PRIVACY POLICY - MAGIC FRUIT WORLD Zelcar Games LLC - Document No. TYC-002 - Version 1.3 - Effective October 14, 2026 - Replaces Version 1.2 (October 12, 2026) and Version 1.1 (September 22, 2026) At a glance. Magic Fruit World is free to download and does not show third-party advertisements inside the game. We collect the information needed to run your account, keep the game stable and fair, process purchases through the official stores, and measure whether our own advertising campaigns bring new players. Our analytics and attribution partners are AppsFlyer (attribution and marketing measurement), Firebase Analytics and Firebase Crashlytics (Google). Advertising platforms on which we promote the game (currently Meta, Apple Ads and TikTok) receive campaign measurement data through AppsFlyer, never your name, email, contacts or messages. Accounts flagged as belonging to children are excluded from AppsFlyer and from all advertising partners and never receive personalized advertising. You can delete your account at any time from Settings > Account > Delete account. Privacy contact: admin@zelcar.games. 1. INTRODUCTION Zelcar Games LLC, a limited liability company organized under the laws of the State of New Mexico, United States, with its registered office at 2201 Menaul Blvd NE, STE A, Albuquerque, NM 87107, USA (hereinafter referred to as the "Company", "Zelcar Games", "we", "us", or "our"), respects the privacy of its users and is committed to protecting the personal information collected in connection with the use of its services. This Privacy Policy describes how we collect, use, store, share, and protect personal information in relation to the video game Magic Fruit World on every platform on which it is distributed (including iOS, Android, Steam, and the Epic Games Store), as well as related websites, online services, digital content, and features (collectively, the "Service"). Zelcar Games LLC is the data controller of the personal information described in this Policy, meaning the entity that determines why and how that information is processed, except where this Policy states that a third party acts as an independent controller. This Policy forms part of, and must be read together with, the Terms and Conditions of Use available at https://web.zelcarserver.com/sfb/public/contract/1 (the "Terms"). Capitalized terms not defined here have the meaning given to them in the Terms. By accessing or using the Service, the user acknowledges the practices described in this Privacy Policy. Where applicable law requires consent for a specific processing activity (for example, access to the advertising identifier on iOS), we ask for that consent separately and you may refuse or withdraw it at any time. For any question or request regarding privacy, contact us at admin@zelcar.games (see Section 20). 2. INFORMATION WE COLLECT The categories of personal data we collect depend on the Service used by the user, the features utilized, the platform, and the requirements established by applicable law. 2.1 Information provided directly by the user We may collect information that the user provides directly when using the Service, including but not limited to: Contact information, such as email address or other data necessary for account creation and account recovery. Username, player tag, friend or referral code, and login credentials. Date of birth or age range, where the Service requests it (see Section 2.4). Profile information, such as images or data the user voluntarily chooses to include. Messages, communications, and any content sent through the Service, including chat logs and support requests. Information provided when participating in surveys, promotions, sweepstakes, competitions, or other events organized by the Company. Any other information the user voluntarily chooses to provide when interacting with the Service or with Zelcar Games' official channels. Payment data related to purchases made within the Service is processed directly by the platform through which the purchase is made (Apple App Store, Google Play, Steam, or the Epic Games Store) and their authorized payment providers. Zelcar Games LLC does not receive or store full credit card numbers or other payment instrument details. 2.2 Information collected automatically When the user uses the Service, we may automatically collect certain technical and usage information, including: Account information, in-game progress, and automatically generated internal identifiers (for example, a random user ID assigned to your account and installation identifiers generated by our software development kits). IP address and device or system identifiers used to access the Service. Technical device information such as operating system and version, device model, language, time zone, screen characteristics, internet service provider, network type, or browser characteristics. Advertising identifiers (Apple IDFA or Google Advertising ID), only where permitted by your device settings: on iOS, only if you allow tracking through Apple's App Tracking Transparency prompt; on Android, subject to your advertising settings. See Section 13. Attribution data: information about how you came to install the game, such as the advertising campaign, referral link, or store page that led to the installation, provided by our attribution partner. Crash, error, and performance data: crash reports, stack traces, device state at the time of a crash, app version, and similar diagnostic information. Data collected through cookies and similar technologies on our websites, as described in Section 7. Approximate location data (country or region) derived from the IP address. We do not collect precise geolocation from your device. Information related to the use of the Service, including in-game interactions, sessions, progress, usage statistics, purchases made, and general user activity. 