Privacy Policy
Last Updated: January 14, 2025

Welcome to Gleebox Games ("we", "our", or "us"). We are committed to protecting your privacy and ensuring that your personal information is handled securely and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant frameworks.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our digital products, services, websites, mobile applications, or online platforms (collectively, the “Services”). By using our Services, you agree to the terms of this Privacy Policy.

 

1. Information We Collect

We may collect the following categories of personal information:

• Account and Profile Information: When you register an account, we may collect your username, email address, password, profile picture, and preferences.
• Device and Usage Data: This includes device type, operating system, IP address, browser type, usage patterns, features accessed, session duration, and crash logs.
• Gameplay and Activity Data: For interactive experiences, we may collect in-game actions, progress, scores, achievements, and participation in events.
• Communications and Support Requests: If you contact us via email, support forms, or social media, we may collect your message content and response history.
• User-Generated Content: In certain Services, you may submit text, images, voice recordings, or other creative materials. These may be processed to enable functionality and moderation.
• Payment and Transaction Information: If purchases are available, payment details are processed through trusted third-party gateways (e.g., Apple App Store, Google Play, Stripe), and we do not store full financial credentials.

We do not knowingly collect sensitive personal data (e.g., health information, biometrics, political opinions) unless explicitly provided by you in user-generated content, which remains your responsibility.

 

2. How We Use Your Information

We process your personal information for the following purposes:

• To provide, maintain, and improve our Services;
• To authenticate accounts and ensure secure access;
• To personalize your experience, recommend content, and deliver targeted updates;
• To respond to customer inquiries and provide technical support;
• To analyze performance, diagnose issues, and optimize features;
• To enforce our Terms of Service and prevent fraudulent or abusive behavior;
• To comply with legal obligations and protect our rights or those of others;
• Where applicable, to conduct marketing activities – only with your prior consent, which can be withdrawn at any time.

Our legal bases for processing include:

• Performance of a contract with you;
• Legitimate business interests (provided they do not override your rights);
• Compliance with legal obligations;
• Consent, where required by law.

 

3. Sharing of Personal Information

We do not sell your personal information. We may share your data under the following circumstances:

• Service Providers: With trusted partners who assist us in operating our Services (e.g., cloud hosting providers like AWS or Azure, analytics tools like Firebase, customer support platforms). These parties are bound by confidentiality agreements and are prohibited from using your data for unrelated purposes.
• Affiliated Entities: Within the Gleebox Games corporate group for unified operations, always under equivalent privacy safeguards.
• Legal Requirements: If required by law, court order, government request, or regulatory authority, we may disclose information if we believe in good faith that such action is necessary to comply with legal obligations or protect public safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction, subject to appropriate protections.

We never share your data with advertisers or external marketing networks for behavioral advertising without explicit opt-in consent.

 

4. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States and other jurisdictions with varying data protection standards. Whenever cross-border transfers occur, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure an adequate level of protection.

 

5. Data Security

We employ technical and organizational measures designed to protect your personal information against unauthorized access, loss, misuse, alteration, or disclosure. These include encryption (in transit and at rest), access controls, regular security audits, and employee training. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

 

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Once your data is no longer needed, it will be securely deleted or anonymized.

If you request deletion of your account, we will initiate the removal process within 30 days, subject to legal exceptions (e.g., tax records, fraud investigations).

 

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request confirmation of whether we hold your data and obtain a copy.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure: Ask us to delete your personal data, subject to limitations.
• Right to Restriction: Limit how we process your data in certain situations.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: At any time, for processing based on consent.
• Right to Lodge a Complaint: With your local data protection authority.

To exercise these rights, please contact us using the details below. We aim to respond within 30 days.

Residents of California may also request information about our disclosures of personal data to third parties for direct marketing purposes, if any.

 

8. Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., local storage, pixels) to enhance user experience, understand usage trends, and support analytics. Most web browsers allow you to manage cookie settings. Disabling certain cookies may affect functionality.

We do not currently respond to Do Not Track (DNT) signals, as there is no industry-wide standard for handling them.

 

9. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children without verifiable parental consent. If we become aware that a child has provided personal data without consent, we will promptly delete it. Parents or guardians may contact us to request review or removal of such data.

 

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify users through prominent notices in the app or via email, where appropriate. The updated version will be effective upon posting, with the “Last Updated” date revised accordingly.

We encourage you to review this policy periodically.