset or limit the advertising identifier through your device settings. If you do not consent to personalized advertising where consent is required, we will request available non-personalized or limited advertising functionality.

Data Transfer, Storage, and Security

We and our partners may process personal data in countries or regions other than the one in which you live. Where required, we use recognized transfer mechanisms and safeguards, such as adequacy decisions, contractual protections, or the European Commission’s Standard Contractual Clauses.

We use reasonable administrative, technical, and physical measures designed to protect personal data from unauthorized access, use, alteration, disclosure, destruction, or loss. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

If a data incident is likely to create a legally reportable risk to individuals, we will provide notices in accordance with applicable law.

Data Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining security, resolving disputes, enforcing agreements, and meeting legal, accounting, or reporting requirements. Retention periods may vary by data type, Service, and legal obligation.

When data is no longer required, we delete, anonymize, or otherwise securely dispose of it, unless continued retention is permitted or required by law. You may request deletion through the support channel available in the relevant game or through the contact method published on our website.

Because Tile Pop Mahjong does not provide user accounts, there is no account-deletion feature. This does not limit your right to request deletion of personal data where applicable.

Your Rights

Depending on where you live, you may have the right to:

• Access or obtain a copy of personal data we maintain about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of personal data, subject to legal exceptions.
• Object to or restrict certain processing.
• Withdraw consent at any time where processing is based on consent.
• Receive certain data in a portable, machine-readable format.
• Opt out of targeted advertising, sale, or sharing where applicable.
• Appeal a decision regarding a privacy request where applicable.

We may ask for information reasonably necessary to verify a request and prevent fraudulent requests. We will respond within the period required by applicable law. You will not be discriminated against for exercising applicable privacy rights.

Children’s Privacy

Tile Pop Mahjong is not directed to children under 13 and is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13 without any consent or authorization required by law.

If you are under 18, a parent or legal guardian should review and agree to this Policy on your behalf. If we learn that personal data was collected from a child in a manner that does not comply with applicable law, we will take reasonable steps to delete it.

Data Security

We maintain measures intended to limit unauthorized access and to support confidentiality, integrity, and availability. These measures may include access controls, monitoring, incident response procedures, and protections provided by our infrastructure partners. Security practices evolve as technology and risks change.

Changes to This Privacy Policy

We may update this Policy to reflect changes in our Services, data practices, partners, legal requirements, or security measures. We will post the revised Policy on this page and update the date at the top. Where required, we will provide additional notice or request consent.

How to Contact Us

For privacy questions or requests, please use the support channel available in the relevant game. Where possible, label the request “Privacy Policy Request” and identify Tile Pop Mahjong, the relevant advertising or device identifier if available, and the right you wish to exercise. Do not send sensitive personal information.

Annex A: Region-Specific Notices

European Economic Area, Switzerland, and the United Kingdom

Subject to applicable law and limited exceptions, residents may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and rights relating to automated decision-making. Requests are ordinarily addressed without undue delay and, for GDPR requests, generally within one month after receipt and verification. Complex requests may take longer where the law permits.

You may also complain to your local supervisory authority. Relevant authority directories include the European Data Protection Board member list, the Swiss authority, and the UK Information Commissioner’s Office.

California

Where the California Consumer Privacy Act, as amended (“CCPA”), applies, California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising their rights. We may verify a request and may deny it where permitted by law.

You may use an authorized agent where permitted. If our processing constitutes “sale” or “sharing” under the CCPA, you may request to opt out through the privacy or advertising controls made available in the relevant Service or through our published support channel.

Other U.S. States

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Tennessee, Texas, Utah, Virginia, and other states with applicable comprehensive privacy laws may have rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, opt out of certain sales, and appeal privacy-request decisions. The exact rights and exceptions depend on applicable law.

Brazil

Where Brazil’s Lei Geral de Proteção de Dados Pessoais (“LGPD”) applies, data subjects may have rights to confirmation, access, correction, anonymization, blocking or deletion, portability, information about sharing, withdrawal of consent, and review of certain automated decisions. Rights are subject to legal conditions and exceptions. Complaints may be submitted to Brazil’s Autoridade Nacional de Proteção de Dados.

List of Partners

Tile Pop Mahjong integrates the following SDKs and services: the TopOn ad mediation platform (used both standalone and through the AppLovin MAX mediation suite), Firebase (Google’s analytics and crash-reporting service), AppsFlyer (mobile marketing measurement and attribution platform), and the ad networks connected through TopOn: AppLovin, Google AdMob, Mintegral (MT Compass), Pangle, Liftoff (Vungle), Kwai Network, TaurusX (programmatic advertising exchange), and Unity Ads. Facebook Audience Network is not integrated.

Our partners may process device and network information, advertising identifiers, ad interactions, approximate location inferred from IP address, diagnostic information, and limited analytics/install-attribution data for advertising delivery, measurement, security, fraud prevention, and campaign optimization. Each partner’s own notices govern its independent processing.

Device Permissions Requested

Tile Pop Mahjong’s Android release requests the permissions listed below. These are needed by the game itself and by its ad mediation platforms, analytics services, attribution provider, push/notification services, and the connected ad networks, plus Google Play’s advertising-ID and Privacy Sandbox APIs used by supported SDK versions. Some entries are added automatically by third-party SDKs or libraries and may not be invoked directly by the game.

The final merged Android manifest must be checked before each publication because an SDK or dependency may add permissions automatically.