2.3 Information obtained from third parties and partners In certain cases, we may receive information from third parties or partners providing services related to the operation of the Service, such as: Platforms or external services linked by the user to the Service when such linking is authorized by the user. Analytics, attribution, advertising, or fraud-prevention providers, in order to improve the security, stability, and performance of the Service and to measure our marketing. Platforms where the game is distributed or payment providers, solely to the extent necessary to verify transactions, deliver purchased content, handle refunds, or prevent fraudulent activity. Demographic or statistical information used in aggregated form to improve the user experience. Feedback, reviews, or suggestions voluntarily published by the user on public platforms or third-party websites related to the Service. 2.4 Age information The Service may ask for your date of birth or age range when you create an account or at first launch (an "age gate"). We use this information solely to determine whether an account must be treated as a child account under Section 10, to apply the corresponding restrictions, and to comply with our legal obligations. Age information is never used for advertising purposes and is not shared with advertising partners. 3. HOW WE USE THE INFORMATION Zelcar Games LLC uses the collected information to operate, maintain, improve, and protect the Service, as well as to comply with legal and contractual obligations. The processing of personal information is carried out in accordance with applicable legal bases, including contract performance, the Company's legitimate interests, compliance with legal obligations, and, where applicable, user consent. Section 15 contains additional detail on legal bases for users in the European Economic Area, the United Kingdom, and Switzerland. 3.1 Operation of the Service We use the collected information to: Create and manage user accounts and enable access to the Service. Operate, maintain, and provide the game and related services, including saving and synchronizing your progress. Verify and confirm transactions and payments made through the official stores, and deliver purchased content. Provide products, content, and services requested by the user. Communicate with users regarding the operation of the Service, including technical notices, updates, security alerts, and support messages. Manage the relationship with users and respond to inquiries or support requests. Apply regional rules to rankings, creator statistics, and promotions based on your country or region (for example, local leaderboards, or excluding certain countries from a launch gift or promotional code where local rules require it). The processing of this data is necessary for the proper performance of the contract between the user and Zelcar Games LLC. 3.2 Improving the Service and user experience Based on the Company's legitimate interest in improving its products and services, we use the information to: Analyze how users interact with the Service. Develop, improve, and optimize the operation of the game and its features. Diagnose and fix crashes, errors, and performance problems. Personalize the user experience within the Service. Maintain internal statistics and performance analysis. Develop new features, content, or services. Provide social features and facilitate interaction between users where applicable. 3.3 Security, fraud prevention, and fair use To ensure a safe and fair environment for all players, we use information to: Detect, prevent, and investigate fraudulent or abusive activity, including fraudulent installations, payments, and referrals. Monitor the use of the Service and its social features. Moderate communications within the Service manually or through automated systems. Enforce the Terms and take action against violations. Protect the rights, property, and safety of the Company, its users, and third parties. In some cases, moderation or assistance systems may use automated tools. Where required by applicable law, users may request human review of a decision made by such systems. 3.4 Analysis, profiling, and segmentation For the purposes described above, Zelcar Games LLC may analyze, group, or segment collected information in order to improve the Service, optimize its operation, and understand general usage trends. These processes are not intended to make automated decisions producing legal or similarly significant effects on the user. 3.5 Advertising, marketing measurement, and promotional communications Magic Fruit World is free to download and, as of the effective date of this Policy, does not display third-party advertisements inside the game. We do promote the game through advertising campaigns on third-party platforms (currently Meta, Apple Ads, and TikTok), and we measure whether those campaigns lead to installations and purchases. For these purposes we use information to: Attribute installations and in-game events (such as a first open, tutorial completion, or purchase) to the campaign, advertisement, or referral link that generated them, through our attribution partner AppsFlyer (see Section 13). Report conversion results to the advertising platform that showed the advertisement, so that it can measure and optimize our campaigns, in the form described in Section 13. Detect and exclude fraudulent installations and prevent payment of advertising fees for fake traffic. Display promotional content, offers, or recommendations related to the Service itself within the game. If in the future the Service includes third-party advertising, this Policy will be updated before such advertising is introduced, and information may then be used to display promotional content, measure the effectiveness of advertising campaigns, prevent excessive repetition of advertisements, and improve the relevance of displayed content. Where required by applicable law, advertising-related data processing will only occur with user consent. Users may withdraw their consent at any time through device settings (see Section 6.3), game settings, or the mechanisms described in this Policy. Where advertising identifiers such as IDFA or GAID are used, they will be processed in accordance with user privacy settings and applicable regulations. Accounts flagged as child accounts are excluded from all advertising measurement and never receive personalized advertising (see Section 10). 