(a) In this Section 3 we have set out:
(b) the general categories of personal data that we may process;
(c) in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
(d) the purposes for which we may process personal data; and
(e) the legal bases of the processing.
We may process data about your use of our website, services, mobile games (“usage data“). The usage data may include your IP address (anonymized, except as described in Section 3.11 below), mobile device ID, in-game user name or nickname, low level geographical location (country), browser type and version, device type, operating system, referral source, as well as information about the timing, frequency and pattern of your game use (which includes data about your gameplay such as progress within the game, in-game items and currency owned and in-game character choice). The source of the usage data is you. This usage data may be processed for the purposes of operating our service, securing our service and analyzing the use of the website and games. The legal basis for this processing is our legitimate interests, namely running, monitoring and improving our websites and games.
We may process your account data (“account data“). The account data may include your user name or nickname within our games, your password(s), your email address, and, if applicable, your identification hash from external providers/portals. The source of the account data is you or the external provider/portal.] The account data may be processed for the purposes of operating and providing to you our websites and games and communicating with you. The legal basis for this processing is consent or our legitimate interests, namely the proper administration of our websites and business.
We may process your information included in your personal profile on our websites or within our games. (“profile data“). The profile data may include your email address, user name or nickname, profile pictures and date of birth. The profile data may be processed for operating our services and games and providing necessary age check services. The legal basis for this processing is consent or our legitimate interests, namely the proper administration of our websites, games and business.
We may process information that you post for publication on our website or in one of our games through any comment, post or chat functionality] (“publication data“). The publication data may be processed for the purposes of enabling such publication and administering our website and games. The legal basis for this processing is consent.
We may process information contained in any enquiry you submit to us regarding goods and/or services, including our games (“enquiry data“). The enquiry data may be processed for the purposes of responding to your enquiry or for offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is consent.
We may process information relating to our customer relationships, including customer contact information (“customer relationship data“). The customer relationship data may include links to user accounts, such as Facebook, VK.com, Kongregate and any other account you may have on a portal through which you access our websites or games. The source of the customer relationship data is the third-party portal holding the relevant account. The customer relationship data may be processed for the purposes of managing our relationships with portals, communicating with customers, keeping records of those communications and promoting our products and services to customers. The legal basis for this processing is our legitimate interests, namely the proper management of our customer relationships.
We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website or within our games (“transaction data“). The transaction data may include the purchase price, the type of currency used (the chosen payment solution), the date of the transaction and the transaction identification hash. We do not process your bank account numbers or credit card numbers or information related to your accounts with external payment providers, which are only available and stored with our payment partners. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely the proper administration of our websites and business.
We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters and/or push notifications (“notification data“). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent and the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
We may process information contained in or relating to any communication that you send to us (“correspondence data“). The correspondence data may include the communication content and metadata associated with the communication and your email address or other information provided by you within the communication. Our website will generate the metadata associated with communications made using the website contact forms or support desk systems. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is consent and our legitimate interests, namely the proper administration of our website and business and communications with users.
We may process non-anonymized IP addresses in our system’s log files for security reasons, which data is deleted after no more than 7 days, though the data may be stored longer if anonymized, at which point identification to a particular individual is no longer possible. This data is not stored together with any other personally identifying data. The source of this data is you . This data may be processed for optimizing the service we provide through our websites and games and to secure our IT systems. The legal basis for this processing is our legitimate interests, namely protecting the security of our IT systems and optimizing the performance of our websites and games.
We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
In addition to the specific purposes for which we may process your personal data set out in this Section 3, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person’s personal data to us, unless we prompt you to do so. Never share your password with anyone, including us.
Internet-Based Online Advertising and Google Analytics – If you have given your consent, Google Analytics, a web analysis service of Google LLC (“Google”) is used on the website https://www.stevenuniversetaptogether.com/. The use includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID (IP addresses will be anonymized) and thus analyze a user’s activities across devices.
Further, this section of our Privacy Policy provides details about internet-based online advertising (called “targeted advertising,” “remarketing,” or “behavioral advertising”), Google Analytics and your choices with respect to this type of advertising. This section currently applies to the website https://www.stevenuniversetaptogether.com/. We use Google Analytics’ 3rd-party audience data such as age, gender and interests to better understand the behavior of those who visit our website and work with companies that collect information about your online activities to provide advertising to suit your interests and preferences. For example, you may see ads on https://www.stevenuniversetaptogether.com/ because we contract with Google and other similar companies to target ads based on information we or they have collected, including information that was collected through automated means (such as cookies). These companies use also use automated technologies to collect information when you click on an ad on our site, which helps track and manage the effectiveness of marketing efforts.
You may opt out of the automated collection of this data by third-party ad networks for the purpose of delivering advertisements tailored to your interests by visiting the consumer op-out page for the Self-Regulatory Principles for Online Behavioral Advertising at http://www.aboutads.info/choices/. You may edit or opt out of your Google Display Network ads’ preferences at http://www.google.com/ads/preferences/. These opt-out and preference control pages are specific to you individual browser used to visit them and are not operated by or affiliated with SPYR. Therefore, SPYR is not able to perform any opt-outs or modify any preferences on your behalf.
Facebook Pixel – We use Facebook Pixel on https://www.stevenuniversetaptogether.com/. Facebook Pixel is used for conversion tracking, which helps us measure the return on investment of Facebook Ads by tracking and reporting to us the actions people taking after viewing a Facebook Ad. We create pixels that track conversions and track conversions back to ads being run on Facebook. No personal information is contained in or collected as a result of using Facebook Pixel. Facebook is able to connect its pixel data with your Facebook account and use the data for its own advertising purposes, in accordance with Facebook’s Data Use Policy found at https://www.facebook.com/about/privacy/. Facebook conversion tracking also allows Facebook and its partners to show you advertisements on and outside Facebook. In addition, a cookie will be saved on your computer for these purposes. If you would like to opt out of remarketing pixels and technologies, use the following links: https://www.facebook.com/ads/website_custom_audiences/ or http://networkadvertising.org/choices.
IronSource Mobile – Within the Mobile Application Steven Universe: Tap Together, SPYR uses ironSource’s Ad Network Service. Information may be collected by ironSource in accordance with its privacy policy, which can be found at https://developers.ironsrc.com/ironsource-mobile/air/ironsource-mobile-privacy-policy/