Privacy Policy

1. Scope and contact

Policy version: October 25, 2026.

PegPop is operated by HANGZHOU Honghan Software Technology Co.,Ltd. This policy describes data handling in PegPop and its related game services. For support or a privacy request, contact hank@hhsas.com. Apple and Google also process information under their own privacy policies when you use their services.

Contact address: Floor 3, Building 29, Longwu Tea Town, Zhuantang Subdistrict, Xihu District, Hangzhou, Zhejiang, China.

Chinese address: 浙江省杭州市西湖区转塘街道龙坞茶镇29号楼3楼。

2. Progress stored on your device

PegPop stores game progress, scores, collections, profile selections, game resources, purchase-entitlement information, sound and language preferences, timing records, and recovery records on your device. These records support continued play, offline access to downloaded content, and recovery after an interruption. The app also stores identifiers and a queue of events for the online and analytics functions described below. Playing without an platform game account does not mean that no analytics or advertising data is processed.

Uninstalling the app or clearing its data may remove local progress. Device backups and secure credential storage are managed separately by your operating system. Confirm your cloud backup and purchase-restoration options before changing devices or reinstalling.

3. Guest accounts and platform sign-in

Online features may create a device-based guest game account using generated credentials. Guest play is not anonymous to the service and does not mean that no analytics or advertising data is processed. A guest credential kept only on one device is not a promise of account recovery on a different device.

On supported Apple devices, Sign in with Apple authenticates an app-specific game identity. Google sign-in and binding on Android are available only when their provider configuration is enabled; Google sign-in is not configured in the Android 1.0.8 test release. Where enabled, platform identity proofs are used to authenticate, link supported devices and protect account operations. PegPop does not ask for your Apple or Google account password.

Android credentials are encrypted using the Android Keystore; iOS uses its secure credential storage. Game-account identifiers and cloud records are separate from the store account used to purchase the app's optional benefits. Signing out ends the game-account session; it does not delete the account or its data.

4. Cloud saves and visible player profiles

Account and cloud features send account-linked progress snapshots and synchronization records to the game service. They can include scores, collections, profile choices, resource balances and gameplay/reward records needed to restore progress and reconcile changes. Review a comparison before adopting a different account's save.

Online profiles can show a nickname, chosen avatar/frame, progress, gameplay statistics and a country/region code derived from device region settings. This code is not GPS location. Published team information and social relationships are processed to provide those features. Reports and blocking choices support moderation; fixed life-gift messages are not free-text chat.

The online nickname-review service sends proposed nickname text and a request batch index to DeepSeek through its chat-completions API to check naming rules. The current Android release does not show a separate AI nickname-consent dialog; do not put contact details or sensitive information in a nickname. This request does not include a full game-account profile. DeepSeek's exact API processing location, retention and secondary uses have not been confirmed; we do not promise an unverified deletion period or exclusion from model training.

5. Purchases and restoration

Where purchases are offered, Apple processes App Store payments and Google processes Google Play payments. PegPop uses platform-verified product, purchase-status, transaction and entitlement information to grant and restore permanent benefits, acknowledge completed purchases and reflect revocations or refunds. The optional lifetime product provides unlimited lives and removal of ads; it is not a subscription. Store services supply the localized price.

PegPop does not receive your card number or store-account password. Purchase analytics may include a product ID, displayed price/currency, result and hashed transaction reference. Raw purchase tokens, receipts and sign-in credentials are not sent in game-analytics events.

Deleting a game account does not delete your Apple or Google account, erase the store's transaction records or automatically refund a purchase. Restore purchases through the same store account that originally purchased the benefit. Apple and Google handle their respective payment and refund records.

6. Advertisements and privacy choices

PegPop uses Google AdMob for optional rewarded and interstitial advertisements. The Mobile Ads SDK may process IP addresses and approximate location inferred from them, device/advertising identifiers, ad views and interactions, app interactions, performance information and diagnostics. Google uses information for advertising, measurement, fraud prevention and operation of its services under its policies and applicable choices. Registered test devices can receive test creatives even when the app uses its own advertising units.