3.6 Processing based on consent In certain cases, Zelcar Games LLC may process personal information for additional purposes provided the user has previously given consent. Such consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal. 4. WITH WHOM WE SHARE INFORMATION Zelcar Games LLC may share personal information only in the situations described below and only to the extent necessary to operate the Service, comply with legal obligations, or protect legitimate rights. 4.1 Other players and users When the Service includes social or interactive features, certain information may be visible to other players, including: Player name or tag Profile information In-game activity Content or messages posted through chats, forums, or other social features Users acknowledge that any information voluntarily shared in public areas of the Service may be visible to other users. 4.2 Service providers Zelcar Games LLC works with third-party providers that perform services necessary for the operation of the Service. These providers may process personal information only following instructions from the Company and solely for the purposes described in this Privacy Policy. Services may include: Cloud hosting and content delivery services Payment processing (through the official stores, see Section 4.4) Customer support and email delivery services Analytics, crash-reporting, telemetry, and attribution tools (see Section 13) Security and fraud-prevention systems Technical infrastructure required to operate the game These providers are subject to contractual confidentiality and data protection obligations. 4.3 Platforms, companies, and public authorities We may share information when necessary to: Verify transactions or prevent fraud Comply with legal obligations or respond to lawful requests from courts, regulators, or public authorities Protect the rights, property, or safety of Zelcar Games LLC, its users, or third parties Enforce the Terms or other agreements Information may also be shared when the user has given explicit consent. 4.4 Distribution platforms, technology partners, advertising partners, and social networks The game is distributed through the Apple App Store, Google Play, Steam (Valve Corporation), and the Epic Games Store (Epic Games, Inc.). These platforms process your purchases, payments, refunds, and platform account under their own privacy policies, as independent controllers. We receive from them only the information needed to deliver and verify purchases (for example, a transaction identifier, the product purchased, price, currency, and the country of the store), and never your full payment details. The Service also integrates tools or technologies provided by third parties such as analytics tools, crash reporting, attribution SDKs, APIs, or advertising systems. Our current partners and the data each one receives are listed in Section 13. These partners may access certain technical or device usage information, including: IP address Device identifiers (advertising identifiers only where your device settings allow it) Operating system or game client information Interaction data with the Service These third parties operate under their own privacy policies, which we recommend reviewing when applicable. Users may limit or disable such processing as described in Section 6.3 and Section 13.5, or through their device settings. 4.5 Business transfers If Zelcar Games LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be transferred to the successor or acquirer as part of that transaction, subject to this Policy or to a policy offering at least an equivalent level of protection. We will notify users of any such change in ownership or use of their personal information as required by law. 4.6 Aggregated and de-identified information We may create and share aggregated or de-identified information that can no longer reasonably be linked to an individual (for example, overall player counts, retention statistics, or campaign performance totals). Such information is not personal information and may be used for any lawful purpose. 4.7 No sale of personal information Zelcar Games LLC does not sell personal information in exchange for money and does not share your name, email address, contacts, chat messages, or game progress with advertising partners. Certain disclosures of device-level data to advertising platforms for the measurement of our own campaigns may qualify as "sharing" for cross-context behavioral advertising under California law; Section 14 explains how to opt out. We do not knowingly sell or share the personal information of any user under 16 years of age. 5. INTERNATIONAL DATA TRANSFERS Because the Service operates internationally, personal information may be transferred, stored, or processed in countries other than the user's country of residence, including the United States or other countries where Zelcar Games LLC or its service providers operate. Users acknowledge that data protection laws in these countries may differ from those in their jurisdiction. However, Zelcar Games LLC takes reasonable measures to ensure that any international transfer of information is carried out with an appropriate level of protection and in accordance with applicable law. These measures may include: Contractual agreements incorporating standard data protection clauses approved by the European Commission or the United Kingdom, where applicable The use of providers that comply with recognized privacy and security frameworks, such as the EU-U.S. Data Privacy Framework, where the provider is certified Technical and organizational safeguards designed to protect personal data from unauthorized access, loss, or misuse By using the Service, the user acknowledges that their information may be transferred and processed in accordance with this Privacy Policy. Users may request further information about the safeguards applied to a specific transfer by contacting admin@zelcar.games. 