COT Puzzle Game Privacy Policy

Last updated: May 24, 2026

This Privacy Policy explains how COT Puzzle Game ("we", "us", "our"), the developer name listed in Google Play and the operator of the support domain nextxin.com, collects, uses, shares, and protects information when you use our mobile games and related support services.

If you do not agree with this Privacy Policy, please do not use our games or support services. You may also contact us to request deletion of personal data that we control.

1) Scope

This policy applies to our mobile games distributed through app stores and to support contact channels we provide.

2) Data Controller and Privacy Contact

The data controller for personal information covered by this Privacy Policy is COT Puzzle Game.

For Data Protection Officer inquiries, privacy questions, and data protection requests, our named data protection contact is:

COT Puzzle Game Privacy Team
Email: [email protected]
Plain text email for automated review: [email protected]

3) Information We Collect

Depending on your usage, game version, region, and device settings, we may process:

• Device and identifiers: device model, OS version, app version, language, IP address, advertising ID (for example, Android Advertising ID), app installation identifiers, Firebase installation IDs, and network connection information.
• Gameplay and app events: session events, level or puzzle progress events, crash events, performance events, basic usage analytics, and ad interaction events.
• Purchase and entitlement data: product identifiers, purchase status, transaction identifiers, and subscription or entitlement state provided by Google Play billing. We do not receive your full payment card details.
• Support information: email address, message content, app version, OS version, and basic device information you choose to send when contacting support.
• Push notification data: notification tokens and related delivery data used to send app notifications where enabled.

Our casual games do not provide an account registration system and do not ask players to enter a real name, display name, or nickname in the app. We do not use Android precise or approximate location permissions, and we do not collect GPS, Wi-Fi, or Bluetooth-based location data. We do not collect users' web browsing history.

IP addresses may be processed by us or our service providers as part of normal network communication, security, diagnostics, fraud prevention, advertising delivery, and service operation. We do not use IP addresses to build a user location profile.

We do not directly collect payment card information inside our app. Store billing (for example Google Play billing) is handled by the platform provider under its own policy.

4) Why We Use Information

• Operate and maintain the game.
• Save basic game progress or preferences where supported by the game.
• Measure performance and fix crashes/bugs.
• Prevent abuse, fraud, and technical misuse.
• Serve ads and measure ad effectiveness, including through Android advertising and attribution services where available.
• Attribute installs and advertising performance.
• Process purchases, subscriptions, entitlements, and related support requests.
• Send app notifications where enabled.
• Respond to support requests.
• Comply with legal, platform, security, and accounting requirements.

5) Legal Bases (where applicable)

• Performance of service: run core game features and process support requests.
• Legitimate interests: security, anti-abuse, analytics, service improvement, non-personalized advertising measurement, and fraud prevention.
• Consent: personalized ads and related tracking where required by local law.
• Legal obligation: compliance with applicable laws, platform rules, tax, accounting, and lawful requests.

6) Advertising and Analytics Partners

We use third-party monetization and analytics SDKs in our production game versions. Depending on the specific game and version, these partners may receive identifiers and usage signals to deliver, measure, and optimize ads, provide analytics, diagnose crashes, prevent fraud, and run app configuration services.

Partners used by our production games may include:

• Google AdMob / Google advertising services
• AppLovin
• Meta Audience Network / Facebook SDK
• Pangle
• BIGO Ads
• Mintegral
• InMobi
• Unity Ads
• Unity LevelPlay / ironSource
• Vungle / Liftoff Monetize
• TopOn / AnyThink / HyperBid mediation
• Singular (advertising attribution and measurement)
• Firebase Analytics (usage analytics)
• Firebase Crashlytics (stability diagnostics)
• Firebase Remote Config (app configuration)
• Firebase Installations (app installation identifiers)
• Firebase Performance Monitoring (performance diagnostics)
• Firebase Cloud Messaging (push notifications)

We do not sell personal information for money. However, disclosures to advertising partners for ad personalization may be considered "sharing" or "sale" under some privacy laws.

