Privacy Policy

1. Scope and controller

This Policy governs the processing of personal data of users of MergeRaid, its online services, MergeRaid pages on plixplox.com and related enquiries (the Service).

The database owner and data controller is "PLIXPLOX" MAS'ULIYATI CHEKLANGAN JAMIYAT, a limited liability company registered in Uzbekistan (the Company). Registration No. 3345672 dated 9 September 2026; tax ID (STIR) 313319124. Address: Tashkent city, Yunusabad district, Uvaysiy MFY, 19th massif, building 45, Uzbekistan. Contact: [email protected].

This Policy applies to MergeRaid, Android identifier com.plixplox.mergeraid. It does not govern independent processing by third-party services.

2. Personal data

Depending on the features used, the Company processes:

1. Account and access data: game and technical identifiers, authentication, account linking and recovery information, age group, document acceptance and privacy choices.
2. Game data: progress, inventory, virtual balances, rewards, actions, results and transaction history.
3. Technical and security data: IP address, approximate connection country, platform and app version, connections, errors, transaction checks and access restrictions.
4. Where detailed analytics is permitted: interface actions, interactions with offers, battle results, launches, sessions, app versions and event times. Observations are linked using pseudonymous identifiers and are not anonymous.
5. Enquiry data: reply address, correspondence and attachments, information required to verify authority and the outcome of the enquiry.
6. Where purchase or refund information is received: store, product, order and transaction identifiers, payment verification, amount, currency, status and time. The Company does not receive full payment card details.
7. Website data: language and theme preferences stored in the browser and network information required to deliver pages.

With permission for crash reporting, Google Firebase Crashlytics also processes error and crash details, stack traces, device model, operating system and game versions and installation identifiers. The Company does not attach game accounts, Google player IDs, advertising identifiers, correspondence or payment data to reports.

Data is provided by the user, their device and providers of features they use, or generated by the Company in providing and protecting the Service. A guest account does not require a name or email address.

When Google Play Games is connected, the Company receives a game-specific player identifier and proof of access. Google independently processes profile data and its SDK's service analytics and diagnostics. The Company does not request the user's Google password, email address, name, avatar or friends list from Google. Progress is stored in the Service, not Google Saved Games.

An age group is requested at first launch; an exact date of birth is not required. Country is estimated from the IP address and does not establish residence. Precise location, contacts, microphone and photo library access are not requested. Age group, Google data, correspondence, recovery codes and payment tokens are not sent to PostHog. The device's IP address is not forwarded to PostHog for geolocation.

3. Purposes and legal bases

1. Providing the Service, creating accounts, saving progress, performing game actions, account linking and recovery: performance of the agreement or steps requested before entering into it.
2. Protecting the Service, preventing fraud, checking transactions, resolving faults and defending claims: the legitimate interests of the Company and users, to the extent permitted by applicable law.
3. Handling enquiries, complying with mandatory requirements and maintaining legally required records: performance of the agreement, legal obligations or the relevant legitimate interest.
4. Optional analytics and crash reports to assess gameplay, interfaces and stability, diagnose errors and improve MergeRaid: the user's voluntary consent, separate from acceptance of the agreement.

Optional analytics is not a condition of playing, connecting Google or recovering access. Accepting the agreement and stating an age do not replace separate permission. Permission does not extend to advertising tracking, advertising attribution or cross-service profiling. Withdrawal does not affect the lawfulness of earlier processing or processing on an independent legal basis.

Reference to optional processing in an agreement or policy does not make that processing necessary to provide the Service.

Analytics and crash reports are offered under one choice, “Help improve the game”. This choice is optional and can be withdrawn in the Privacy section of Settings. Withdrawal stops subsequent reporting; reports already sent are processed only within the applicable legal basis and retention period.

4. Recipients

Authorised staff and contractors have access within their duties. Providers process data needed to deliver their services under contractual arrangements:

• DigitalOcean: game server and database hosting in Germany; processing terms.
• Cloudflare: traffic protection and delivery, connection country estimation, backups and request fulfilment records. Western Europe is selected for R2; this regional setting is not an exclusive storage jurisdiction commitment. Processing terms.
• PostHog Inc.: optional product analytics on the Company's behalf, using PostHog Cloud EU with primary hosting in Frankfurt; processing terms.
• Google Firebase Crashlytics: optional crash diagnostics on the Company's behalf; processing terms and data and retention information. Exclusive EU storage of reports is not guaranteed.
• Google: Play Games and its SDK. Google is an independent controller for its own services under its Privacy Policy and processing terms.
• Email and technical service providers: handling enquiries and operating the Service.

The Company may disclose necessary data to comply with a lawful authority request, protect rights or transfer the relevant business to a successor, subject to law. Data is not sold or provided to advertising networks for personalised advertising. Analytics data is not provided for PostHog advertising profiles.

5. International processing

The Company operates in Uzbekistan. Primary server storage is in Germany. Access by authorised persons and services of providers and subprocessors may involve processing in other countries. EU hosting does not mean all access is restricted to the EU.

