Bump And Merge Privacy Policy

📖 Definitions

Here is what the recurring terms mean throughout this policy:

📊 What We Collect

Automatically gathered

When you open Bump And Merge, our systems automatically record:

• Device Info — model, operating system, WebView, screen size
• Network details — IP address and connection type
• Identifiers — GAID, ANDROID_ID, or platform equivalents
• Usage Data — boards played, merges completed, session length, timestamps
• Diagnostics — crash logs and performance data

With your permission

• Advertising identifiers (GAID on Android, IDFA on iOS)
• Engagement and in-app event signals
• PayPal account email and name, used solely for withdrawals

🎯 How We Use It

Your Personal Data keeps Bump And Merge working, handles your Account and transactions, sends relevant updates, and improves the experience over time.

🤝 When We Share

We are selective about sharing — Personal Data leaves us only in the situations below.

• Service Providers — analytics, hosting, customer support, and payment processing
• Business Transfers — merger, acquisition, financing, or sale of assets
• Affiliates — entities under common ownership, subject to this policy
• Business Partners — parties with whom we jointly offer products or promotions
• Legal Obligations — where law, regulation, or valid legal process requires it
• Consent — any purpose disclosed at collection or later approved by you

🔐 App Permissions

Every permission is disclosed before installation, limited to the stated purpose, and aligned with Google Play Developer Program Policies.

📡 Analytics & Endpoints

Analytics and game services are delivered through https://dyxa.bumpmerge.com. Payloads handled by the analytics layer are anonymized and are not designed to carry personally identifiable information. The same endpoint supports core gameplay delivery, progress synchronization, stability work, and support tooling.

• Transport Layer Security (TLS) 1.2 or higher on every transmission
• Role-based access controls restricting data to authorized personnel
• Data minimization applied across all processing activities
• Recurring security reviews and vulnerability assessments
• Data Processing Agreements executed with third-party handlers

📣 Third-Party Services & Ad Partners

Advertising is served through AppLovin and its mediated partner network. Only limited categories reach advertising partners.

Advertising partner privacy policies

• AppLovin
• Chartboost
• Google
• InMobi
• IronSource
• Kwai
• Fyber
• Mintegral
• Moloco
• Bytedance (Pangle)
• Vungle
• Unity Ads
• Yandex
• BidMachine
• Verve
• Bigo
• TaurusX

🛡️ Data Security

We maintain commercially reasonable physical, administrative, and technical safeguards: encryption of sensitive data in transit, TLS 1.2 or higher, need-to-know access controls, periodic audits, and contractual security obligations for partners. No transmission or storage method is completely secure, so absolute security cannot be guaranteed.

🗂️ Data Retention

Not playing Bump And Merge? After 90 days of inactivity we remove your Personal Data permanently from our systems. Anything retained beyond that is anonymized or aggregated Usage Data that can no longer identify you.

⚖️ Your Rights

Depending on where you live, local law gives you tools to access, correct, delete, or restrict how we use your Personal Data.

To exercise any of these, email goldahuyettvu19975@gmail.com and name the right you want to use.

🚫 Opting Out

• Android: Settings → Google → Ads → “Opt out of Ads Personalization”
• iOS: Settings → Privacy → Advertising → “Limit Ad Tracking”
• Sale of Personal Data: email goldahuyettvu19975@gmail.com with the subject line Do Not Sell

🌍 International Transfers

Personal Data may be transferred to and processed on servers outside your country of residence. Such transfers are protected by TLS 1.2 or higher and, where required, by appropriate contractual safeguards including Standard Contractual Clauses.

🧒 Children's Privacy

Bump And Merge is not directed to individuals under the age of thirteen (13), and we do not knowingly collect Personal Data from children under 13. A parent or guardian who believes a child has provided Personal Data should contact goldahuyettvu19975@gmail.com; the data will be deleted promptly once verified.

📜 Disclosures

• Business transactions — Personal Data may transfer to an acquiring entity, with prior notice where practicable
• Law enforcement — disclosure may follow law, subpoena, court order, or governmental request
• Rights and safety — disclosure may occur in good faith to protect the rights, property, or personal safety of us, our users, or the public

🔗 External Links

The Application may link to websites or services we do not operate. We are not responsible for their content, privacy practices, or security, so please review the privacy policy of any external destination you open.

🚨 Data Breach Notification

If a data breach affects your Personal Data, we will notify you within 72 hours of becoming aware of the incident where applicable law requires it, describing the nature of the breach, its likely consequences, and the measures taken or proposed in response.

🧭 Do Not Track Signals

No consistent industry standard governs responses to browser Do Not Track (DNT) signals. Bump And Merge operates primarily as a native mobile experience, and where WebViews appear we do not currently alter practices based solely on DNT headers. Please use the device-level and email opt-out routes described above instead.

✏️ Policy Changes

This policy may be revised as features or laws change, with amendments taking effect once the updated text appears on this page and the "Last updated" line is refreshed. Material changes may be announced in-app or by other reasonable means.

✉️ Contact Us