6. USER RIGHTS AND CHOICES 6.1 Marketing communications Where permitted by applicable law, Zelcar Games LLC may send communications related to the Service, including updates, news, promotions, or other information based on the existing relationship with the user. Users may opt out of promotional communications at any time by following the unsubscribe instructions included in such messages or by adjusting their preferences within the Service when available. Users may still receive non-promotional communications necessary for the operation of the Service, such as purchase confirmations, security alerts, or changes to this Policy or the Terms. 6.2 Push notifications The Service may send push notifications through mobile applications or compatible devices. Users may disable these notifications at any time through their device or operating system settings. 6.3 Advertising identifiers, tracking, and opt-out options You control whether our partners may use your device's advertising identifier: On iOS, the game asks for permission through Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", we do not access your IDFA and do not link your account to AppsFlyer data. AppsFlyer still receives limited device and usage data (app-vendor ID, AppsFlyer device ID, IP address, app opens, tutorial completion) to measure campaigns in aggregate, including through Apple's SKAdNetwork and AdServices, and to resolve invite links. This data is not used to track you across other companies' apps or websites. You can change this decision at any time in Settings > Privacy & Security > Tracking. On Android, you can reset or delete your Google Advertising ID and opt out of ads personalization in Settings > Google > Ads (the exact path may vary by device). When the advertising ID is deleted, our partners receive a string of zeros instead of an identifier. You can also opt out of AppsFlyer's processing of your device data for all AppsFlyer customers at https://www.appsflyer.com/optout, and request that we exclude your account from marketing measurement by writing to admin@zelcar.games. Where the Service in the future includes interest-based or personalized advertising, users will be able to limit or disable such advertising through device privacy settings or in-game options. 6.4 Access to personal information Users have the right to request access to the personal information that Zelcar Games LLC holds about them. Where applicable by law, such information may be provided in a structured, commonly used, machine-readable electronic format (data portability). 6.5 Rectification, deletion, and restriction Users may request: Correction of inaccurate or incomplete personal data Deletion of personal information, including by deleting their account directly in the game as described in Section 12 Restriction of, or objection to, certain data processing, including processing based on legitimate interests Withdrawal of previously given consent Zelcar Games LLC will respond within the time limits established by applicable law (for example, one month in the European Economic Area and the United Kingdom, extendable where permitted, and 45 days in California), and in any event within a reasonable timeframe. 6.6 Exercising rights and identity verification To exercise these rights, users must contact us at admin@zelcar.games or through the in-game options described in this Policy. For security reasons, Zelcar Games LLC may request additional information to verify the user's identity (for example, confirmation from the email address associated with the account, or the player tag and recent in-game activity) before processing a request. We will only use that information for verification. Users may designate an authorized representative where permitted by law; we may require proof of the representative's authority and may still verify the identity of the user directly. 6.7 Non-discrimination Exercising these rights will not result in discriminatory treatment by Zelcar Games LLC, such as denying the Service, charging different prices, or providing a different level of quality. 6.8 Complaints If you believe that we have not handled your personal information or your request properly, please contact us first at admin@zelcar.games so that we can resolve the matter. You also have the right to lodge a complaint with the data protection authority of your country of residence, place of work, or place of the alleged infringement, where such a right exists under applicable law. 7. COOKIES AND SIMILAR TECHNOLOGIES Zelcar Games LLC and its service providers may use cookies and similar technologies on our websites and, to a limited extent, within the game to operate, improve, and personalize the Service, analyze usage, prevent fraud, measure our advertising, and, when applicable, display relevant advertising. These technologies may include: Browser cookies Device identifiers Local storage Analytics tools Pixels and tags provided by advertising and analytics platforms, such as Google tags (Google Analytics and Google Ads), the Meta Pixel, and the TikTok Pixel, used on our websites to measure traffic and the performance of our advertising Users may configure their browser or device to reject or delete cookies, although some Service features may not function properly if certain cookies are disabled. Major browsers provide tools to manage cookies, including: Apple Safari Google Chrome Microsoft Edge Mozilla Firefox Additional information about interest-based advertising management can be found at: https://optout.aboutads.info/ https://www.youronlinechoices.eu/ Where required by law, user consent will be requested before using non-essential cookies. 