Google's User Messaging Platform updates applicable consent information. Where required and configured for the region, it presents a consent message and an Advertising privacy options entry for reviewing available choices. Ad requests depend on the SDK's permission to request ads. Device-level advertising controls may also be available on Android and iOS. A choice does not guarantee ad availability.

Google privacy policy: https://policies.google.com/privacy . Partner-app information: https://policies.google.com/technologies/partner-sites .

7. Game analytics and diagnostics

PegPop sends gameplay and service events to its independent analytics service to understand use, assess level balance, measure purchase/advertising flows and investigate faults. Events can include an installation identifier, session/run identifiers, times, version/platform, viewed pages, level/content IDs, scores, shots/skill choices, play duration, outcomes, resources, collections, purchase/ad results, reward delivery and bounded technical errors.

After account connection, an installation identifier and events may be linked to the game account; these records are not anonymous. Events can wait in a local queue before transmission. Android 1.0.8 enables independent game analytics by default while preserving an existing saved off choice. It does not provide a separate visible game-analytics switch. Advertising consent is not a switch for all independent analytics.

The new Android account-deletion flow stops and clears that device's pending analytics and queues deletion of records attributable to the deleted game account. Processing across services is asynchronous; a primary-account acknowledgement is not confirmation that every related record has already been removed. Older clients may not use this cleanup path. For analytics or installation-only information that cannot safely be attributed to an account, email hank@hhsas.com.

8. Connections and downloaded content

Account services, cloud saves, online time checks, analytics, advertisements and missing game-content downloads require network connections. Receiving services and their hosting/delivery providers may process connection information such as an IP address, request time, requested resource and outcome to deliver and protect the service.

On Android, the first 40 levels' resources are included and later chapter resources use Google Play Asset Delivery on demand. Downloaded content can be reused offline while it remains on the device. Apple-hosted content and other configured HTTPS content services are used on supported iOS versions. Cached files and download failures are separate from the player's saved progress.

9. Support messages

If you contact hank@hhsas.com, support receives your email address and the text, screenshots, and other information you choose to send. These are used to respond to your request and investigate the issue. A support summary can include the app version, level, connection and timing status, game-account support identifier, purchase mode, and available ad diagnostics. Review it before sharing.

Copying a support summary places it on your clipboard. Choosing an email link opens your email application; you decide whether to send the message. These actions do not automatically send an email. Do not include passwords, authorization tokens, card details, or unrelated personal information.

10. Recipients and service providers

PegPop operators and providers process information to run accounts, cloud saves, analytics, hosting, content delivery and support. Public profile/team information is visible as described in section 4. Information may also be disclosed under a valid legal requirement or to address fraud and security incidents.

Tencent Cloud hosts our account, cloud-save and independent analytics services in Shanghai, mainland China. Google provides Android Play Asset Delivery, Google Play billing and configured Google identity services; Apple provides the corresponding Apple identity, store and hosted-content services. Other iOS content delivery uses Alibaba Cloud OSS configured for Hangzhou, mainland China; configuration does not independently establish every storage or replication location.

DeepSeek receives the nickname-review request described in section 4. Google provides AdMob and related consent services. Email providers deliver/store support correspondence; their exact storage locations and retention arrangements have not been confirmed. Provider-held processing follows the applicable provider terms. We require providers to protect information consistently with this policy, but this is not a claim of an independently verified contract or security certification for every provider.

Apple privacy policy: https://www.apple.com/legal/privacy/ . Google privacy policy: https://policies.google.com/privacy . DeepSeek platform terms: https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html .

11. Storage, deletion processing and retention

Local records remain until replaced or removed through the appropriate account/app-data flow, subject to operating-system backups and secure storage. A confirmed Android account deletion removes that account's primary-service cloud, profile and related account records and queues attributable independent analytics cleanup. Jobs retry on temporary failure. Minimal hashed deletion receipts and replay-prevention records remain to authenticate retries and reject old account/event replays; they do not retain the deleted gameplay snapshot.

