Privacy Policy
This Privacy Policy explains how Keya Games Inc. (“Keya Games”, “we”, “us”, “our”) collects, uses, shares, and protects information when you play our mobile game Mystic Tides (the “Game”) on iOS and Android. By playing the Game, you acknowledge the practices described in this policy.
1. Who we are
Keya Games Inc.
1401 Pennsylvania Ave., Suite 105, #2334, Wilmington, Delaware 19806, USA
Contact: support@keyagames.com
2. Information we collect
2.1 Information created automatically when you play
When you first launch the Game, a guest account is created automatically using an identifier associated with your device. No name, email address, or phone number is required to play. We collect:
| Data | Examples |
|---|---|
| Device and account identifiers | Device identifiers, advertising identifier (Apple IDFA / Google Advertising ID, subject to your permission settings), our internal player ID |
| Gameplay and app activity | Game progress, levels completed, in-game actions, session length, feature usage, in-game currency balances |
| Purchase information | In-app purchase history (product, price, currency, store transaction/order reference). We do not collect or store your credit card or payment details — payments are processed entirely by Apple and Google. |
| Approximate location | Country/region-level location derived from your IP address. We do not collect precise (GPS) location. |
| Technical and diagnostic data | Device model, operating system version, language, crash logs, performance data |
2.2 Information you provide
- Display name — an optional in-game nickname you can set or change. It does not need to be your real name.
- Facebook account link (optional) — if you choose to link your Facebook account (or, on iOS, Sign in with Apple), we receive your basic profile information (name) from the identity provider — we do not request your email address to connect your game account across devices. Linking is entirely optional.
- Support requests — information you send us when contacting support.
3. How we use your information
- To operate the Game — creating and maintaining your account, saving progress, syncing across devices, delivering in-app purchases.
- Analytics — understanding how the Game is played so we can fix problems and improve it.
- Advertising — showing in-game advertisements and measuring the performance of our own marketing campaigns (see Section 4).
- Stability and security — diagnosing crashes, preventing fraud, cheating, and abuse.
- Communications — sending push notifications about in-game events (you can disable these in your device settings) and responding to support requests.
- Legal compliance — keeping records we are legally required to keep (e.g., purchase records).
4. Advertising and tracking
The Game shows advertisements provided by third-party advertising networks. These partners may collect your advertising identifier and related data to serve and measure ads, and — where you have given permission — to personalize the ads you see across apps.
We also use a mobile measurement partner (AppsFlyer) to understand which marketing campaigns bring players to the Game and how they engage, including purchase events. This involves sharing device identifiers and event data with advertising platforms for attribution and campaign measurement.
Your choices:
- iOS: the Game asks for permission via Apple’s App Tracking Transparency prompt. If you decline, your advertising identifier is not used for cross-app tracking. You can change this anytime in Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your Advertising ID and opt out of ads personalization in Settings → Google → Ads.
- EEA/UK: where required, we ask for your consent before personalized advertising, and you can change your choice in the Game’s settings.
If you do not consent to personalized advertising, you may still see ads, but they will be contextual (not based on your data).
5. Who we share information with
5.1 Service providers (acting on our behalf)
| Provider | Purpose | Privacy policy |
|---|---|---|
| Amazon Web Services | Game servers, data hosting, and our internal analytics pipeline | aws.amazon.com/privacy |
| Google Firebase (Analytics, Crashlytics, Cloud Messaging) | Analytics, crash reporting, push notifications | firebase.google.com/support/privacy |
5.2 Advertising and measurement partners
| Partner | Purpose | Privacy policy |
|---|---|---|
| AppsFlyer | Attribution and marketing measurement | appsflyer.com/legal |
| [AD NETWORK 1, e.g. Google AdMob] | In-game advertising | [LINK] |
| [AD NETWORK 2, e.g. AppLovin] | In-game advertising / mediation | [LINK] |
| [LIST EVERY NETWORK IN YOUR MEDIATION STACK] |
5.3 Identity providers
| Provider | Purpose | Privacy policy |
|---|---|---|
| Meta (Facebook Login) | Optional account linking | facebook.com/privacy/policy |
| Apple (Sign in with Apple) | Optional account linking on iOS | apple.com/legal/privacy |
5.4 Other disclosures
- Legal requirements — when required by law, regulation, or valid legal process.
- Business transfers — if Keya Games is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction; this policy will continue to apply.
We do not sell your personal information to data brokers.
6. Data retention
- Account and gameplay data is kept for as long as your account exists.
- If you delete your account, personal data is deleted as described in Section 7.
- Purchase and billing records are retained for 7 years as required by tax and accounting law.
- Fraud-prevention and security records are retained for up to 24 months.
- Aggregated or anonymized data that can no longer identify you may be retained without limit.
7. Account and data deletion
You can delete your account and associated personal data at any time:
- In the Game: Settings → Account → Delete Account. This is the fastest and most reliable method.
- On the web: submit a request at www.keyagames.com/mysticaltides/accountdeletion.html. Because guest accounts are anonymous, we will ask you for identifying details (your Player ID and Device Code shown in the Game’s Settings → Support screen, a store purchase order number, or verification through your linked Facebook account). If you cannot provide any of these, we may be unable to locate your account.
Deletion requests are completed within 30 days. A short grace period of 7 days applies, during which you can cancel the request via support; after that, deletion is permanent. Game progress, profile data, identifiers, and personal data in our analytics systems are deleted. Records we must keep by law (see Section 6) are retained for the legally required period only.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent at any time, and to lodge a complaint with your data protection authority.
- EEA/UK (GDPR): our legal bases are performance of a contract (operating the Game), legitimate interests (analytics, security, contextual advertising), consent (personalized advertising, tracking), and legal obligation (purchase records).
- United States: depending on your state of residence (including California under the CCPA/CPRA, and residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws), you may have the right to know/access, delete, and correct your personal information, to opt out of targeted advertising and the “sale” or “sharing” of personal information, to not be discriminated against for exercising these rights, and in some states to appeal a decision we make about your request. You can exercise the advertising opt-out via the choices in Section 4. We do not knowingly sell personal information to data brokers.
To exercise any right, contact us at support@keyagames.com. We will need to verify your request using the identifiers described in Section 7.
9. International data transfers
Keya Games Inc. is a company incorporated in the United States, and your information is stored and processed on servers in the United States (and may be processed in other countries where our service providers operate). For transfers of personal data from the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
10. Children
Mystic Tides is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal data from children as defined by the U.S. Children’s Online Privacy Protection Act (COPPA) and similar laws. If you believe a child has provided us personal data, contact us at support@keyagames.com and we will delete it.
11. Security
All data is encrypted in transit. We apply technical and organizational measures appropriate to the risk to protect your data against unauthorized access, loss, or alteration. No system is completely secure, so we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy from time to time. Material changes will be announced in the Game or on this page, and the “Last updated” date above will change. Continued use of the Game after an update means the updated policy applies.
13. Contact us
Keya Games Inc.
1401 Pennsylvania Ave., Suite 105, #2334, Wilmington, Delaware 19806, USA
support@keyagames.com