8. INFORMATION SECURITY Zelcar Games LLC implements reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. Communications with our account, store, and game-progress servers use encrypted connections (HTTPS), and access to personal information is restricted to personnel and providers who need it to perform their duties. However, users acknowledge that no internet transmission or storage system is completely secure. Although Zelcar Games LLC makes reasonable efforts to protect personal information, absolute security cannot be guaranteed. Users are responsible for maintaining the confidentiality of their login credentials and must immediately report any unauthorized use of their account to admin@zelcar.games. 9. DATA RETENTION Zelcar Games LLC retains personal information while the user account remains active or as long as necessary to provide the Service, comply with legal obligations, resolve disputes, or enforce agreements. In general: Account and progress data is retained while the account is active and is deleted or anonymized after the account is deleted (see Section 12 for the deletion timeline). Transaction records necessary for accounting, tax, refund handling, and fraud prevention are retained for the period required by applicable law, even after the account is deleted. Support communications are retained for as long as necessary to resolve the request and to keep a record of how it was handled. Analytics, crash, and attribution data held by our partners is retained for limited periods under our configuration and the partner's standard terms, and is then deleted or aggregated. Contact codes from the "Find friends from contacts" feature are retained as described in Section 11. Security logs and anti-fraud records are retained for a limited period proportionate to their purpose. The Company may periodically delete, anonymize, or disconnect data that is no longer required. Certain information may be retained for a longer period where necessary to comply with legal obligations, prevent fraud, maintain administrative records, resolve disputes, or protect the Company's legitimate interests, including the retention of a minimal record of a deletion request so that we can demonstrate compliance. 10. CHILDREN Protecting children's privacy is particularly important to Zelcar Games LLC. The Service is not directed to children under the age of 13, or a higher age where required by applicable law (for example, the age of digital consent in certain countries of the European Economic Area, which may be up to 16). The age rating assigned to the game is shown on each store listing (Apple App Store, Google Play, Steam, and the Epic Games Store) and may differ from one store to another. Zelcar Games LLC does not knowingly collect personal information from children without appropriate parental or legal guardian consent, except where strictly necessary for the internal operation of the Service, as permitted by the United States Children's Online Privacy Protection Act (COPPA) and similar laws. Child accounts. Where the Service asks for age information, or where we otherwise learn that an account belongs to a child under 13 (or the applicable higher age), that account is flagged as a child account and treated as follows: No data about the account is sent to AppsFlyer, and the account is excluded from attribution and marketing measurement entirely. No data about the account is shared with any advertising partner (including Meta, Apple Ads, and TikTok). The account never receives personalized or interest-based advertising, and advertising identifiers are not used. Analytics and crash-reporting data, where collected, is limited to what is necessary to support the internal operation of the Service (for example, keeping the game stable and secure) and is not used for behavioral advertising. Social features that could disclose personal information to other users may be limited or disabled. Only the information strictly necessary to operate the account (such as login credentials, game progress, and purchase delivery) is collected. Parents or guardians may review, modify, or request deletion of personal information associated with a child, refuse further collection or use of that information, and ask questions about our practices by contacting admin@zelcar.games. We may ask for reasonable proof that you are the child's parent or guardian. If Zelcar Games LLC becomes aware that a child has provided personal information in violation of this Policy, or that personal information of a child was collected without the required consent, we will delete such information to the extent permitted by law and may terminate the associated account. 11. FIND FRIENDS FROM CONTACTS If you opt into the "Find friends from contacts" feature, Magic Fruit World accesses your device's contacts with your explicit permission. Phone numbers never leave your device in readable form: each number is transformed into a pseudonymous code (HMAC-SHA256) using a key that the Service provides solely for this purpose. Only those codes are sent to our servers. The server compares the codes against those of other registered users and shows you which of your contacts already play Magic Fruit World. We do not reveal anything about contacts who aren't registered and we never share your contact data with third parties. We also keep the codes of contacts who are not yet registered, solely so that we can let you know if one of them joins Magic Fruit World later. Codes are retained tied to your account for up to 90 days after your last activity, and are then deleted automatically. You can erase all your codes and your own phone number from our servers at any time: if you turn off contacts access for Magic Fruit World in your device settings, the game detects the change on that device and requests their deletion. You can also delete your account (Section 12) or write to admin@zelcar.games. 