Privacy Policy

Mystic Tides — published by Keya Games Inc.
Effective date: 13 July 2026  |  Last updated: 28 August 2026

This Privacy Policy explains how Keya Games Inc. (“Keya Games”, “we”, “us”, “our”) collects, uses, shares, and protects information when you play our mobile game Mystic Tides (the “Game”) on iOS and Android. By playing the Game, you acknowledge the practices described in this policy.

1. Who we are

Keya Games Inc.
1401 Pennsylvania Ave., Suite 105, #2334, Wilmington, Delaware 19806, USA
Contact: support@keyagames.com

2. Information we collect

2.1 Information created automatically when you play

When you first launch the Game, a guest account is created automatically using an identifier associated with your device. No name, email address, or phone number is required to play. We collect:

Some of this information is stored temporarily on your own device before it is sent to us — for example, a queue of pending analytics events and diagnostic logs held in the Game's private storage area. This local data is removed when you delete the Game or delete your account.

2.2 Information you provide

• Display name — an optional in-game nickname you can set or change. It does not need to be your real name.
• Account linking (optional) — linking is entirely optional and the Game is fully playable without it. If you choose to link a Facebook account, we receive basic profile information (your name and Facebook user ID) from Meta. If you choose Sign in with Apple on iOS, Apple asks whether to share your name and e-mail address, and you may choose to hide your e-mail address using Apple's Private Relay. We use this information only to connect your game account across devices; we do not use it for marketing.
• Support requests — information you send us when contacting support, including the name, e-mail address and message you enter in our contact form.

3. How we use your information

• To operate the Game — creating and maintaining your account, saving progress, syncing across devices, delivering in-app purchases.
• Analytics — understanding how the Game is played so we can fix problems and improve it.
• Feature testing — like most mobile games, we sometimes show different versions of a feature, price or layout to different groups of players to see which works better. Your account may be assigned to such a group; this assignment is recorded with your gameplay data.
• Advertising — showing optional rewarded advertisements and measuring the performance of our own marketing campaigns (see Section 4).
• Stability and security — diagnosing crashes, preventing fraud, cheating, and abuse.
• Communications — sending push notifications about in-game events (you can disable these at any time in your device settings) and responding to support requests.
• Legal compliance — keeping records we are legally required to keep (e.g., purchase records).

4. Advertising, measurement and notifications

4.1 Advertising

The Game offers optional rewarded advertisements: short video ads you may choose to watch in exchange for an in-game reward. Watching them is always your choice — nothing in the Game requires you to view an ad, and we do not show forced or interstitial advertising. Rewarded ads are delivered through AppLovin MAX, which also mediates demand from other advertising networks.

These partners may collect your advertising identifier and related data to serve and measure ads and — where you have given permission — to personalise the ads you see across apps. If you do not consent to personalised advertising, you may still see rewarded ads, but they will be contextual (not based on your data).

4.2 Marketing measurement

We use Adjust as our mobile measurement partner to understand which marketing campaigns bring players to the Game and how those players engage, including purchase events. Adjust processes device identifiers and event data on our behalf.

Attribution data is matched using two of our own identifiers, which are treated differently:

• Your account ID — the identifier our server issues for your game account. It is included in attribution data so that campaign results can be matched to the right account. It is not derived from your device and is not linked to any identifier used by other publishers.
• Your installation identifier — tied to the app on your device. This one is only included in data shared with advertising partners if you have permitted tracking. If you have not, it stays within our own systems and Adjust’s reporting and is never forwarded to advertising partners.

4.3 Push notifications

If you allow notifications, Apple or Google issues a push token for your installation. We store this token to deliver notifications, and we also share it with Adjust so that notification-driven activity can be attributed correctly. You can withdraw notification permission at any time in your device settings; the token is deleted when you delete your account.

4.4 Your choices

• iOS: the Game asks for permission via Apple’s App Tracking Transparency prompt. If you decline, your advertising identifier is not made available to us or our partners for cross-app tracking. You can change this at any time in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your Advertising ID and opt out of ads personalisation in Settings → Google → Ads.
• EEA/UK: where required, we ask for your consent before personalised advertising, and you can change your choice at any time in the Game’s settings.
• In-game control: the Game’s settings include a personalised advertising switch you can turn off at any time. Turning it off does not remove rewarded ads; it makes them contextual.

