PRIVACY POLICY

Last Updated: June 26, 2026

Hangzhou Yitaimei Digital Technology Co., LTD. (also "we", "us", "our" or "HZYTM") is dedicated to inspiring players' dreams around the world. This Privacy Policy explains what personal data we collect from you, how we process, use, store, and protect such personal data, and whether we disclose your personal data to anyone else. We will also inform you herein of your rights to update, manage, and delete your personal data.

This Privacy Policy applies to our games, website, playtesting, performance evaluation, and subsequent release or distribution activities (collectively referred to as the "Services") provided by us.

Please read this Privacy Policy carefully to understand our practices regarding your personal data. By accessing, participating in, or using our Services, you acknowledge that you have read and understood how we collect, process, use, share, and store your personal data as described in this Privacy Policy.

If you change your mind in the future, you may withdraw your consent regarding your personal data in accordance with Section 6 of this Privacy Policy. If you have any comments, questions, or complaints regarding the processing of your personal data, please contact us at:

E-mail: contactus@hzytm.com

1. What Data We Collect

To optimize our game performance, minimize bugs, ensure technical stability, and subsequent release or distribution, we limit our data collection to the minimum necessary. We collect information in the following ways:

1.1 Data you voluntarily provide to us

• Inquiries & Support Data: You do not need to create an account to use our Services. However, if you contact us directly (e.g., via email for customer support, bug reporting, or feedback), we will collect your email address, your name, and any other information you voluntarily choose to provide in order to resolve your request.
• Voluntary Surveys: To understand the performance of our games and make improvements, we may occasionally conduct optional surveys within the testing environment. During these surveys, you may voluntarily elect to provide basic information (such as your age range, game zone, preference interests, and game feedback). Refusal to provide such information will not affect your access to our testing activities.

1.2 Data we automatically collect

When you use our Services or participate in our game testing, we (and our third-party SDK partners) automatically collect certain device and behavioral metadata:

• Device Identifiers: AppsFlyer ID (AFID) and Facebook ID (FBID) required for installation attribution and measurement.
• Usage and Diagnostic Data: Application performance metrics, system load levels, crash logs, error-reporting data, and interaction data required to evaluate game stability and functionality.

2. How We Use Your Personal Data

We process your personal data in accordance with applicable global privacy principles, with a primary focus on U.S. state privacy frameworks (such as the California Consumer Privacy Act, as amended by the CPRA). We rely on the following standard processing grounds:

• Contractual Necessity: To provide the testing environment you requested, allow you to access our Services, and deliver customer support.
• Legitimate Business Interests: To analyze and optimize game stability, monitor technical performance, identify and resolve crash errors, secure our Services against fraudulent activities, and prevent cheating.
• Consent: Where required by mobile platform policies (e.g., Apple's App Tracking Transparency framework), we will seek your explicit consent before collecting and sharing device identifiers with our SDK partners.
• Legal Compliance: To comply with applicable legal obligations, including cooperating with law enforcement bodies and protecting the safety and vital interests of our users.

WE DO NOT USE YOUR DATA FOR INDEPENDENT COMMERCIAL PROFILING, PERSONALIZED PUSH ADVERTISEMENTS, OR TARGETED CROSS-CONTEXT BEHAVIORAL ADVERTISING.

3. How We Protect and Safeguard Your Personal Data

3.1 Data Security Management System

We have implemented a comprehensive data security management system aligned with industry standards to protect your personal data from unauthorized access, modification, disclosure, or deletion.

• Technical Controls: Our website and data transfer pipelines are fully encrypted using HTTPS protocols. We deploy firewalls, Web Application Firewalls (WAF), and access control mechanisms to safeguard our databases.
• Administrative Controls: We enforce strict access control policies, ensuring that only authorized personnel have access to protected data under a strict "need-to-know" basis. We conduct regular data protection training for our employees.

3.2 Data Security Incidents Response

While we implement robust security measures, no transmission over the internet is completely secure. In the event of a personal data breach or security incident, we will immediately initiate our incident response protocol to contain and mitigate the impact. Where required by law, we will promptly notify you and the competent regulatory authorities of the breach, providing details regarding the nature of the incident, our remedial measures, and suggested actions you can take.