12. ACCOUNT DELETION You can delete your Magic Fruit World account at any time directly from within the game, without contacting support, from Settings > Account > Delete account. You can also request deletion by email at admin@zelcar.games from the email address associated with your account. What happens when you delete your account Your account is immediately deactivated and you are signed out on all devices. You have 30 days to change your mind: log in again and, when the game asks, choose to cancel the deletion; your account is then restored. After those 30 days the deletion is final and cannot be undone. The personal information associated with the account is deleted or irreversibly anonymized from our active systems once the 30-day period has passed. This includes your login credentials, email address, player tag, profile data, friends list, contact codes (Section 11), chat messages linked to your account, in-game progress, inventory, and virtual currency. Copies held in backups and disaster-recovery systems are overwritten in the normal backup cycle within a further period not exceeding 14 days, and are not restored to production except to recover from a system failure, in which case the deletion is applied again. We ask our attribution partner (AppsFlyer) to delete the data it holds about the account, delete your Firebase Authentication record, and stop any further processing associated with your account identifiers. Usage analytics and crash data held by Firebase are pseudonymous and are deleted automatically under our retention settings (event-level analytics data after 2 months, user-level analytics data after 14 months of inactivity, and crash reports after 90 days). We may retain, for the period required by law and in a form that is no longer linked to your profile, a limited record of your purchases (for accounting, tax, and refund-handling obligations), a record of the deletion request, and information needed to prevent fraud, enforce the Terms, or defend legal claims. Purchases, subscriptions, and virtual items Deleting your account permanently removes all progress, virtual currency, virtual items, and benefits linked to it. These cannot be recovered after deletion. Purchases are not refunded as a result of account deletion. Refunds, where available, are handled exclusively by the store through which the purchase was made and under that store's rules. Deleting your account does not cancel an active subscription. Subscriptions are managed through the store (Apple App Store, Google Play, Steam, or the Epic Games Store) and must be canceled there before deleting your account to avoid further charges. If you created your account in the last few hours or have a pending transaction, we may hold the deletion briefly until the transaction is settled. Deletion cannot be undone once it has been processed. 13. ANALYTICS, ATTRIBUTION, AND ADVERTISING MEASUREMENT PARTNERS This Section identifies the third-party tools that we currently use, what each one receives, and why. The exact set of partners may change over time; we will update this Section when it does. 13.1 AppsFlyer (attribution and marketing measurement) Provider: AppsFlyer Ltd. Privacy policy: https://www.appsflyer.com/legal/services-privacy-policy/ Where it is used: the iOS and Android versions of the game, through the AppsFlyer SDK and through secure server-to-server reporting from our backend. What it receives: installation identifiers generated by the SDK (AppsFlyer ID), our internal pseudonymous user ID, IP address, device and operating system information, app version, language and time zone, the date and time of installation and app opens, in-game events such as login, tutorial completion, referral events, and purchases (product, price, and currency as reported by our servers, including refunds), deep-link parameters from referral links, and, only where your device settings allow it, the advertising identifier (IDFA on iOS with your App Tracking Transparency permission; Google Advertising ID on Android subject to your advertising settings). On iOS: attribution also uses Apple's SKAdNetwork framework, which reports campaign results to the advertising platform in an aggregated, privacy-preserving way without identifying the user or device. If you do not allow tracking, the IDFA and your account ID are not sent, and attribution relies on SKAdNetwork and aggregated measurement. Purpose: to attribute installations and purchases to the advertising campaign, advertisement, or referral link that generated them; to measure the performance and return of our marketing; to detect installation and referral fraud; to power referral and deep links. Legal basis: our legitimate interest in promoting the game and measuring and protecting our marketing investment; your consent for the use of the advertising identifier where required (App Tracking Transparency on iOS and, where applicable, the laws of the European Economic Area and the United Kingdom). Exclusions: no data about child accounts (Section 10) is sent to AppsFlyer. Purchases made on Steam or the Epic Games Store are not reported to AppsFlyer. 13.2 Firebase Analytics (usage analytics) Provider: Google LLC. Privacy information: https://firebase.google.com/support/privacy and https://policies.google.com/privacy What it receives: a random app-instance identifier (and, on iOS, our internal pseudonymous user ID), app usage events (sessions, screens, in-game actions, and progress events), app version, device and operating system information, language, and approximate location (country or region) derived from the IP address. The advertising identifier is only collected subject to your device permissions. Purpose: to understand how the game is used, measure the stability and performance of features, and improve the Service. Legal basis: our legitimate interest in understanding and improving the Service. 