Privacy Policy for Summer Blast

Last Updated: August 24, 2026

We place paramount importance on safeguarding users’ privacy preferences and personal data. Every instance of the pronoun “you” within this privacy document shall be interpreted in strict accordance with the terms stipulated herein. This Privacy Policy aims to articulate in a straightforward, transparent manner how we collect, store, process and utilize your personal information when you use our mobile application Summer Blast (hereinafter referred to as the “App”). We strongly recommend that you read this Policy in full to familiarize yourself with our privacy specifications, data processing procedures, and your legal entitlements pertaining to your personal data. By launching the App, completing account registration (where applicable), or using any built-in App functionalities, you confirm that you have carefully reviewed this Policy and voluntarily agree to abide by all its terms and data processing rules.

User Information Collection and Utilization

1. In-App Behavioral Data Collection

We collect a broad range of App operation metrics and user behavioral statistics, including click frequencies, landing page details, page browsing trails, activated functional modules, permission authorization status, function verification results, the volume of applications installed on your device, third-party application package names, device brand and model specifications, network access modes (Wi-Fi or mobile cellular data), unique Firebase device identifiers, device hardware parameters, SIM card registration country, system default language, and advertising-related cookie data. All collected information is securely transmitted to officially authorized third-party analytical platforms such as Firebase and Facebook Analytics, alongside our proprietary internal data management system (ECS).

2. Device and Network Data Collection

To continuously refine your overall user experience on Summer Blast, we gather device and network data correlated with your App usage habits, privacy setting configurations and functional operation behaviors. The collected data scope covers SDK and API version details, mobile operating system types (Android or iOS), App operation timestamps, exclusive application identifiers, unique device serial numbers, device manufacturer particulars, system update logs, language and regional preferences, device time zone settings, Wi-Fi signal strength and other network connection status indicators, Google Play release metadata, advertising delivery mechanisms, access logs of advertising cooperation platforms, and ad tracking identifiers. Your device’s Android ID is utilized to record in-app ad interaction behaviors and qualifies as personal information under prevailing regulatory standards.

3. Personalized Advertising Data Usage

We utilize your Android advertising ID to deliver customized advertising content. This unique identifier is exclusively used for ad distribution and campaign effectiveness analysis. It contains no sensitive personal data, cannot be linked to your real identity, and bears no correlation with fixed device identification codes including SSAID, MAC address and IMEI.

4. Online Network Data Acquisition

When you access online features within Summer Blast, we collect your network access type (including Wi-Fi, 4G, 5G and other network environments) and IP address. This data collection is indispensable for maintaining stable network operation, elevating service quality, and enabling timely troubleshooting and resolution of network connection abnormalities.

5. Data Access Scope of Embedded Third-Party SDKs

Third-party software development kits embedded in the App are capable of collecting the following categories of user information:

l  Google Advertising ID: Supports Google’s advertising service ecosystem and enables precise audience targeting for ad delivery.

l  Basic Device Information: Encompasses device model, hardware configuration and the geographical location of the terminal device.

l  Anti-Fraud Monitoring Data: Functions to identify and block invalid or fraudulent ad clicks, exposure records and interactive activities.

l  User Demographic Data: Derived from IP address analysis to summarize macroscopic characteristics of user groups.

l  Advertising, Marketing and Analytical Data: Serves to optimize advertising campaign performance, dissect user behavior patterns and adjust marketing deployment strategies.

l  Advertiser Cookies: Stored and retrieved by advertising partners to document user ad interaction histories and preference habits.

These SDK services are independently operated and managed by respective third-party vendors, covering advertising monetization partners (Google AdMob, Facebook Audience Network, IronSource, AppLovin, Vungle, Unity Ads, Fyber, Amazon Ads, Pangle) and data analytics tools (Firebase, Facebook Analytics). Direct access links to the privacy policies of these third-party service providers are available in the dedicated Third-Party Partner Privacy Policies chapter of this document.

