Key-Point Summary (Plain Language)

• We (DeltaQuest, Inc.) show ads and measure gameplay to improve the Game.
• Advertising and analytics partners (listed below) receive an advertising ID, device details, gameplay events and crash logs.
• You can limit personalised ads via your device settings or partner links in Section 6.
• We never ask for your real name, email or precise GPS and we do not send remote push notifications.
• Need help? Contact our DPO (see Section 16).

This summary is just a quick overview - please read the full policy below.

1. Scope

This policy explains how DeltaQuest, Inc. ("we", "us", "our") collects, uses and shares data when you play At All Costs (the "Game") on Android or iOS. It aligns with the disclosures shown in Google Play's Data Safety section and Apple App Store's App Privacy details.

2. Data We Collect and Receive

We use third-party services to provide analytics, crash diagnostics and ads. When those SDKs run in the app, your device communicates directly with our service providers, who share aggregated dashboards and reports with us. We do not sell your personal information. See Section 3 for details.

Categories of data processed (depending on your settings, device and region):

• Device & app info: device model, OS/version, screen size, language, app version.
• Advertising identifier: GAID/AdID on Android, IDFA on iOS (available only if you allow tracking on iOS).
• Network-derived region: coarse IP used only to approximate country/region.
• Usage/events: app interactions for analytics and product improvement.
• Diagnostics: crash traces, performance metrics.

We use this information to operate and improve the app, understand features, measure campaigns, and fix issues.

3. Third-Party SDKs and Service Providers

These providers receive data directly from your device when their SDKs are active. They process it to provide services to us, and may act as our processors and/or independent controllers for certain limited purposes. See their notices for details.

Internal reporting: We may view analytics using Google Analytics/GA4 and Looker Studio dashboards. This does not add any SDK to your device.

4. How and Why We Use Information

• Operate and improve the Game (legitimate interest or performance of contract).
• Serve ads and measure their performance (consent where required).

5. Future Features

We may add the following features in future updates:

• In-app privacy controls - A toggle within the game to control ad personalisation.
• Fraud prevention systems - Additional measures to ensure fair play and prevent cheating.

When these features are implemented, we will update this policy and notify users through in-app announcements or on our website.

6. Ad Personalisation Choices

1. Device controls
   Android 14: Settings → Privacy → Ads → "Delete advertising ID"
   Android 13-: Settings → Privacy → Ads → "Opt out of Ads Personalisation"
   iOS: Settings → Privacy and Security → Tracking → disable "Allow Apps to Request to Track".
2. Global Privacy Control or Limit Ad Tracking - the Game honours these signals and forwards them to partners.
3. Partner portals - see the opt-out links in Section 3.

An in-app toggle is on our roadmap; in the meantime please use the methods above.

7. Legal Bases (EEA and UK)

• Consent - personalised advertising.
• Legitimate interests - game operation and improvement.
• Performance of contract - delivering gameplay and in-app purchases you request.

8. Data Retention

Raw analytics logs are kept by our partners for no longer than 24 months (shorter if they offer a shorter default).
Aggregated, de-identified statistics may be stored indefinitely for trend analysis.

9. Region-Specific Disclosures

Brazil (LGPD): You have rights to access, correct or delete your data. Contact us to exercise them.
Canada (PIPEDA): Our practices comply with the ten Fair Information Principles.
Australia (Privacy Act 1988): We do not transfer personal data outside Australia unless adequate protections apply.
Other regions: We honour applicable rights where you reside.

10. International Data Transfers

We are headquartered in Japan. Where partners transfer data outside the EEA or UK, they rely on Standard Contractual Clauses or equivalent safeguards.

11. California Privacy Rights (CCPA and CPRA)

• You have rights to know, delete and correct personal information.
• We "share" identifiers for cross-context behavioural advertising. Use device controls or partner links to opt out.
• No financial incentives are offered for your data.

12. Children's Privacy

The Game is directed to users aged 12 plus. We do not knowingly collect personal data from children under 12.
If we become aware of such collection, we will delete the information as quickly as practicable or seek parental consent.

13. Security Measures

We follow industry-standard practices, including TLS 1.2 plus for data in transit and partner-level encryption at rest, to protect information.
No method of transmission or storage is 100 percent secure, but we aim to mitigate risks through regular audits and access controls.

14. Your Rights and How to Exercise Them

Depending on your location you may request access, correction, deletion, restriction or portability of your data.
Send a request to support@deltaquest.co.jp and we (or our partners) will respond within 30 days.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in-app or on our website at least 7 days before they take effect.

16. Contact Us

17. Glossary

• Advertising ID - a device-level ID (GAID or IDFA) that resets from system settings.
• Personal information - data that identifies or can reasonably identify an individual.
• Standard Contractual Clauses (SCCs) - EU model clauses for cross-border transfers.