13.3 Firebase Crashlytics (crash reporting) Provider: Google LLC. Privacy information: https://firebase.google.com/support/privacy What it receives: crash reports and stack traces, a random installation identifier (and, on iOS, our internal pseudonymous user ID), the state of the device at the time of the crash (operating system, device model, memory, orientation), app version, and the time of the crash. Purpose: to detect, diagnose, and fix crashes and errors. Legal basis: our legitimate interest in maintaining a stable and secure Service, which is also necessary to perform our contract with you. 13.4 Advertising platforms that receive measurement data from AppsFlyer We promote Magic Fruit World through advertising on third-party platforms. To let those platforms measure and optimize our campaigns, AppsFlyer reports to the platform that showed an advertisement whether that advertisement led to an installation or to a subsequent in-game event (for example, a purchase, with its value). The platforms currently active are: Meta Platforms, Inc. (Facebook and Instagram ads), on iOS and Android. Privacy policy: https://www.facebook.com/privacy/policy/ Apple Inc. (Apple Ads, formerly Apple Search Ads), on iOS. Privacy policy: https://ads.apple.com/app-store/privacy TikTok (TikTok for Business), on iOS. Privacy policy: https://ads.tiktok.com/i18n/official/policy/privacy What these platforms receive: the event type and time, the campaign and advertisement involved, the value and currency of purchases, app version and basic device information, and the advertising identifier only where your device settings allow it. On iOS without tracking permission, the platform receives only aggregated SKAdNetwork conversion data from Apple. We do not share your name, email address, phone number, contacts, chat messages, or game progress with these platforms through this process. These platforms also receive data directly from you when you use their own services, under their own privacy policies and as independent controllers. Legal basis: our legitimate interest in measuring the effectiveness of our advertising; your consent for the use of the advertising identifier where required. Exclusions: no data about child accounts (Section 10) is shared with these platforms. 13.5 Your controls You can prevent the use of your advertising identifier at any time through the device settings described in Section 6.3, opt out of AppsFlyer processing at https://www.appsflyer.com/optout, and ask us to exclude your account from marketing measurement or to delete your data by writing to admin@zelcar.games. Crash reporting and basic usage analytics are needed to keep the game working properly; you can stop them entirely by deleting your account or uninstalling the game. 14. ADDITIONAL INFORMATION FOR RESIDENTS OF CALIFORNIA AND OTHER U.S. STATES This Section supplements this Policy for residents of California (under the California Consumer Privacy Act as amended by the California Privacy Rights Act, "CCPA") and of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others), to the extent those laws apply to Zelcar Games LLC. Categories of personal information collected in the last 12 months, sources, and purposes. As described in Sections 2 and 3, we collect: identifiers (email address, username and player tag, internal user IDs, IP address, device and advertising identifiers); commercial information (purchase history within the game); internet or other electronic network activity (in-game activity, usage data, crash data, interactions with our websites); approximate geolocation (country or region derived from the IP address); audio, electronic, or similar information (chat messages and support communications); and inferences drawn from the above for in-game personalization and segmentation. Sources are the user, the user's device, the distribution platforms, and our analytics and attribution partners. Purposes are those described in Section 3. Sensitive personal information. We collect account login credentials and, where requested, date of birth. We use sensitive personal information only to provide the Service, maintain security, and comply with law, and not to infer characteristics about you. Disclosures. We disclose personal information to service providers and contractors for business purposes (Section 4.2) and to the platforms and authorities described in Section 4.3. We do not sell personal information. We may "share" identifiers and internet activity (device advertising identifier, campaign and conversion events) with advertising platforms for the measurement of our advertising, which may be considered cross-context behavioral advertising; see "Opt-out" below. We do not knowingly sell or share the personal information of consumers under 16 years of age. Retention. See Section 9. Your rights. Depending on your state, you have the right to know and access the personal information we hold about you (including the categories of sources and recipients), to obtain a portable copy, to correct inaccurate information, to delete your personal information, to opt out of the sale or sharing of personal information and of targeted advertising and profiling, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. If we deny a request, you may appeal by replying to our decision; where your state law provides, you may then contact your state Attorney General. Opt-out of sharing and targeted advertising. Use the device controls in Section 6.3 (which stop the advertising identifier from reaching our partners), the AppsFlyer opt-out at https://www.appsflyer.com/optout, or email admin@zelcar.games with the subject "Opt out" and your player tag. How to exercise your rights. Email admin@zelcar.games or use the in-game account deletion in Section 12. We will verify your request as described in Section 6.6 and respond within 45 days (extendable by a further 45 days where permitted). You may use an authorized agent as described in Section 6.6. California "Shine the Light". We do not disclose personal information to third parties for their own direct marketing purposes. 