7) SDKs, Tracking Technologies, Permissions, and Advertising IDs

Our games and support websites may use SDKs, cookies, local storage, advertising identifiers, app installation identifiers, Firebase installation IDs, notification tokens, and Android Privacy Sandbox advertising services where available. These technologies help us operate the game, remember settings, measure performance, attribute installs, detect abuse, deliver ads, and measure ad effectiveness.

Third-party SDKs may connect to their own server endpoints to provide advertising, mediation, attribution, fraud prevention, analytics, crash diagnostics, performance diagnostics, remote configuration, and push notification services. We review SDK, permission, and data use changes and update our privacy disclosures and Google Play Data safety information when required.

Advertising identifiers such as Android Advertising ID can be reset or limited through Android settings. If an identifier is reset or limited, ads may still appear but may be less personalized.

8) When We Share Information

We may share information in the following limited situations:

• Service providers: companies that provide hosting, support, analytics, diagnostics, push notification, fraud prevention, and technical services.
• Advertising, mediation, and attribution partners: partners that help deliver ads, run mediation, attribute installs, prevent fraud, and measure ad performance.
• Platform providers: Google Play, Google Play billing, Firebase, and related Google services used by the game.
• Legal and safety reasons: where required by law, legal process, security, fraud prevention, or to protect our rights, users, or services.
• Business transfers: if our business, games, or assets are merged, acquired, reorganized, or transferred.

9) Personalized Ads, Targeted Advertising, and Your Choices

We may use advertising, mediation, analytics, and attribution partners to help deliver, measure, and improve ads in our games. These partners may receive device identifiers, advertising identifiers, IP address, app activity, ad interaction information, and similar usage signals. We do not sell personal information for money. However, disclosures of identifiers and usage signals to advertising partners for personalized ads, targeted advertising, cross-context behavioral advertising, ad measurement, or attribution may be considered a "sale", "sharing", or "targeted advertising" under certain privacy laws.

You have the right to opt out of the sale or sharing of your personal information, and to opt out of the processing of your personal information for targeted advertising, where these rights are provided by applicable law.

To exercise these choices, you may:

• Contact us at [email protected] and state that you want to opt out of sale, sharing, or targeted advertising.
• Reset or limit your Android Advertising ID in your device settings.
• Use privacy controls provided by Google Play services or your mobile operating system.
• Withdraw or change consent choices where an in-app consent screen is available.
• Disable push notifications in your device or app notification settings.

After you opt out, you may still receive ads, but the ads may be less personalized.

10) Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, security, fraud prevention, accounting, dispute resolution, or legitimate business needs.

• Support information: retained for as long as needed to respond to your request, handle follow-up issues, and maintain support records.
• Crash, diagnostic, and performance data: retained for as long as needed to investigate stability, compatibility, and performance issues.
• Gameplay and analytics data: retained for as long as needed to operate, analyze, protect, and improve our games.
• Advertising, mediation, and attribution data: retained for as long as needed to deliver ads, measure ad performance, prevent fraud, attribute installs, and comply with partner and legal requirements.
• Purchase and entitlement data: retained as needed for entitlement verification, refunds, fraud prevention, accounting, tax, legal compliance, and dispute handling.
• Push notification data: retained while notifications are enabled or as otherwise needed to provide notification services.

When personal information is no longer needed, we delete, anonymize, or aggregate it where reasonably possible. You may request deletion by contacting us at [email protected]. We will delete or anonymize personal information that we control unless retention is required or permitted for legal, security, anti-abuse, accounting, dispute-resolution, or other legitimate reasons.

11) International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border data transfers, such as contractual, technical, organizational, or other legally recognized transfer safeguards.

12) Third-Party Links and Partner Policies

Ads, support messages, store features, and other links may take you to third-party services that we do not control. If an ad or third-party link opens a web page, that third-party service is governed by its own privacy policy. We do not collect your web browsing history from those third-party pages. Partner policies include:

• Google / Google Play / AdMob / Firebase
• Firebase privacy and security
• AppLovin
• Meta / Facebook
• Pangle
• BIGO Ads
• Mintegral
• InMobi
• Unity Ads / Unity LevelPlay
• Vungle / Liftoff
• TopOn / AnyThink
• Singular

13) Children

Our games are not directed to children under the minimum age required by applicable law (such as under 13 in the U.S. or under 16 in parts of the EEA where applicable). We do not knowingly collect personal information from children, and we do not knowingly sell or share personal information of users under 16 for cross-context behavioral advertising. If we learn that such data was collected without valid authorization, we will delete it.

14) Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, request data portability, and withdraw consent where processing is based on consent.

Rights under the GDPR for Users in the European Union (EU)

This section provides information to EU users about their rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679), also known as the GDPR. If you are a user in the European Union (EU) or European Economic Area (EEA), you may have the following GDPR rights, subject to legal limitations. Users in the United Kingdom may have similar rights under the UK GDPR.

• Right of access: You may request confirmation of whether we process your personal data and access to that data.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of personal data that we control.
• Right to restriction: You may request that we restrict certain processing of your personal data.
• Right to data portability: You may request a copy of personal data you provided to us in a structured, commonly used, machine-readable format where technically feasible and legally required.
• Right to object: You may object to certain processing based on legitimate interests, including certain direct marketing or targeted advertising activities where applicable.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
• Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Brazil Privacy Rights (LGPD)

If you are in Brazil, you may have rights under the Lei Geral de Protecao de Dados (LGPD), subject to legal limitations:

• Confirm whether we process your personal data.
• Access personal data that we control.
• Correct incomplete, inaccurate, or outdated personal data.
• Request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed personal data.
• Request data portability where required by applicable regulation.
• Request information about public and private entities with which we have shared personal data.
• Request information about the possibility of denying consent and the consequences of denial.
• Withdraw consent where processing is based on consent.
• Petition the Brazilian data protection authority (ANPD) where applicable.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), subject to legal limitations:

• Right to Know: You may have the right to know what categories of personal information we collect, use, disclose, sell, or share.
• Right to Know About Data Sales: You may have the right to know whether your personal information is sold, what categories of personal information are sold, and the categories of third parties to whom it is sold.
• Right to Know About Data Sharing: You may have the right to know whether your personal information is shared for cross-context behavioral advertising, what categories of personal information are shared, and the categories of third parties to whom it is shared.
• Right to Delete: You may have the right to request deletion of personal information that we control.
• Right to Correct: You may have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale: You may have the right to opt out of the sale of your personal information. We do not sell personal information for money, but advertising disclosures may be considered a sale under some privacy laws.
• Right to Opt Out of Sharing or Targeted Advertising: You may have the right to opt out of sharing of personal information for cross-context behavioral advertising or targeted advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, you may have rights under the Virginia Consumer Data Protection Act (VCDPA), subject to legal limitations:

• Right to Confirm and Access: You may have the right to confirm whether we process your personal data and to access that personal data.
• Right to Correct: You may have the right to correct inaccuracies in your personal data.
• Right to Delete: You may have the right to delete personal data provided by or obtained about you.
• Right to Data Portability: You may have the right to obtain a copy of personal data that you previously provided to us in a portable and readily usable format, where technically feasible.
• Right to Opt Out: You may have the right to opt out of processing for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

Other U.S. State Privacy Rights

Residents of other U.S. states with applicable privacy laws may have similar rights to access, correct, delete, obtain a copy of personal information, and opt out of sale, sharing, targeted advertising, or certain profiling.

To exercise your privacy rights, including the right to opt out of sale, sharing, or targeted advertising, please contact us at [email protected]. Please include your game name, country or state, device platform, and the type of request you are making. To protect user data, we may ask for information needed to verify your identity before processing a request.

Where required by law, you may also use an authorized agent to submit a request on your behalf.

15) Security

We use reasonable technical and organizational measures to protect data. No method of transmission or storage is completely secure.

16) Contact

For privacy requests, data protection inquiries, or questions, contact us at [email protected].

Plain text email for automated review: [email protected]

17) Updates to This Policy

We may update this policy from time to time. We will post the latest version at this URL and update the "Last updated" date above.