1. Information we collect

Information you provide

Depending on the features you use, we may collect:

• Optional account information: information such as your email address, display name, user identifier, authentication method, and account creation or access records when you choose to create or sign in to an account.
• Communications: your email address and the contents of messages you send when you contact support or make a privacy request.
• Other information you choose to provide: information included voluntarily in support requests, feedback, or other communications.

We do not ask you to provide sensitive personal information in order to play the Game.

Information collected automatically

When you use the Game, including in guest mode, we and our service providers may automatically collect:

• Device and network information: device model, operating system and version, language, country or approximate location derived from IP address, IP address, mobile network, and app version.
• Identifiers: device or installation identifiers, advertising identifiers where permitted, account or app-instance identifiers, and similar technical identifiers.
• Gameplay and usage data: game sessions, progress, levels, actions, interactions, feature usage, app launches, taps, and other events within the Game.
• Advertising data: ad impressions, clicks, views, engagement, attribution data, and information used to measure advertising performance and prevent invalid traffic or fraud.
• Diagnostics: crash information, error reports, performance data, loading times, and other technical information about how the Game and its SDKs operate.

Information received from third parties

We may receive information from advertising, analytics, attribution, authentication, operating-system, and app-store providers. The information received depends on the services enabled, your settings and consent choices, and the provider's own practices.

2. How we use information

We may use information to:

• provide, operate, maintain, and improve Chem Merge;
• create, authenticate, maintain, and protect optional user accounts;
• save or synchronize progress and personalize gameplay features, where available;
• understand gameplay, engagement, and technical performance;
• display, personalize, measure, and limit advertising, as permitted by law and your choices;
• measure marketing campaigns and app installations;
• detect, prevent, and investigate fraud, abuse, security incidents, and technical problems;
• respond to support messages and privacy requests;
• comply with legal obligations and enforce our terms; and
• protect the rights, safety, and property of users, Mindup Studio, and others.

Where the Brazilian General Data Protection Law (Lei nº 13.709/2018, or "LGPD") applies, we process personal data under an appropriate legal basis, which may include performance of a contract or preliminary procedures, compliance with legal or regulatory obligations, legitimate interests subject to a balancing assessment, protection against fraud, and consent where required.

3. Third-party services and SDKs

Chem Merge uses or may use third-party software development kits (SDKs). These providers may process information under their own privacy policies and may act as independent controllers or as service providers, depending on the context.

For more information, review the providers' privacy materials:

• Google Privacy Policy
• Meta Privacy Policy
• Unity Privacy Policy

4. Advertising, consent, and choices

Chem Merge may display personalized or non-personalized ads. The type of ads shown may depend on your region, age-related settings, consent choices, device settings, and the configuration of our advertising partners.

Where required, we will request consent before using information for personalized advertising or certain analytics purposes. You may be able to review or change privacy choices through a consent screen in the Game, the Game's settings, or your device settings. You can also limit or reset your device's advertising identifier through your mobile operating-system settings. These choices may not eliminate ads, but they may reduce personalization.

5. How we share information

We may share information:

• with the advertising, analytics, attribution, hosting, authentication, support, and technical providers needed to operate the Game;
• when you direct us to share information or authorize a connection with a third-party service;
• to comply with law, legal process, or valid governmental requests;
• to investigate or prevent fraud, abuse, security threats, or violations of our terms;
• in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to appropriate safeguards; or
• with professional advisers where reasonably necessary and subject to confidentiality obligations.

We do not sell personal data for money. Certain advertising or analytics activities may be treated as "sharing," "targeted advertising," or a "sale" under some privacy laws even when no money is exchanged. Where those laws apply, we provide the choices required by law.

6. International data transfers

Mindup Studio is based in Brazil, while some service providers may process data in other countries. As a result, your information may be transferred to and processed in jurisdictions with data-protection rules different from those in your country. When required, we use appropriate contractual, organizational, and technical safeguards for international transfers.

7. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Game, maintain an account, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements. Retention periods vary according to the type of data, the purpose of processing, legal requirements, and whether the information can be deleted or anonymized.

If you delete your account or request deletion, we will delete or anonymize associated personal data unless retention is required or permitted by law. Data held by third-party providers may be subject to their own retention periods and deletion procedures. Aggregated or anonymized information that no longer identifies you may be retained.

8. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no transmission or storage system can be guaranteed to be completely secure.

9. Children and adolescents

We are committed to protecting children and adolescents. Where Chem Merge is made available to younger users, we process their personal data in their best interests and apply age-appropriate safeguards as required by the LGPD and other applicable laws.

We do not knowingly request more personal data from a child than is reasonably necessary to use the relevant features. Where parental or legal-guardian consent is required, we will seek it before processing covered personal data. Advertising and analytics services should be configured according to the user's age status and applicable child-directed-treatment requirements.

If you are a parent or legal guardian and believe a child has provided personal data inappropriately, contact us at contato@mindupstudio.com. We will review the request and take appropriate action, which may include deleting the data.

10. Your privacy rights

Subject to applicable law and the circumstances of the processing, you may request:

• confirmation that we process your personal data;
• access to your personal data;
• correction of incomplete, inaccurate, or outdated data;
• anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
• data portability, where applicable and subject to regulation;
• information about public and private entities with which data has been shared;
• information about the possibility of refusing consent and the consequences of refusal;
• withdrawal of consent and deletion of data processed based on consent, subject to legal exceptions;
• review of decisions made solely through automated processing, where applicable; and
• opposition to processing carried out in violation of the LGPD.

You may also lodge a petition with Brazil's National Data Protection Authority (ANPD) where applicable. We may need to verify your identity before fulfilling a request. Authorized agents, parents, or legal guardians may be asked to provide evidence of their authority.

11. Account and data deletion

If you created an account, you may request deletion of the account and its associated personal data by using any deletion option available inside Chem Merge or by emailing contato@mindupstudio.com with the subject "Chem Merge Account Deletion Request."

Please include enough information to identify the account, but do not send your password. We may ask for reasonable verification to prevent unauthorized deletion. After verification, we will delete or anonymize the account and associated personal data, except information that must or may be retained for legal, security, fraud-prevention, dispute-resolution, or recordkeeping purposes.

If you played only as a guest, we may have limited ability to identify data associated with your installation. Include any player, installation, or support identifier shown in the Game, if available, so we can assess the request.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in the Game, our service providers, our practices, or applicable laws. The "Last updated" date at the top shows when the latest version became effective. Where required, we will provide additional notice of material changes.

13. Contact us

If you have questions, concerns, or requests concerning this Privacy Policy or your personal data, contact:

Mindup Studio
Florianópolis, Santa Catarina, Brazil
Email: contato@mindupstudio.com