Paper Seasons

Privacy Policy

Effective date: 5 October 2026 · Version 1.1

This privacy policy applies to the Paper Seasons app for Android, together with any related services operated by Tactix Ads LP (collectively, the "Application"). Tactix Ads LP is hereby referred to as the "Service Provider".

Information Collection and Use

The Application collects information when you download and use it. This information may include information such as

Your device's Internet Protocol address
The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
The time spent on the Application
Your mobile operating system you use

The Application is free to download and play, and is supported by advertising. It contains the Google AdMob advertising SDK, the advertising SDKs of the AdMob mediation partners listed under Advertising partners below (Unity Ads, Liftoff Monetize and Pangle), and Google Analytics for Firebase. What is collected divides into two parts: what the Application's own code records, and what those third-party components collect on their own account.

Collected by the Application's own code:

App activity — in-game progression events: which level number was started, cleared, stranded or failed; how long it took, in whole seconds; and how many mistakes were spent. Session start and end, and session duration in whole seconds. Which ad surface was offered, whether a video played, and whether the reward was granted.
Crash logs — the exception message, the file basename, the line and column, and at most three stack frames.

Collected by the Google components:

Google AdMob collects an advertising identifier and device data in order to serve, cap, and measure advertising. This is the advertising SDK's own collection, described in Google's policies linked below.
Google Analytics for Firebase collects a pseudonymous app instance identifier generated for your installation, together with device and app information such as device model, operating system version, app version, and device language, and an approximate location that Google derives from your IP address. It also collects the device's advertising identifier, which Google's default configuration for this component enables, and uses it to link analytics activity to advertising activity.

What the Application does not collect:

No name, email address, phone number, postal address, or account of any kind. The Application has no sign-in and no text input anywhere, so there is no free text you could have typed for it to send.
The Application's own code reads no device identifier of any kind. The advertising identifier described above is read by the third-party components — the Google advertising SDK, the advertising partners' SDKs, and Google Analytics for Firebase — and the Application adds nothing to it.
This Application does not gather precise information about the location of your mobile device. It requests no location permission.
No contacts, photos, files, or list of installed applications.
No saved game data and no purchase receipt. The Application does not currently offer in-app purchases.

Advertising partners

Ads in the Application are selected by Google AdMob, which runs an auction among Google's own demand and the mediation partners below. Each partner's SDK is included in the Application and, when it takes part in an ad request or shows an ad, receives:

the device's advertising identifier;
the IP address, from which an approximate location can be derived;
device and app information such as model, operating system version, language, app name and version, and network type;
ad interaction data such as impressions, clicks and video completion.

They use this data to serve, measure and frequency-cap the ads shown, and to protect against fraud. Each partner is an independent controller of that data under its own privacy policy:

Google AdMob (Google LLC), including the third-party bidders in Google's auction — How Google uses information; Google's ad technology providers
Unity Ads (Unity Technologies) — privacy policy
Liftoff Monetize, formerly Vungle (Liftoff Mobile, Inc.) — privacy policy
Pangle (Bytedance Pte. Ltd.) — privacy policy

Your choices. In the European Economic Area, the United Kingdom, and Switzerland, the Application asks for your consent through Google's User Messaging Platform before any ad is requested, and passes your choice to these partners; you can change or withdraw it from the privacy options control in the Application's Settings screen. Everywhere, you can reset or delete your advertising identifier, or opt out of personalised ads, in your device's Settings → Google → Ads (on Android 12 and later, Delete advertising ID); after that, partners receive no advertising identifier.

Cookies and tracking technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

Your Rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at tech@tactixadslp.com.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at tech@tactixadslp.com.

The Service Provider does not require you to provide any personally identifiable information in order to use the Application. The Application has no account, no sign-in, and no text input of any kind, so no name, email address, password, or other free text is requested or retained.

Third Party Access

The data described above is transmitted to Google (AdMob and Firebase) and to the advertising partners listed above, for the purposes stated there. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

International Data Transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions or other legally recognized transfer mechanisms
Your consent, where required and legally permitted

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

The Service Provider may disclose User Provided and Automatically Collected Information:

as required by law, such as to comply with a subpoena, or similar legal process;
when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.

Advertising consent. In the European Economic Area, the United Kingdom, and Switzerland, the Application asks for your consent before it requests any advertisement, using Google's User Messaging Platform (UMP). Where your jurisdiction requires a standing entry point for that choice, a privacy options control appears in the Application's Settings screen, and you can use it to change or withdraw your consent at any time. If consent has not been obtained, the Application requests no ads.

To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at tech@tactixadslp.com.

Data Retention Policy

The Service Provider retains personal data based on its necessity for the stated purposes:

User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
Data required for legal compliance: Retained as long as required by applicable law

You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at tech@tactixadslp.com. Please note that some User Provided Data may be required for the Application to function properly.

Data Deletion

You can request deletion of your personal data or account by contacting the Service Provider at tech@tactixadslp.com. The Service Provider will process your request within the timeframes required by applicable law.

Upon verification of your identity, the Service Provider will delete your personal data from its systems, except where retention is required for legal compliance or legitimate business purposes.

Children

The Application is not intended for children under 13 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (tech@tactixadslp.com) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Data Breach Notification

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at tech@tactixadslp.com.

This privacy policy is effective as of 5 October 2026.

Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.

In the European Economic Area, the United Kingdom, and Switzerland, consent for advertising is gathered through Google's User Messaging Platform before the first ad request, and it can be changed or withdrawn from the privacy options control in the Application's Settings screen.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at tech@tactixadslp.com.

Tactix Ads LP
85 Great Portland Street
London W1W 7LT
United Kingdom
tech@tactixadslp.com