Privacy Policy - Shiny Merge

Shiny Merge

Privacy Policy

Effective July 24th, 2026

This policy describes how Shiny Merge handles your personal data — what we collect, how we use it, and the choices available to you.

Definitions

Application
Shiny Merge and related online services.
Company
The operator of the Application ("we", "us", "our").
Personal Data
Information relating to an identified or identifiable individual.
Usage Data
Data collected automatically when you interact with the App.
Device
Any phone, tablet, or computer used to access the App.
Service Provider
A third party that processes Personal Data on our behalf.

Information Collection

When you open Shiny Merge, certain information is gathered in the background — device type, session length, and basic network details — plus details you provide voluntarily.

Use of Information

We use your data to keep Shiny Merge working, handle your account and transactions, send relevant updates, and continuously improve the experience.

PurposeExamples
GameplayDeliver boards, sync progress, stabilize performance
AccountsRegister, authenticate, manage settings
PaymentsProcess PayPal withdrawals, prevent fraud
SupportAnswer inquiries, send permitted notices
AnalyticsMeasure campaigns, refine features
LegalMeet compliance obligations

When We Share

Data sharing is limited to operational necessities:

  1. Service Providers — hosting, ads, analytics, payments
  2. Business Transfers — mergers, acquisitions, or asset sales
  3. Affiliates — entities under common control
  4. Business Partners — joint features you choose
  5. Public Interactions — content you voluntarily post
  6. Legal Obligations — valid legal process
  7. With Consent — other purposes you approve

PayPal Data Protection. Your PayPal email and withdrawal details are never sold or rented. They are shared only for payout processing, fraud prevention, or legal compliance.

Data Security

We protect personal data through TLS 1.2+ encryption in transit, role-based access controls, periodic security reviews, and contractual security obligations for subprocessors. No system is perfectly secure.

Data Retention

We retain personal data only as long as needed. Accounts inactive for 90 consecutive days trigger deletion of associated personal data. Anonymized usage data may be kept for analytics.

Third-Party Services & Ad Partners

Advertisements are served through AppLovin and its mediation partners.

May Be Shared

  • Resettable advertising identifiers
  • Device model, OS, screen size
  • Session frequency and duration
  • Ad impressions, clicks, conversions
  • Country and language

Never Shared

  • Email or phone number
  • Account credentials
  • Identity-linked merge history
  • Precise GPS location
  • PayPal payout details

Partner Privacy Policies

App Permissions

PermissionPurpose
INTERNETOnline play, ads, and updates
ACCESS_NETWORK_STATEDetect connectivity for stable gameplay
ACCESS_WIFI_STATEConfirm Wi-Fi availability
AD_IDResettable advertising identifier
VIBRATEHaptic feedback on merges and rewards
ACCESS_ADSERVICES_TOPICSPrivacy Sandbox Topics API
ACCESS_ADSERVICES_ATTRIBUTIONCampaign attribution
BIND_GET_INSTALL_REFERRER_SERVICEInstall source measurement
BIND_APPHUB_SERVICEAd delivery optimization
ACCESS_ADSERVICES_AD_IDAd service API compliance
FOREGROUND_SERVICECritical foreground tasks
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSIONSecure internal broadcasts

Analytics & Endpoints

Our backend at https://yktwd.sinmerge.com/ supports progress sync, anonymized analytics, performance monitoring, and customer support.

Your Privacy Rights

Email dr.rosemariemerz@gmaill.com to exercise any right.

GDPR (EEA)

CCPA / CPRA

VCDPA (Virginia)

Opting Out

Android: Settings → Google → Ads → Opt out of Ads Personalization

iOS: Settings → Privacy & Security → Tracking → Allow Apps to Request to Track (off)

Email dr.rosemariemerz@gmaill.com with subject "Do Not Sell My Personal Information".

International Transfers

Personal data may be processed on servers outside your country. We apply encryption and contractual safeguards designed to provide equivalent protection.

Children's Privacy

Shiny Merge is not directed to children under 13. Contact dr.rosemariemerz@gmaill.com to request deletion if you believe a child provided personal data.

Disclosure Requirements

Third-Party Links

External sites linked from the App have their own privacy policies. Review those policies before sharing personal data.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on you under applicable data protection law.

Data Protection Officer

For privacy compliance inquiries, contact our Data Protection Officer at dr.rosemariemerz@gmaill.com.

Changes to This Policy

Get in Touch

Email: dr.rosemariemerz@gmaill.com

In-App: Settings → Help & Support

We respond within 48 hours.