4. How We Share and Disclose Your Personal Data

We do not sell your personal data. We only share information with authorized service providers (data processors) who assist us in game testing, evaluation, and analytics.

4.1 Sharing with SDK Partners

To support game optimization and testing measurement, we integrate third-party SDKs:

• AppsFlyer: Used for installation attribution and testing analysis. (For details, see: https://www.appsflyer.com/legal/privacy-policy/).
• Meta/Facebook Audience Network (Analytics): Used to capture error logs and analyze game event performance. (For details, see: https://www.facebook.com/about/privacy/).

4.2 Legal and Regulatory Disclosures

We may disclose your personal data to law enforcement bodies, regulatory agencies, or courts when required by law, such as to respond to a subpoena, prevent fraud, or protect the safety and rights of our users or the public.

4.3 U.S. State Privacy Rights Compliance (e.g., CCPA/CPRA)

We do not "sell" your personal data or "share" it for cross-context behavioral advertising. Where applicable under U.S. state laws, we restrict our SDK partners' data usage to prevent further commercial utilization of your device identifiers.

5. Data Storage

5.1 US Centralized Storage

All personal information collected through our Services is securely stored on Amazon Web Services (AWS) servers located in the United States.

5.2 Blocking of Mainland China

Our Services are strictly not directed at, nor intended for, any individual located in the mainland of China. We do not knowingly collect, process, or store personal data from individuals physically present in the mainland of China. To enforce this, we employ technical measures to restrict access from the mainland of China. Any access from this region is unauthorized, voluntary, and does not establish any contractual or service relationship with us.

6. How You Can Manage and Delete Your Personal Data

We are committed to providing robust data rights to our players. Regardless of your location, you may request to Access, Rectify, or Erase your personal data, or Object to or Restrict certain processing activities.

6.1 Exercise of Rights via Email

To ensure strict security and verify your identity, all Data Subject Right (DSR) requests must be submitted exclusively via our designated privacy email: contactus@hzytm.com. We will respond to and address your verified request without undue delay and within one (1) month (or as required by local laws) of receipt.

6.2 How to Request Data and Account Deletion

To fully comply with global platform terms (including Google Play and Apple App Store Developer Terms) and ensure your right to erasure is fully respected, we provide a clear and direct method for requesting data deletion:

• Email Submission: Send an email from your registered email address to contactus@hzytm.com with the subject line "Data Deletion Request" or "Delete My Playtesting Profile".
• Processing & Verification: Upon receiving your request, our privacy team will verify your identity (which may require matching your device identifier or temporary testing profile details).
• Permanent Erasure: Once verified, we will arrange to permanently delete or anonymize all personal data associated with your playtesting activities from our active databases and AWS servers.
• Testing Environment Baseline Deletion: Regardless of individual requests, please note that because this is a testing and launch-preparation environment, all collected testing data is automatically and permanently deleted or anonymized within one (1) month of the completion of the respective testing phase.

7. Children's Personal Data Protection

Our Services are strictly not directed to individuals under the age of 18 (or the minimum legal age in your jurisdiction). We do not knowingly collect, store, or process personal data from minors.

We urge parents and legal guardians to monitor their children's online activities. If a parent or legal guardian believes that we have inadvertently collected personal data from a minor, please contact us immediately at contactus@hzytm.com. Upon verification, we will permanently delete the relevant data from our servers as quickly as possible.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes and progress in our Services, data protection laws, or operational requirements. When we make changes, we will update the "Last Update" date at the top of this page and post the revised policy within our Services. If we make material changes to how we process your personal data, we will provide additional notice.

We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit. If you do not consent to the modified Privacy Policy, you must discontinue your use of our Services.

9. Contact Our Privacy Team

We have established a dedicated privacy protection team to monitor and protect your personal data. If you have any questions, feedback, or requests regarding this Privacy Policy, please contact us at: contactus@hzytm.com.