Privacy Policy

Effective Date: October 13, 2026

This End-User Confidentiality & Data Covenant establishes the binding operational standards by which PT POLA PAPERINDO JAYATAMA (alternatively designated as "we," "us," or "our") compiles, administers, and insulates your personal records while you engage with our mobile software, Track Logic: Grid Puzzle, on the Google Play platform. We actuate your data strictly to deliver a premier interactive gaming environment and to guarantee a frictionless user journey.

1. Protocols for Information Accrual

Dedicated to upholding supreme standards of digital security, we deploy diverse technical channels to accrue, utilize, and govern your personal particulars. The subsections below itemize the exact classifications of information we register and our corresponding administration methods.

1.1 Automated Record Compilation Whenever you launch or interact with Track Logic: Grid Puzzle, our backend systems are configured to automatically register the following general categories of user data:

Connection Metadata: Your Internet Protocol (IP) routing address, exact timestamps of server handshakes, and overarching hardware classifications.

Hardware Architecture: The specific device builder, model designation, active operating system (Android/Google OS iterations), regional time zone settings, and system-level language preferences.

Unique Hardware Tokens: Network tags tethered to the specific device utilized for gameplay, encompassing your Google Advertising ID (GAID), Android Device ID, Google Play Games profile identifier, and your core Google account ID.

Gameplay Progression Logs: Your chronological in-game advancement, peak score thresholds, unlocked digital milestones, and interaction logs derived from multiplayer sessions.

Commercial & Virtual Ledgers: Historical purchase receipts, logs of virtual item depletion, tailored gameplay configurations, and records detailing the acquisition of in-game currency or digital goods.

1.2 External Authentication Ecosystems In the event you elect to verify your account via third-party networks, such as Google Play Games Services, we will fetch applicable profile particulars (including your public alias and profile metadata) from that ecosystem, strictly observing their official authorization frameworks. This data retrieval is entirely contingent upon your prior agreement to that third party's data-sharing stipulations. You may audit how these external networks govern your information by reviewing their official privacy documentation:

Google Play Games / Google Services: https://policies.google.com/privacy

By leveraging an external platform to access our application, you formally affirm that:

Your interaction with our game's features complies fully with the active terms and conditions enforced by that third-party provider.

You satisfy the statutory minimum age threshold established by the external platform under the laws of your local jurisdiction.

2. Lawful Mandates for Data Administration

We administer your personal records to achieve the distinct operational objectives outlined below, ensuring that every processing activity is anchored in a valid statutory framework:

Core Application Delivery & Helpdesk: To fulfill commercial orders, resolve your support inquiries, and sustain open communication channels; to power foundational game mechanics, customize your interactive experience, and dispatch technical patches, security warnings, and customer care notices.

Statutory Mandate: This administration is legally grounded in Article 6(1)(b) of the General Data Protection Regulation (GDPR) (necessity for contract performance). It is compulsory for honoring our user agreement, maintaining server infrastructure, and ensuring seamless software updates.

Product Evolution & Promotional Outreach: To dispatch promotional updates regarding PT POLA PAPERINDO JAYATAMA or vetted third parties aligned with your preferences; to cache your custom configurations; and to evaluate gameplay metrics to conceptualize new features and elevate the quality of our software, marketing campaigns, and user support.

Statutory Mandate: This processing relies on GDPR Article 6(1)(f) (legitimate interests). We leverage this data to fulfill our legitimate corporate interest in presenting compelling content and continuously upgrading our operational standards.

Tailored Commercial Broadcasting: To display customized advertisements and relevant promotional content to players who have explicitly permitted our marketing affiliates to access their device identifiers.

Statutory Mandate: Equally supported by GDPR Article 6(1)(f), this processing is driven by our legitimate commercial interest in funding our platform via targeted advertising and refining our service offerings.

3. Archival Lifespans and Data Holding

Your personal information is preserved solely for the timeframe required to provision our gaming services, satisfy statutory obligations, and assert or defend our legal rights. For contingencies involving conflict resolution, enforcement of user agreements, backend infrastructure maintenance, regulatory adherence, or the mitigation of security vulnerabilities, we may isolate and retain specific portions of your data in our archives for a legally defensible duration. Furthermore, we hold Usage Data for internal metric evaluations. This aggregated data is generally retained for brief intervals, unless extended preservation is strictly required to fortify system security, upgrade application functionality, or satisfy binding regulatory retention windows.

4. External Data Transmission Protocols

Honoring your statutory rights and operating in strict alignment with GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may remit or facilitate the sharing of your compiled information with designated external entities under the following circumstances:

Allied Corporate Entities: For the execution of joint services, statutory compliance, corporate asset transfers, or other initiatives for which you have supplied explicit consent.

Judicial and Sovereign Authorities: Should we suspect a breach of our policy guidelines, or if data disclosure becomes legally compulsory to safeguard the physical safety, legal rights, and intellectual property of PT POLA PAPERINDO JAYATAMA and the broader public.

