Key-Point Summary (Plain Language)

• We (DeltaQuest, Inc.) show ads to keep the Game free. Ads run only after you explicitly accept them in the in-game consent screen.
• If you decline — or never make a choice — the advertising SDK is never initialized and no ad data leaves your device. Ads are simply absent from the Game.
• Our advertising partner (Unity LevelPlay / Unity Ads, listed below) receives an advertising ID, device details and a coarse, IP-derived region while ads are active.
• We never ask for your real name, email or precise GPS, we do not send remote push notifications, and your game saves stay on your device.
• Need help? Contact our DPO (see Section 17).

This summary is just a quick overview - please read the full policy below.

1. Scope

This policy explains how DeltaQuest, Inc. ("we", "us", "our") collects, uses and shares data when you play Iron Caravan (the "Game") on Android or iOS. It aligns with the disclosures shown in Google Play's Data Safety section and Apple App Store's App Privacy details.

2. Your Consent Choice

The Game asks for your choice once, the first time an ad could be shown (for example, when a retry offer appears on the Game Over screen) — never at app launch.

• Accept - on iOS, the system App Tracking Transparency (ATT) prompt shows first. Your consent signals are then forwarded to our advertising partner, and only then is the advertising SDK initialized.
• Decline - the advertising SDK is never initialized and produces no network activity. Ads are simply absent from the Game. You will not be asked again.
• No choice yet - treated like decline: nothing runs until you decide.

You can limit personalised advertising based on a consent you have given at any time using the device controls in Section 7 (resetting/deleting your advertising ID, or disabling tracking on iOS). For help withdrawing consent, contact us via Section 17.

3. Data We Collect and Receive

We do not run our own servers for the Game and do not collect your data ourselves: game progress and settings are stored locally on your device. The only third-party SDK in the current version is our advertising SDK, and it runs only after you accept ads (see Section 2). We do not sell your personal information.

While ads are active, categories of data processed (depending on your settings, device and region):

• Device & app info: device model, OS/version, screen size, language, app version.
• Advertising identifier: GAID/AdID on Android, IDFA on iOS (available only if you allow tracking on iOS).
• Network-derived region: coarse IP used only to approximate country/region.
• Ad interaction events: ad impressions, clicks, and rewarded-ad completions.
• Diagnostics: performance metrics related to ad delivery.

4. Third-Party SDKs and Service Providers

These providers receive data directly from your device when their SDKs are active. They process it to provide services to us, and may act as our processors and/or independent controllers for certain limited purposes. See their notices for details.

Note: Google Play (Google LLC) and the App Store (Apple Inc.) also process install and crash statistics under their own policies when you install any app from their stores.

5. How and Why We Use Information

• Operate and improve the Game (legitimate interest or performance of contract).
• Serve ads and measure their performance (consent).

6. Future Features

We may add the following features in future updates:

• Analytics (Unity Analytics) - to understand gameplay difficulty and improve balance. It will sit behind the same consent gate as ads and be named as a distinct purpose in the consent screen before it activates.
• An optional purchase to remove ads - a one-time purchase that hides ads.
• In-app privacy controls - a toggle within the game to control ad personalisation.

When these features are implemented, we will update this policy and the store data-safety forms, and notify users through in-app announcements or on our website.

7. Ad Personalisation Choices

1. In-game consent - ads run only if you accept them in the in-game consent screen (see Section 2).
2. Device controls
   Android 14: Settings → Privacy → Ads → "Delete advertising ID"
   Android 13-: Settings → Privacy → Ads → "Opt out of Ads Personalisation"
   iOS: Settings → Privacy and Security → Tracking → disable "Allow Apps to Request to Track".
3. Partner portals - see the opt-out links in Section 4.

8. Legal Bases (EEA and UK)

• Consent - serving and measuring advertising.
• Legitimate interests - game operation and improvement.
• Performance of contract - delivering the gameplay you request.

9. Data Retention

We do not operate servers for the Game and hold no server-side database of your personal data. Game saves and settings live only on your device and are removed when you delete the app.
Our advertising partner retains the data it receives according to its published privacy policy (see Section 4).
Aggregated, de-identified statistics may be stored indefinitely for trend analysis.

10. Region-Specific Disclosures

Brazil (LGPD): You have rights to access, correct or delete your data. Contact us to exercise them.
Canada (PIPEDA): Our practices comply with the ten Fair Information Principles.
Australia (Privacy Act 1988): We do not transfer personal data outside Australia unless adequate protections apply.
Other regions: We honour applicable rights where you reside.

11. International Data Transfers

We are headquartered in Japan. Where partners transfer data outside the EEA or UK, they rely on Standard Contractual Clauses or equivalent safeguards.

12. California Privacy Rights (CCPA and CPRA)

• You have rights to know, delete and correct personal information.
• Identifiers are "shared" for cross-context behavioural advertising only after you accept ads. Use device controls or partner links to opt out.
• No financial incentives are offered for your data.

13. Children's Privacy

The Game is directed to users aged 13 and over. We do not knowingly collect personal data from children under 13.
If we become aware of such collection, we will delete the information as quickly as practicable or seek parental consent.

14. Security Measures

We follow industry-standard practices, including TLS 1.2 plus for data in transit and partner-level encryption at rest, to protect information.
No method of transmission or storage is 100 percent secure, but we aim to mitigate risks through regular audits and access controls.

15. Your Rights and How to Exercise Them

Depending on your location you may request access, correction, deletion, restriction or portability of your data.
Send a request to support@deltaquest.co.jp and we (or our partners) will respond within 30 days.

16. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in-app or on our website at least 7 days before they take effect.

17. Contact Us

18. Glossary

• Advertising ID - a device-level ID (GAID or IDFA) that resets from system settings.
• Personal information - data that identifies or can reasonably identify an individual.
• Rewarded ad - an ad you choose to watch in exchange for an in-game benefit (for example, a retry).
• Standard Contractual Clauses (SCCs) - EU model clauses for cross-border transfers.