Privacy Policy | Cinder & Crowns

Effective Date: April 8, 2026
Last Updated: April 8, 2026

1. Introduction

Sky Vanilla Pte. Ltd. ("Company," "we," "us," or "our") develops and publishes Cinder & Crown and related services (collectively, the "Service"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our applications and websites.

By downloading, installing, or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Contact Us

If you have questions about data protection or wish to exercise your legal rights, please contact us via:

Email: cinderandcrowns@skyvanillagames.com
Support: In-game support feature in Settings.

3. Data We Collect

We collect data to provide a better gaming experience, including:

3.1 Data You Provide Directly

Account Information: Username, email address (if linked), profile picture.
Customer Support: Messages, screenshots, and other content submitted through in-game support.
Purchase Records: Transaction history (we do not collect or store credit card numbers or payment credentials).

3.2 Data Collected Automatically

Device Identifiers: Advertising ID (IDFA/GAID), device model, operating system version, language settings.
Usage Data: Game progress, level data, in-game actions, session duration, feature interactions.
Network Information: IP address, country/region (derived from IP).
Diagnostics: Crash logs, performance data (load times, frame rates), error reports.

3.3 Data from Third-Party Sources

If you log in via a third-party service (e.g., Facebook, Google, Apple), we may receive your public profile information (name, profile picture, and email address) as permitted by your privacy settings on that service.

4. Third-Party SDKs and Service Providers

To deliver a high-quality service, we integrate industry-leading third-party SDKs. These partners may collect data directly from your device:

Partner	Purpose	Data Categories
Alibaba Cloud	Cloud hosting & infrastructure	Server logs, IP address, gameplay data (stored on our behalf).
Firebase (Google)	Analytics, crash reporting, push notifications	Device identifiers, app usage data, crash logs, performance metrics.
AppsFlyer	Attribution & marketing analytics	Advertising ID (IDFA/GAID), install source, in-app events, IP address.
Facebook (Meta)	Social features & ad attribution	Device identifiers, app events, interaction data.
Apple Pay	Payment processing (iOS)	Transaction confirmation only (Apple handles all payment details).
Google Play Billing	Payment processing (Android)	Transaction confirmation only (Google handles all payment details).

Each third-party service operates under its own privacy policy. We encourage you to review their respective terms.

5. How We Use Your Data

We process your data based on the following legal grounds:

Contractual Necessity: Managing your account, processing payments, saving game progress, and providing customer support.
Legitimate Interest: Analyzing game performance via Firebase, optimizing marketing effectiveness through AppsFlyer and Facebook, detecting fraud and cheating, and maintaining service security.
User Consent: Processing specific data with your explicit consent (e.g., personalized advertising, cross-app tracking).
Legal Obligation: Complying with applicable laws, regulations, and legal processes.

6. Advertising and Tracking

6.1 Third-Party Advertising

The Game may display advertisements served by third-party ad networks. These networks may use your Advertising ID and usage data to deliver personalized ads.

6.2 Apple App Tracking Transparency (ATT)

On iOS 14.5 and later, we will request your permission via Apple's App Tracking Transparency framework before tracking your activity across other companies' apps and websites. You may decline this request and can change your preference at any time in Settings > Privacy & Security > Tracking on your device.

6.3 Opting Out of Personalized Ads

You can opt out of personalized advertising by:

iOS: Settings > Privacy & Security > Apple Advertising > turn off Personalized Ads.
Android: Settings > Google > Ads > Opt out of Ads Personalization.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

Service Providers: Third-party SDKs listed in Section 4, operating under data processing agreements.
Legal Requirements: When required by law, regulation, legal process, or government request.
Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified).
Your Consent: When you explicitly authorize sharing.

8. International Data Transfers

Sky Vanilla Pte. Ltd. is headquartered in Singapore. Your data may be processed and stored in:

Singapore (Alibaba Cloud)
United States (Firebase, AppsFlyer, Facebook)

For data transfers from the EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission. For transfers from other jurisdictions, we comply with applicable local data transfer requirements.

9. Data Retention

We retain your data according to the following periods:

Data Type	Retention Period
Account Data	Retained while your account is active; deleted within 30 days of an account deletion request.
Gameplay Data	Retained while your account is active; anonymized or deleted upon account deletion.
Analytics Data	Aggregated and anonymized within 24 months of collection.
Crash / Diagnostic Logs	Retained for up to 12 months.
Customer Support Records	Retained for up to 36 months after resolution.
Payment Records	Retained as required by tax and accounting laws (typically 7 years).

10. Data Security

We implement industry-standard security measures to protect your information:

Encryption in Transit: All data transmitted between your device and our servers uses TLS/SSL encryption.
Encryption at Rest: Sensitive data is encrypted at rest on our servers.
Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
Regular Audits: We conduct periodic security assessments of our systems.

While we strive to protect your information, no method of transmission or storage is 100% secure.

11. Children's Privacy

Cinder & Crown is designed for a general audience, including players under the age of 13.

11.1 COPPA Compliance (United States)

We do not knowingly collect personal information from children under 13 beyond what is reasonably necessary for participation in the Game.
We do not serve personalized or behavioral advertising to users identified as children under 13.
We do not share children's personal information with third parties for their own marketing purposes.

11.2 Age Verification

Where required by applicable law, we implement an age verification mechanism. Users identified as children will receive a restricted experience that limits data collection and disables personalized advertising.

11.3 Parental Controls

Parents or guardians may:

Request access to their child's personal data.
Request deletion of their child's personal data.
Refuse further data collection.

Please contact us at cinderandcrowns@skyvanillagames.com to exercise these rights.

12. Your Rights

Depending on your jurisdiction, you may have the following rights:

12.1 All Users

Access: Request a copy of your personal data.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your personal data.
Objection: Object to processing based on legitimate interest.
Restriction: Request restriction of processing.
Portability: Request your data in a machine-readable format.
Withdraw Consent: Withdraw consent at any time (this does not affect prior processing).

12.2 EEA / UK Residents (GDPR)

You have all the rights listed above. You also have the right to lodge a complaint with your local Data Protection Authority.

12.3 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have the right to:

Know: What personal information we collect and how it is used.
Delete: Delete your personal information.
Opt-Out of Sale: Opt out of the sale of personal information (we do not sell personal information).
Non-Discrimination: Not be discriminated against for exercising your privacy rights.

12.4 How to Exercise Your Rights

Email: cinderandcrowns@skyvanillagames.com
In-Game: Use the support feature in Settings.
Account Deletion: You may delete your account directly from the Game's Settings menu.

We will respond to verified requests within 30 days (or sooner if required by applicable law).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Notify you via in-game notification or other reasonable means.
Request renewed consent where required by law.

Your continued use of the Game after changes constitutes acceptance of the updated policy.

This Privacy Policy is available in English and Chinese. In case of any discrepancy, the English version shall prevail.