Privacy Policy - Crystal Craze

1. Information Collection Policy

Our information collection policy includes gathering user-submitted data such as name, email, profile details, and age verification. Automated collection captures IP addresses, device identifiers, browser types, platform usage, and gameplay data. Policy ensures proper service delivery.

2. Purpose Limitation Principle

We adhere to purpose limitation principles, using data only for service provision, account administration, age verification, experience personalization, communications, analytics, improvements, fraud prevention, and security. Usage is confined to specified legitimate purposes disclosed herein.

3. Selective Data Disclosure

Selective data disclosure excludes any sale of personal information. Disclosure is limited to operational service providers, analytics services, payment processors, and legal entities when required by law. Third parties are contractually obligated to protect data and limit usage.

4. Advanced Security Controls

Advanced security controls feature encryption, secure server platforms, sophisticated firewalls, access management, and ongoing security monitoring. Despite advanced controls, we cannot guarantee total security given technological realities. Controls are continuously upgraded to maintain advanced protection.

5. User Data Autonomy

User data autonomy grants rights to access information, update records, correct mistakes, delete data, object to certain processing, revoke consent, and request portability. Exercise autonomy by contacting privacy team. Requests processed within 30 days subject to verification and legal obligations.

6. Tracking Tools Notice

Tracking tools notice informs that we use cookies, beacons, and related technologies to enhance platform experience, analyze usage patterns, remember preferences, and personalize content. Tools include necessary, functional, analytical, and preference-based cookies. Browser settings allow tool management with potential functionality trade-offs. See Cookie Policy.

7. Data Minimization Policy

Data minimization policy retains only necessary information for service provision, legal compliance, dispute resolution, and agreement enforcement. Policy permits 365-day inactive account deletion. Minimization achieved within 90 days of deletion, except legally mandated retention. Contact privacy department for minimization.

8. Minor Privacy Policy

Minor privacy policy excludes individuals under 21 from platform use. We do not knowingly collect data from children or minors. Discovery of underage users triggers immediate account termination and complete data deletion. Parents or guardians suspecting child information provision should contact us for immediate removal.

9. International Data Flow

International data flow may transfer information to countries beyond your residence with different privacy regulations. Flow safeguards include contractual protections, data encryption, and security measures. We implement appropriate safeguards for international flows. Your service use indicates consent to international data flow.

10. Policy Evolution Rights

Policy evolution rights permit updating this Privacy Policy at our discretion. Evolved policy is posted with new effective dates. Material evolution receives email or prominent platform notice. Service usage after evolution indicates acceptance. Rights framework encourages regular review to understand policy evolution.