1. Who we are
TINYBOX Studio (“TINYBOX”, “we”, “us”, or “our”) develops and publishes games, apps, websites, and playable experiences. We are based in Hanoi, Vietnam. Contact: info@tinyboxstudio.com.
2. Information covered by this policy
What we process depends on the product, platform, device settings, region, and features you use. Categories may include:
- Information you provide: name, email address, support messages, project enquiries, feedback, and information you voluntarily include in a request.
- Device and technical data: device model, operating system, app version, language, country or coarse region, IP address, network status, advertising identifier, and similar technical identifiers.
- Gameplay and app activity: progress, level events, tutorial state, feature interactions, session data, preferences, virtual item balances, and save data.
- Diagnostics: crash reports, performance data, error logs, and information needed to detect fraud, abuse, or security incidents.
- Purchase information: product ID, purchase status, transaction identifier, entitlement, and receipt validation data. Payment card details are handled by the platform store and are not provided to us.
- Consent choices: advertising consent, privacy choices, and related region or eligibility signals.
Some products work without accounts and keep progress only on your device. A product that uses cloud saving will identify that feature in-app or in its store disclosure.
3. How we use information
- Provide gameplay, app features, saves, purchases, customer support, and requested services.
- Maintain security, prevent fraud, diagnose crashes, and improve reliability and usability.
- Measure product performance and understand aggregated feature usage.
- Show, limit, personalize, and measure advertising where allowed and where required consent has been obtained.
- Comply with legal duties, platform rules, tax, accounting, and dispute-resolution requirements.
Depending on applicable law, processing may rely on contract performance, legitimate interests, legal obligations, or your consent. You may withdraw consent through in-product privacy choices or device settings where available.
4. Advertising, analytics, purchases, and platforms
Products may use service providers such as:
- Google Mobile Ads and User Messaging Platform: ad delivery, frequency control, measurement, fraud prevention, and consent management.
- Firebase Analytics, Crashlytics, and Remote Config: aggregated usage measurement, crash diagnostics, and safe configuration changes.
- Google Play services and Google Play Billing: distribution, licensing, purchases, refunds, and entitlement status.
- YouTube Playables: platform lifecycle, language, audio state, cloud save, and score features for playable versions distributed by YouTube.
- Cloudflare: website and service delivery, network security, abuse prevention, and technical request logs.
These providers process data under their own terms and privacy policies. Not every provider is present in every product. We do not sell personal information. Advertising partners may receive device or advertising identifiers where permitted by law and your consent choices.
5. Sharing
We may share information with service providers acting for the purposes above, with platform operators, when required by law, to protect users or our services, or during a business reorganization. We require providers to use information only for authorized purposes and apply appropriate protections.
6. Retention and deletion
- Local app data remains until you delete it in the product, clear app data, or uninstall, subject to operating-system backup behavior.
- Support and business correspondence is retained only as long as needed to resolve the request and meet legal or operational obligations.
- Analytics, advertising, diagnostics, purchase, and security records follow provider settings and applicable retention requirements.
- Some records may be retained when required for fraud prevention, accounting, legal claims, or platform compliance.
To request access, correction, or deletion of information controlled by TINYBOX, email info@tinyboxstudio.com with the product name, platform, and enough information to locate your request. Do not send passwords, full payment details, or sensitive save files by ordinary email.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. You may also:
- Use the product’s Privacy Choices control when available.
- Limit ad personalization or reset the advertising identifier in device settings.
- Disable notifications, analytics permissions, or other optional permissions in device settings.
- Contact us to appeal or ask questions about a privacy response.
8. Children
Unless a product-specific notice says otherwise, TINYBOX products are intended for users aged 13 or older and are not directed to children under 13. We do not knowingly collect personal information from children below the applicable minimum age. A parent or guardian who believes a child provided information may contact us for review and deletion.
9. International processing and security
Information may be processed in Vietnam and in countries where our platform and service providers operate. We use reasonable technical and organizational safeguards, including encrypted transport where supported, access controls, and data minimization. No system is completely secure, so absolute security cannot be guaranteed.
10. Third-party links and services
Our products may link to platform stores, support pages, or third-party services. Their privacy practices are controlled by those third parties. Review their notices before providing information.
11. Changes
We may update this policy when products, providers, or legal requirements change. The effective date at the top shows the latest revision. Material changes may also be announced in-product or through the relevant store listing.
12. Contact
TINYBOX Studio
Hanoi, Vietnam
info@tinyboxstudio.com
tinyboxstudio.com