International transfers are subject to applicable requirements, including an adequacy decision, standard contractual clauses or another legally recognised basis where required. Information on recipients, countries and applicable safeguards is available on request to the extent required by law.

6. Retention

Firebase Crashlytics retains crash traces, extracted crash data and associated installation identifiers for 90 days before beginning removal from live and backup systems. Withdrawal stops future reporting; it does not instantly remove reports already received by Google. Requests concerning those reports may be submitted through support.

Account data, progress and associated settings are retained while the Service is provided. Afterwards, only information necessary for legal obligations, outstanding transactions and claims is retained.

Raw optional analytics on the Company's server is retained for 30 days. Scheduled full deletion of the PostHog analytics profile is initiated after 335 days of the relevant authorised processing period. This period applies to the whole profile, including newer events, rather than to each event separately. Withdrawal and account deletion are grounds for earlier deletion.

Minimal records of completed deletion requests and withdrawn permissions are retained for 60 days. Unfinished requests and records of choices are retained to the extent and for the period necessary to fulfil requests and comply with law. Backups rotate on a 30-day schedule, have restricted access and are not used to reinstate deleted accounts or withdrawn processing.

Minimal confirmed purchase and refund records are retained for five full years after the relevant reporting year; unfinished verification records for up to 90 days after creation or the latest check. Following account deletion, these records are separated from the account; original provider data and account secrets are not retained in them. Longer retention requires an independent legal basis.

Correspondence is retained until the enquiry is resolved and thereafter for applicable obligation or claim periods. Only necessary information relevant to a specific dispute or investigation is retained. Data is deleted or irreversibly anonymised once its purpose, retention period or legal basis ends. Deletion from provider systems and backups may require additional time; this does not authorise continued processing after withdrawal.

7. Rights and requests

Where provided by applicable law, users may obtain processing information and access, request correction, erasure, restriction or portability, object to legitimate-interest processing and withdraw consent. Requests must be sent to [email protected]. The Company's director is responsible for handling them.

Permission for detailed analytics may be withdrawn in Settings, under Privacy, or through support without deleting the account. Withdrawal stops further optional collection and is grounds for erasure of the relevant data. Without a connection, fulfilment on the server and other devices requires subsequent connection or expiry of the existing permission.

The Company may request proportionate information to verify the applicant's authority. A player identifier alone does not establish authority over an account. A representative must establish their authority.

Requests are handled without undue delay, normally within 30 calendar days, subject to any shorter mandatory period. A lawful extension and its reason are communicated within the original period. Restrictions, refusal or charges apply only as permitted by law, with reasons communicated to the applicant. Users may complain to a competent data protection authority or court.

8. Account deletion

A request may be submitted through Delete account in the Account section of Settings or by email. Access to the app or creation of a new account is not required. The procedure and consequences are set out on the Account and Data Deletion page.

Once authority is verified, account data is deleted or irreversibly anonymised and access is revoked, except where an independent legal basis requires retention. Uninstalling the app or disconnecting Google Play Games does not delete the MergeRaid account. Deleting the game account does not delete a Google account or data independently retained by Google. A prior request to Google is not required. Google's own data controls are available through the Google Account and Play Games profile.

9. Children and teenagers

Optional Firebase Crashlytics reporting is also unavailable for declared age groups below 18.

The Service is intended for teenagers aged 13 and over and adults. A higher minimum age and legal representative involvement apply where required by law. Optional detailed analytics is unavailable for declared age groups below 18. Stating an age of 18 or over does not enable analytics: separate permission and applicable eligibility conditions are required.

A younger age declaration is taken into account across the account. Support reviews incorrect information after verification; correction does not automatically resume analytics. The Company may restrict processing and access to comply with age requirements. Support and data deletion requests remain available regardless of such restrictions.

Processing requiring a legal representative's consent is permitted only after that consent has been properly obtained. If a necessary legal basis is missing, the Company stops or restricts processing and takes measures required by law.

10. Advertising and payments

Real-money purchases of virtual goods are available through Google Play Billing. Google and its payment partners process payment details; the Company does not receive full bank card details. To verify purchases, deliver goods and process refunds, the Company receives and retains purchase information, including product, order and transaction identifiers, status, time and purchase tokens. Data categories, purposes and retention periods are described in Sections 2, 3 and 6 of this Policy.

Third-party advertising and advertising attribution SDKs are not used. Advertising identifiers are not collected. Introducing such processing requires prior disclosure and, where required, separate consent before it begins.

11. Security

The Company applies legal, organisational and technical safeguards proportionate to the data and risks, including access restrictions and protection of connections and credentials. Absolute security of information systems is not guaranteed.

Automated checks execute game operations and protect the Service. Decisions producing legal or similarly significant effects outside the game are not made under this version. Incorrect account restrictions may be challenged through support.

12. Changes

The Company may amend this Policy as the Service or legal requirements change. The current version is published here. Material changes are communicated appropriately where required by law, before processing that requires additional user action begins. A text change does not replace mandatory consent.

Related documents: Terms of Use and Licence, MergeRaid Support.