No general automatic expiry for all raw independent analytics is enabled in the deployed service. Records not covered by a verified account-deletion request can remain until separately reviewed and removed. Ordinary nickname audits are normally cleared after 30 days; some security and compatibility records follow separate rules.

Existing isolated analytics backups are not each rewritten immediately after a request. The updated controlled restore procedure reapplies the independent deletion ledger before publishing restored output. Historical/manual backups and provider-held copies need separate assessment. No fixed maximum age for every existing backup, ordinary log or support record is promised here. The historical backup schedule can retain daily backup dates and monthly copies without a common maximum age.

For access, deletion or retention questions involving analytics, logs, support mail, reports or backups, contact hank@hhsas.com. Support verifies the request and identifies applicable records, rights, legal exceptions and technical limitations. Account deletion is not a promise that all isolated backup or provider-held copies have already disappeared. Apple, Google, DeepSeek and other providers apply their own retention terms.

12. Delete an account and request data deletion

Android 1.0.8 or later: open Settings → Account & progress, connect/read the current guest or Google game account, then choose Delete game account and complete the permanent-deletion confirmation. This deletes the current game account and its cloud data, plus matching progress and records on that device. Other accounts' records and sound settings are preserved. If a connection or local-cleanup step is interrupted, use Continue account deletion to resume the same request; an unconfirmed result is not shown as success. Attributable analytics cleanup continues separately as described above.

On iOS, use Settings → Account & progress → Delete Apple game account and complete Apple reauthorization and confirmation. Follow any pending Apple authorization-revocation notice. Older Apple-client deletion does not by itself confirm independent analytics removal; contact support for those records.

Outside the app, or if the in-app route is unavailable, email hank@hhsas.com with the subject PegPop account and data deletion. Include the game player/support ID if available, platform and information you want removed; support may request proportionate ownership verification. Do not send passwords, private keys or authorization tokens. Support can handle account and associated-data requests through this route.

Deleting a game account is irreversible. Uninstalling, signing out and deleting an account are different actions. Data on other devices or operating-system/provider backups may require separate handling. Store purchases are managed separately and are not automatically refunded.

13. Privacy rights and choices

Depending on the law that applies to you, you may have rights to request access to, correction of, deletion of, or a copy of personal information; to restrict or object to certain uses; to withdraw consent where processing relies on it; or to complain to the relevant data-protection authority. Send requests to hank@hhsas.com and describe the information and action concerned. Advertising choices can also be reviewed through the available in-game advertising privacy options. Requests are assessed under the applicable law and may require verification. A change to consent does not change processing that was already lawful before withdrawal.

14. International processing and security

Our account, cloud-save and independent analytics services process information in Shanghai, mainland China. Players outside mainland China send information there when using those services. Additional configured iOS content delivery uses Hangzhou, mainland China; Google and Apple hosted downloads use their service arrangements. The exact nickname-API and support-mailbox processing locations have not been confirmed. Providers may process information in further countries under their terms, where protection rules can differ.

Configured online services use HTTPS. Android account and pending-deletion credentials are encrypted with Android Keystore protection; iOS uses secure credential storage. These measures reduce risk but cannot guarantee perfect storage/transmission security. Keep device and platform accounts secure and do not share credentials.

Contact hank@hhsas.com about international processing or privacy rights. This policy does not certify a particular international-transfer mechanism for every provider.

15. Children and guardians

PegPop is primarily intended for adult players.

Parents or guardians with questions about a child's use of PegPop, advertising, or personal information can contact hank@hhsas.com and request assistance or deletion of identifiable information. Please do not send more information about a child than is necessary to explain the request. A store content rating describes content suitability; it does not by itself establish whether a child can give legally valid consent to data processing.

16. Changes to this policy

This policy may be updated when PegPop's services or data practices change. The date above identifies this version. Review the policy available in the game and on the published PegPop privacy page. When applicable law requires additional notice or consent for a change, that requirement applies.