Lucky Gem Merge
Effective September 10th, 2026
Merging gems should never mean merging away your clarity. This policy explains what personal data Lucky Gem Merge gathers, why it is processed, who receives it, and which choices you retain under the GDPR, CCPA/CPRA, and VCDPA.
The following vocabulary is used consistently throughout this policy:
Each purpose rests on a lawful basis — contract performance, legitimate interests, consent, or legal obligation.
| Recipient | Reason |
|---|---|
| Service Providers | Hosting, analytics, ad delivery, payment processing, customer support |
| Business Transfers | Merger, acquisition, reorganization, financing, or sale of assets |
| Affiliates | Entities under common control, remaining bound by this policy |
| Business Partners | Parties with whom joint promotions or events are operated |
| Legal Obligations | Where law, regulation, subpoena, court order, or government request requires it |
| Your Consent | Any additional purpose you have specifically approved |
PayPal data protection. We do not sell or rent user PayPal account email addresses. That information is disclosed only with your explicit consent or where applicable law requires it, and is used solely to complete reward payouts.
Advertising is delivered through AppLovin and its mediated partner network. Only limited categories of data reach advertising partners.
Gameplay delivery, progress synchronization, configuration, and analytics traffic are routed through https://arolz.luckygeg.com. Analytics payloads are anonymized before storage and are not structured to carry directly identifying information.
Every permission is disclosed before installation, limited to the stated purpose, and aligned with Google Play Developer Program Policies.
| Permission | Purpose | Data collected |
|---|---|---|
INTERNET | Network access for ads, updates, and gameplay | Network status, transfer statistics |
ACCESS_NETWORK_STATE | Adapt behavior to connection type | Network type and status |
ACCESS_WIFI_STATE | Keep Wi-Fi sessions stable | Wi-Fi status, signal strength |
AD_ID | Advertising identifier for personalization | Resettable device ad ID |
VIBRATE | Haptic feedback when gems merge | None |
ACCESS_ADSERVICES_TOPICS | Ad interest topic signals | Advertising topic data |
ACCESS_ADSERVICES_ATTRIBUTION | Campaign attribution measurement | Attribution data |
ACCESS_ADSERVICES_AD_ID | Comply with modern ad API requirements | Ad service identifiers |
BIND_GET_INSTALL_REFERRER_SERVICE | Identify install source | Install source, campaign parameters |
BIND_APPHUB_SERVICE | Optimize ad delivery via AppHub | Ad parameters, impression data |
FOREGROUND_SERVICE | Maintain critical functions when backgrounded | None |
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Secure internal broadcast communication | None |
Depending on where you live, local law gives you tools to access, correct, delete, or restrict how we use your Personal Data.
To exercise any of these, email delawareveronicapi2577@gmail.com and name the right you want to use. Identity verification may be required.
| Platform | Steps |
|---|---|
| Android | Settings → Google → Ads → enable “Opt out of Ads Personalization” |
| iOS | Settings → Privacy → Advertising → enable “Limit Ad Tracking” |
| Sale / sharing | Email delawareveronicapi2577@gmail.com with subject Do Not Sell My Personal Data |
Opting out stops interest-based targeting; non-personalized ads may still appear.
After 90 consecutive days of inactivity, your Personal Data is permanently deleted from our production systems. Anything retained beyond that period exists only as anonymized or aggregated Usage Data that can no longer identify you. Longer retention applies solely where a legal, tax, accounting, or dispute-resolution obligation requires it.
We maintain commercially reasonable physical, administrative, and technical safeguards: encryption of sensitive data in transit, TLS 1.2 or higher, need-to-know access controls, periodic audits, and contractual security obligations for partners. No transmission or storage method is completely secure, so absolute security cannot be guaranteed.
Personal Data may be transferred to and processed on servers outside your country of residence. Such transfers are protected by TLS 1.2 or higher and, where required, by appropriate contractual safeguards including Standard Contractual Clauses. Continued use of the Application constitutes agreement to these transfers.
Lucky Gem Merge is not directed to individuals under the age of thirteen (13), and we do not knowingly collect Personal Data from children under 13. A parent or guardian who believes a child has provided Personal Data should contact delawareveronicapi2577@gmail.com; the data will be deleted promptly once verified.
The Application may link to websites or services we do not operate. We are not responsible for their content, privacy practices, or security. Please review the privacy policy of any external destination you open.
California Civil Code Section 1798.83 permits California residents to request, once per calendar year, details of personal information shared with third parties for those parties' direct marketing purposes. We do not share personal information for third-party direct marketing. Residents wishing to confirm this may write to delawareveronicapi2577@gmail.com with the subject line Shine the Light Request.
No consistent industry standard governs responses to browser Do Not Track (DNT) signals. Lucky Gem Merge operates primarily as a native mobile experience, and where WebViews appear we do not currently alter practices based solely on DNT headers. Please use the device-level and email opt-out routes described above instead.
This policy may be revised as features or laws change. Amendments take effect once the updated text appears on this page and the effective date is refreshed. Material changes may be announced in-app or by other reasonable means. Periodic review of this page is recommended.