15. ADDITIONAL INFORMATION FOR THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM, AND SWITZERLAND If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following additional information applies under the General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection. Controller. Zelcar Games LLC, 2201 Menaul Blvd NE, STE A, Albuquerque, NM 87107, USA. Contact: admin@zelcar.games. Legal bases. We rely on the following legal bases: Performance of a contract (Article 6(1)(b) GDPR): creating and operating your account, saving progress, delivering purchases, providing support, and enforcing the Terms. Legitimate interests (Article 6(1)(f) GDPR): improving the Service, usage analytics and crash reporting, security and fraud prevention, measuring the effectiveness of our own advertising, and internal administration. We have balanced these interests against your rights and you may object at any time (Section 6.5). Consent (Article 6(1)(a) GDPR): use of the advertising identifier for attribution where required, non-essential cookies on our websites, access to your contacts (Section 11), promotional communications where consent is required, and any other processing for which we ask your consent. You may withdraw consent at any time. Legal obligation (Article 6(1)(c) GDPR): tax and accounting records, responding to lawful requests, and handling data protection requests. International transfers. Your personal information is transferred to the United States and other countries as described in Section 5, under the European Commission's standard contractual clauses (and the UK International Data Transfer Addendum, where applicable), the EU-U.S. Data Privacy Framework where a recipient is certified, or another lawful transfer mechanism. Your rights. You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to withdraw consent and the right to lodge a complaint with a supervisory authority (Section 6.8). Where processing is based on legitimate interests, you may object on grounds relating to your particular situation; we will stop unless we have compelling legitimate grounds. You may object at any time to processing for direct marketing. Automated decision-making. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Children. The age of digital consent varies between 13 and 16 across the EEA. Where a user is below the applicable age, the child-account rules in Section 10 apply. 16. ADDITIONAL INFORMATION FOR OTHER REGIONS Users in other jurisdictions with data protection laws (including Brazil, Canada, Australia, Japan, South Korea, Turkey, and others) may have rights similar to those described in Sections 6, 14, and 15, including the right to access, correct, and delete personal information and to withdraw consent. We will honor such rights in accordance with the applicable law. Requests may be sent to admin@zelcar.games. Where the law of your country requires a specific legal basis, mechanism for international transfers, or local contact, we will comply to the extent the law applies to Zelcar Games LLC. 17. THIRD-PARTY SERVICES, PLATFORMS, AND LINKS The Service may contain links to, or integrate with, websites, platforms, social networks, and services operated by third parties (including the distribution platforms, Discord, YouTube, and social networks). These third parties process personal information under their own privacy policies and terms, as independent controllers. Zelcar Games LLC is not responsible for the privacy practices or content of third parties, and this Policy does not apply to information collected by them. We recommend reviewing their policies before providing them with personal information. 18. CHANGES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time to reflect changes in the Service, our partners, our practices, or applicable law. The effective date and version number at the top of this Policy indicate when it was last revised. Where a change is material, we will provide notice before it takes effect through the Service (for example, an in-game notice), by email to the address associated with your account, or by posting a prominent notice on our website, and, where required by law, we will seek your consent. Continued use of the Service after the effective date of a revised Policy constitutes acknowledgment of the revised Policy, to the extent permitted by applicable law. Previous versions are available on request at admin@zelcar.games. 19. GOVERNING LAW, SCOPE, AND LIMITATIONS This Privacy Policy and any dispute arising from it are governed by the laws of the State of New Mexico, United States, and by the dispute resolution, governing law, and limitation of liability provisions of the Terms, to the fullest extent permitted by applicable law. Nothing in this Policy limits or waives rights that you have under mandatory law in your country of residence, including consumer protection and data protection rights that cannot be waived by agreement. To the fullest extent permitted by applicable law, Zelcar Games LLC's liability in connection with the processing of personal information is limited as set out in the Terms. Zelcar Games LLC is not responsible for the independent processing of personal information by third parties, including the distribution platforms, advertising platforms, and social networks identified in this Policy, which act as independent controllers under their own policies. If any provision of this Policy is held to be invalid or unenforceable in a given jurisdiction, the remaining provisions remain in full force, and the invalid provision will be applied to the maximum extent permitted. This Policy is written in English; if a translation is provided for convenience and there is a conflict, the English version prevails to the extent permitted by applicable law. 20. CONTACT For privacy questions, requests, or complaints, contact us at: Email: admin@zelcar.games Postal address: Zelcar Games LLC, 2201 Menaul Blvd NE, STE A, Albuquerque, NM 87107, United States of America Please include your player tag and the email address associated with your account so that we can locate your data and verify your request. Requests from parents or guardians on behalf of a child should state that they are made in that capacity. Zelcar Games LLC - Magic Fruit World - Privacy Policy TYC-002 - Version 1.3 - Effective October 14, 2026