Legal Basis for Personal Data Processing

All personal data processing activities conducted by us to fulfill the purposes specified in this Privacy Policy are grounded in valid legal bases, which are elaborated in detail below:

1. Fulfillment of Contractual Obligations

To deliver the services you request, we must process relevant personal data to fulfill our contractual commitments. This involves processing necessary information to provide requested services and verifying user identities to guarantee secure service access. When you register for a Summer Blast account or activate specific built-in functions, we may process the registration and account data you submit. This allows us to deliver standardized App services accurately and fully perform our contractual obligations to users.

2. Compliance with Statutory Legal Obligations

We conduct specified data processing activities to comply with applicable laws and official regulatory requirements. Such compliance operations fall into two primary categories: first, maintaining financial and accounting records in accordance with official bookkeeping standards; second, disclosing user information to law enforcement agencies, regulatory authorities or authorized institutions when legally required. All such operations are strictly implemented in full compliance with current legal and regulatory provisions.

3. Legitimate Business Interests

We may also process your personal data based on legitimate business interests, a legal ground that balances our operational demands with the protection of your privacy rights. The applicable scope includes:

l  Maintaining and optimizing user relationships, including issuing notifications regarding new features, service upgrades, and important policy or function updates related to Summer Blast;

l  Safeguarding the overall security and stability of the App, server systems and user data, including defending against unauthorized login attempts, fraudulent behaviors and other potential security vulnerabilities;

l  Communicating with users to collect product feedback, so as to continuously optimize App functions and better align with user expectations.

All data processing activities conducted under this legal basis will not unreasonably infringe on your legitimate privacy rights.

4. Voluntary User Consent

We only carry out non-essential data processing activities after obtaining your explicit, voluntary approval. This primarily applies to optional scenarios such as enabling third-party advertising cookies, sharing information with marketing partners for tailored ad delivery, and accessing non-mandatory device permissions. In certain cases, authorizing the collection of relevant personal data is required to unlock these optional App functions; without such consent, corresponding features may be restricted or unavailable. You retain the right to withdraw your consent at any time within legal limits. However, consent withdrawal may restrict your full access to partial functional services of Summer Blast.

Information Collection Methods and Data Security Protection Mechanisms

1. Automatic In-App Data Collection

Upon launching the Summer Blast App, our backend system automatically collects user information as specified in this Policy. All automatic data collection behaviors comply with this Policy as well as local, regional and international data protection laws and regulations. This essential data collection requires no additional operation from users, and it underpins the stable operation of core App functions and continuous optimization of user experience.

2. Data Acquired from Third-Party Download Platforms

If you install Summer Blast via external application distribution channels such as Google Play or Apple App Store, we may obtain limited basic user data from these platforms, including unique device identifiers, installation timestamps and basic platform account information linked to your user profile. Information shared by third-party platforms is subject to their independent privacy rules and service terms, and we only process such data within the scope permitted by relevant platform rules and applicable laws.

3. Personal Information Protection and Security Mechanisms

Protecting your personal data ranks among our core operational priorities. We adopt comprehensive industry-standard protection measures and deploy encryption technologies where appropriate to prevent unauthorized access, data leakage, loss, misuse, disclosure, modification and deletion of your personal information. Our core security protection measures include:

l  Encryption Protection: We apply high-strength encryption standards to both stored personal data and data transmitted between user devices and our servers, ensuring the confidentiality of sensitive information and preventing data tampering during network transmission.

l  Strict Access Management: Access to user personal data is strictly restricted to authorized staff who require such access for job duties, including technical administrators and customer service personnel. All data access behaviors are fully recorded in audit logs and reviewed regularly to detect and block unauthorized operations in a timely manner.

l  Continuous Security Optimization: We conduct regular security inspections, vulnerability detection and penetration testing on the App, backend servers and data infrastructure. All identified security risks are promptly remediated through patch updates, system upgrades and security rule adjustments, effectively defending against network attacks, malware intrusion and other emerging cyber threats.

