Privacy Policy

Effective Date: September 10, 2026

This Interactive Privacy and Security Framework establishes the specific operational rules by which PT POLA PAPERINDO JAYATAMA (also referenced as "we," "our," or "us") assembles, orchestrates, and fortifies your personal details when you participate in the Puppy Logic: Color Sudoku environment via Google Play. Our paramount commitment in structuring this digital ecosystem is to deliver an uninterrupted, premium interactive experience while maintaining uncompromising data defense standards.

1. Data Assembly and Interaction Points

We rely on carefully structured protocols to ingest and manage your digital footprint, prioritizing strict cyber hygiene. The sections below define the exact data payloads our architecture intercepts and our corresponding management logic.

1.1 Direct Information Harvesting Upon the initialization of your Puppy Logic: Color Sudoku session, our backend nodes automatically capture the following telemetry categories:

Network Nodes: IP routing configurations, precise timestamp logs for server connections, and fundamental hardware categorizations.

Hardware Environments: The specific device manufacturer, build model, operating system baseline (Android/Google OS), localized time variables, and system UI language.

Device Signatures: Alphanumeric trackers persistently or semi-persistently mapped to your hardware, notably the Google Advertising ID (GAID), Android Device ID, Google Play Games ID, and your primary Google Account token.

Interactive Milestones: Game progression timelines, apex score thresholds, unlocked digital badges, and transactional metrics from multiplayer connectivity.

Commerce and UI Logs: Histories of in-game purchases, the expenditure rate of virtual resources, customized interface settings, and ledger balances for digital currencies.

1.2 External Authentication Bridging Should you bypass local profile creation by bridging a third-party hub like Google Play Games Services, our systems will ingest approved identity vectors (e.g., public display names) in strict alignment with their API restrictions. This data bridge is entirely contingent upon your prior ratification of that third party's privacy manifesto. We legally advise auditing the data governance rules of these external hubs:

Google Play Games / Google Services: https://policies.google.com/privacy

By triggering a third-party authentication bridge, you formally warrant that:

Your engagement complies fully with the prevailing Terms of Service of that external entity.

You clear the statutory age threshold mandated by that provider in your current jurisdiction.

2. Legitimate Grounds for Data Orchestration

Every data point we orchestrate is tied to a specific operational mandate, validated by established legal doctrine:

Operational Delivery & Issue Resolution: To fulfill virtual transactions, route your helpdesk inquiries, and maintain backend server stability; to execute core gameplay mechanics, cache your specific UI parameters, and deploy software patches and security advisories.

Legal Anchor: Grounded in GDPR Article 6(1)(b) (contractual necessity). This orchestration is technically inescapable for us to honor the Terms of Service and keep the application viable.

Experience Refinement & Promotional Ecosystem: To broadcast curated marketing intel concerning PT POLA PAPERINDO JAYATAMA or vetted affiliates; to memorize your game state; and to run analytical algorithms designed to invent new features and maximize the efficacy of our marketing and support systems.

Legal Anchor: Authorized by GDPR Article 6(1)(f) (legitimate interests). We utilize this to support our corporate drive to optimize the digital product and elevate consumer satisfaction.

Targeted Commercial Displays: To beam customized commercial advertisements to users who have explicitly permitted our ad-tech partners to read their device signatures.

Legal Anchor: Also supported by GDPR Article 6(1)(f). This fulfills our legitimate necessity to monetize the platform efficiently via relevant programmatic ad placements.

3. Data Preservation and Sunset Rules

Your personal footprint is kept active in our infrastructure exclusively for the lifecycle required to run the game, clear regulatory audits, and navigate potential arbitrations. In edge cases involving compliance, security forensics, or EULA enforcement, we reserve the right to lock specific data blocks in cold storage for a legally defined extension. Separately, stripped and aggregated usage metrics are utilized for high-level system analysis. This anonymous data is routinely flushed via garbage collection cycles unless a severe security threat requires prolonged retention.

4. Authorized Data Syndication

Respecting your privacy boundaries and acting strictly under GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may establish secure data pipelines to external parties in these scenarios:

Strategic Alliances: For the deployment of integrated services, regulatory compliance, corporate mergers, or any workflow requiring your explicit consent flag.