5. Who we share information with

5.1 Service providers (acting on our behalf)

5.2 Advertising and measurement partners

5.3 Identity providers

5.4 Other disclosures

• Legal requirements — when required by law, regulation, or valid legal process.
• Business transfers — if Keya Games is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; this policy will continue to apply.

We do not sell your personal information for money. Sharing your advertising identifier with advertising partners so they can serve or measure personalised ads may, however, count as a “sale” or “sharing” under some U.S. state privacy laws. Section 8 explains how to opt out.

6. Cookies and similar technologies

The Game itself does not use cookies. Our website uses only what is strictly necessary to display the pages and to operate the contact form; we do not use advertising or analytics cookies on the website.

7. Data retention

• Account and gameplay data is kept for as long as your account exists.
• If you delete your account, personal data is deleted as described in Section 9.
• Purchase and billing records are retained for 7 years as required by tax and accounting law.
• Fraud-prevention and security records are retained for up to 24 months.
• Aggregated or anonymised data that can no longer identify you may be retained without limit.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent at any time, and to lodge a complaint with your data protection authority.

• EEA/UK (GDPR): our legal bases are performance of a contract (operating the Game), legitimate interests (analytics, security, contextual advertising, fraud prevention), consent (personalised advertising, tracking, push notifications), and legal obligation (purchase records).
• United States: depending on your state of residence (including California under the CCPA/CPRA, and residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws), you may have the right to know/access, delete, and correct your personal information, to opt out of targeted advertising and the “sale” or “sharing” of personal information, to not be discriminated against for exercising these rights, and in some states to appeal a decision we make about your request.

Do Not Sell or Share My Personal Information. To opt out of the use of your advertising identifier for personalised advertising, turn off the personalised advertising switch in the Game’s settings, or decline the App Tracking Transparency prompt on iOS / opt out of ads personalisation on Android as described in Section 4.4. You may also send an opt-out request through our contact form. We honour opt-out requests without requiring you to create an account, and an authorised agent may submit a request on your behalf.

To exercise any right, contact us at support@keyagames.com or through our contact form. We will need to verify your request using the identifiers described in Section 9.

9. Account and data deletion

You can delete your account and associated personal data at any time:

• In the Game: Settings → Account → Delete Account. This is the fastest and most reliable method.
• On the web: submit a request through our contact form, choosing the topic “Account Deletion Request”. Because guest accounts are anonymous, we will ask you for identifying details — your Player ID (shown in the Game under Settings → Support), a store purchase order number, or verification through your linked Facebook account. If you cannot provide any of these, we may be unable to locate your account.

Deletion requests are completed within 30 days. A short grace period of 7 days applies, during which you can cancel the request via support; after that, deletion is permanent. Game progress, profile data, identifiers, and personal data in our analytics systems are deleted. Records we must keep by law (see Section 7) are retained for the legally required period only.

10. International data transfers

Keya Games Inc. is a company incorporated in the United States, and your information is stored and processed on servers in the United States (and may be processed in other countries where our service providers operate). For transfers of personal data from the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You may request a copy of the relevant safeguards by contacting us.

11. Children

Mystic Tides is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from children as defined by the U.S. Children’s Online Privacy Protection Act (COPPA) and similar laws. If you believe a child has provided us personal data, contact us at support@keyagames.com and we will delete it.

12. Security

All data is encrypted in transit. We apply technical and organisational measures appropriate to the risk to protect your data against unauthorised access, loss, or alteration. No system is completely secure, so we cannot guarantee absolute security.

13. Data breach notification

If a security incident affects your personal data and is likely to result in a high risk to your rights and freedoms, we will notify the affected players and the competent supervisory authority within the time frames required by applicable law.

14. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the Game or on this page, and the “Last updated” date above will change. Continued use of the Game after an update means the updated policy applies.

15. Contact us

Keya Games Inc.
1401 Pennsylvania Ave., Suite 105, #2334, Wilmington, Delaware 19806, USA
support@keyagames.com
Contact form