The Public Gaming Community: During your active participation in public message boards, multiplayer matches, or when your performance metrics are broadcasted on global leaderboards.

4.1 Transmission to Advertising Networks Provided you have granted explicit consent as stipulated by GDPR Article 6(1), we will transmit your device identifiers to advertising networks to enable the delivery of personalized ad experiences. Our current and prospective advertising associates include:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Caveat: This Covenant does not govern how these external organizations independently utilize your data. We strongly advise reviewing their respective privacy documentation if you have concerns regarding their data management practices.

4.2 Delegated Technical Vendors To sustain our backend operations, we partner with specialized third-party data processors, encompassing cloud hosting facilities, authentication gateways, and analytical platforms:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

5. Underage User Safeguards

Track Logic: Grid Puzzle is neither engineered for, nor commercially directed at, individuals under 13 years of age. We do not intentionally harvest identifiable records from children beneath this age threshold. Should we discover that we have inadvertently compiled such details, we will swiftly expunge the data from our databases. If you are a legal guardian and realize your child has submitted personal particulars to us, please contact us immediately so we can execute corrective measures.

6. Cryptographic & Operational Defense

We deeply value the trust you place in us and deploy commercially viable security frameworks to insulate your personal data. Nevertheless, it is vital to recognize that no digital storage architecture or internet transmission method is flawlessly impenetrable. Consequently, we cannot warrant the absolute invulnerability of your information.

7. System-Level Push Alerts

Provided you have explicitly opted in, we will broadcast game alerts, promotional campaigns, and crucial software updates directly to your Android/Google hardware. You reserve the absolute right to opt out of these push notifications at any time by adjusting your device's native system settings.

8. Consumer Statutory Rights

8.1 Rights for European Economic Area (EEA) Residents We are committed to addressing your privacy inquiries promptly, ensuring a formal response within one month of receipt. In instances involving exceptionally complex requests, we may extend this resolution window by a maximum of three months, as permitted by GDPR Article 12. You will be proactively notified of any such delay and the underlying justification.

(1) Right to Access Data: Under GDPR Article 15, you may demand comprehensive details regarding the data we hold on you, encompassing processing motives, data categories, recipient entities, and projected storage lifespans. You may also request a digital copy of this data, subject to restrictions involving trade secrets or intellectual property.

(2) Right to Object to Processing: As per GDPR Article 21, you may contest data processing activities predicated on the "legitimate interests" clause (Article 6(1)(f)). Upon objection, we will halt the processing unless we demonstrate compelling legal grounds that supersede your individual rights. Furthermore, you retain an unconditional right to object to processing for direct marketing purposes.

(3) Right to Correction: Under GDPR Article 16, you are entitled to mandate that any inaccurate or incomplete personal records be rectified immediately.

(4) Right to Limit Processing: According to GDPR Article 18, you can compel us to restrict the active processing of your data under specific statutory conditions. When restricted, we will only process the data with your explicit consent, for legal claims, or for substantial public interest reasons.

(5) Right to Revoke Consent: Following GDPR Article 7, if our operations rely on your explicit consent, you may nullify it at any moment. This withdrawal will halt future processing of the relevant data but will not retroactively invalidate processing that occurred prior to the revocation.

(6) Right to Data Transfer: Per GDPR Article 20, you possess the entitlement to receive your personal data in a universally readable, structured digital format, and to mandate the transfer of this data to a different data controller without systemic hindrance.

8.2 Rights for California Residents (CCPA)

(1) Timeframe for Request Fulfillment: We strive to resolve verifiable consumer inquiries within 45 days. If a time extension is required (up to 90 days total), we will notify you in writing regarding the justification and the revised timeline.

(2) Extent of Disclosure: Data disclosures will strictly encompass information compiled during the 12-month period immediately preceding your formal request. We will deliver this data in an easily accessible format to facilitate seamless portability.

(3) Right to Opt-Out of Data Sales: The California Consumer Privacy Act (CCPA) empowers you to direct businesses to cease the commercial sale of your personal information to external parties.

(4) Right to Information: You are entitled to understand exactly what categories of personal data we accrue and why. This information is transparently codified within this Covenant, which is updated at least annually.

(5) Right to Request Data Records: You may request a detailed ledger of the personal information we have logged about you over the past 12 months, including data sources, collection motives, and third-party sharing practices. You may exercise this access right free of charge twice per calendar year.

(6) Right to Erasure: You can petition for the permanent expungement of personal data collected over the preceding 12 months. While we honor this right, specific statutory exemptions—such as maintaining active services, troubleshooting technical errors, protecting free speech, or adhering to legal mandates—may require us to retain certain data points.

9. Initiating Record Expungement

Whenever it is no longer strictly necessary for us to harbor your personal particulars, you may instruct us to securely eliminate them. To trigger a formal deletion protocol, please submit your directive to the compliance email provided below.

10. Privacy Compliance Liaison

For any inquiries, security concerns, or formal requests concerning this Covenant, please reach out to us at: Contact Email: [email protected]