Judicial & State Apparatuses: If a severe policy violation is detected, or if legal mandates compel us to unveil data to shield the IP, network integrity, or safety of PT POLA PAPERINDO JAYATAMA and the public.

The Global Player Network: Consequent to your participation in server-side matchmaking, global forums, or public ranking boards.

4.1 Advertising Syndicates Provided we register your active consent as defined by GDPR Article 6(1), we will broadcast your device trackers to advertising syndicates to power tailored ad targeting. Our integrated roster of ad-tech partners encompasses:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Notice: This Framework does not dictate the downstream data logic of these external firms. Please navigate to their respective privacy portals to understand their internal mechanics.

4.2 Backend Processing Providers To prevent server degradation, we lease cloud processing and analytics from specialized enterprise providers:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

5. Minor Protection Standard

The Puppy Logic: Color Sudoku application is strictly not compiled for, nor distributed to, individuals under the age of 13. We implement a zero-tolerance filter against the intentional ingestion of personal information from this demographic. Upon detecting that such telemetry has bypassed our filters, rapid database scrubbing protocols will be executed. Legal guardians identifying an unauthorized data handover by a minor must contact our support desk for immediate eradication.

6. Cybersecurity Parameters

We recognize the critical nature of your data and deploy enterprise-grade cryptographic perimeters to lock down your personal information. Nevertheless, the digital community must acknowledge that no cloud storage vault or web transmission is flawlessly secure. Therefore, we cannot legally guarantee absolute invulnerability against sophisticated zero-day breaches.

7. OS-Level Alert Protocols

Contingent on a positive opt-in flag, we may push system alerts, promotional offers, and patch notes directly to your Android/Google interface. You wield the ultimate authority to revoke this permission at any point by toggling the notification switches in your device’s native OS settings.

8. Statutory Privacy Entitlements

8.1 European Economic Area (EEA) Protections We SLA our privacy resolution queue to a standard 30-day window. For heavily fragmented queries, GDPR Article 12 permits us an extension of up to two additional months, accompanied by a proactive explanatory email regarding the delay.

(1) Access Entitlement: Under GDPR Article 15, you can demand a granular breakdown of the data we hold, our orchestration motives, the recipients, and the storage lifespan. A digital extract is available upon request.

(2) Objection Entitlement: Shielded by GDPR Article 21, you can contest orchestration tied to "legitimate interests" (Article 6(1)(f)). We will halt processing unless critical legal overrides exist. Your right to kill direct marketing data streams is absolute.

(3) Rectification Entitlement: Backed by GDPR Article 16, you hold the authority to force the correction of corrupted or incomplete database records.

(4) Restriction Entitlement: Referencing GDPR Article 18, you may compel us to quarantine your data and freeze active processing under specific legal conditions.

(5) Consent Revocation: Codified in GDPR Article 7, if a workflow relies on your consent, you can pull it instantly. This does not roll back previously executed processing.

(6) Portability Extraction: Permitted by GDPR Article 20, you have the clearance to extract your data in a machine-readable format and port it to a separate data controller without interference.

8.2 California Consumer Rights (CCPA)

(1) Execution Timeline: We target a 45-day SLA for verifiable requests. If technical hurdles force a delay (capped at a 90-day absolute maximum), we will issue a written status log.

(2) Data Lookback: Data exports provided to you will exclusively encompass the 12-month trailing window preceding your formal inquiry.

(3) Opt-Out Directive: The CCPA enshrines your undeniable right to set a "Do Not Sell" command regarding your personal information.

(4) Right to Know: You possess the right to full transparency regarding the exact data vectors we assemble and our motives, documented transparently in this Framework.

(5) Access to Records: Twice every 12 months, completely free, you may request a thorough ledger of the personal information logged over the past year.

(6) Deletion Command: You can mandate the permanent wiping of personal data collected over the last year, provided it doesn't trigger statutory exemptions (e.g., necessary for bug fixing, security logging, or contract fulfillment).

9. Data Scrubbing Protocol

When your data outlives its operational utility, you can demand its permanent destruction. To trigger this data scrubbing protocol, transmit your request to the designated compliance email below.

10. Regulatory Contact

For compliance clarifications, security feedback, or to invoke your statutory privacy rights, route all correspondence to: Contact Email: merasustico313@gmail.com