Your Privacy Rights

1. Right to Revoke Consent

You hold the full right to withdraw your voluntary authorization at any time for all data processing activities based on your consent, including the delivery of personalized advertising content on Summer Blast. Consent revocation will not invalidate the legality of data processing completed prior to your withdrawal request. Furthermore, it will not affect independent data processing operations conducted by third parties based on other valid legal grounds, such as mandatory legal compliance obligations.

2. Right to Access and Correct Personal Data

In compliance with global and regional data protection legislations including GDPR and CCPA, you have the legal right to access all personal data records we retain regarding your use of Summer Blast. You are also entitled to amend any inaccurate, incomplete or outdated personal data stored in our system to ensure the recorded information is consistent with your latest personal status.

3. Application Procedures for Data Access and Correction

You may submit an official request to obtain a complete copy of your stored personal data, covering in-app interaction logs, device-specific information and personalized advertising preference records. We respond to all valid user requests free of charge within 30 calendar days. Where permitted by local laws, we may charge a reasonable service fee for frequent, repetitive or excessive requests. We reserve the right to deny partial data access requests if disclosure would infringe the privacy rights of other Summer Blast users or violate legal confidentiality provisions. For data fields that cannot be manually updated via the App’s built-in settings (such as historical activity records and operation logs), you may submit a formal correction application, and we will verify and update the relevant information within a reasonable period.

4. Right to Data Deletion (Right to Be Forgotten)

You may apply for permanent deletion of your personal data under the following scenarios, and we will execute the deletion process unless mandatory legal data retention obligations apply:

l  The personal data is no longer required to fulfill the original processing purpose, such as promotional data generated from concluded seasonal or holiday events on Summer Blast;

l  You have formally withdrawn the consent that previously authorized our data processing activities;

l  You have raised a valid objection to data processing, and our legitimate operational interests cannot override your fundamental privacy rights;

l  The data processing is conducted in violation of relevant regulations, or data deletion is required to meet statutory compliance requirements.

5. Right to Restrict Data Processing

You are eligible to apply for restrictions on our personal data processing operations under the following circumstances, and we will implement processing restrictions immediately after verifying the validity of your request:

l  You challenge the accuracy of your stored personal data. We will suspend relevant data processing during the verification process, which may temporarily affect partial App functions such as personalized ranking features of Summer Blast;

l  The ongoing data processing is unlawful, and you opt to restrict processing activities rather than requesting full data deletion;

l  We no longer require the data for original operational purposes, yet you need the data to initiate, defend or respond to legal claims;

l  We are in the process of evaluating whether our legitimate business interests take precedence over your privacy rights.

Data under processing restrictions may only be handled in four limited scenarios: when you provide new explicit authorization, when processing is necessary to resolve legal disputes, when processing protects the legitimate rights of other users or third parties, or when processing serves major public interests. We will notify you via your reserved contact method once all processing restrictions are lifted.

6. Right to Object to Data Processing

You have statutory rights to oppose our personal data processing operations at any time, regardless of whether the processing is based on your authorized consent, contractual service obligations for core Summer Blast functions, or our legitimate business interests such as user behavior analysis for product optimization. We will terminate the targeted processing activities unless the processing is necessary for ongoing legal proceedings, mandatory legal compliance or compelling public interests. For objections targeting direct marketing activities, we will immediately cease all related data processing without further explanation.

7. Third-Party Notification Obligations

If we have shared your personal data with external third-party service providers (including Summer Blast’s advertising partners such as Google AdMob), we will promptly notify these third parties of all your valid requests for data correction, deletion or processing restriction. We are exempted from this notification obligation only if implementation is technically unfeasible or would incur excessive and unreasonable operational costs. At your request, we will also provide a detailed list of cooperating third parties, including their official contact information and the specific categories of your data shared with each partner.

8. Protection Against Automated Decision-Making

Except for legally exempt scenarios (such as automated fraud detection for in-app purchases), you are protected from purely automated decision-making and user profiling activities that produce legal consequences or substantially impact your user rights, including account suspension or restricted access to premium Summer Blast functions. For any automated decisions concerning you, you have the right to request manual human review and obtain clear clarification on applicable decision-making standards and logical rules.

9. Right to Data Portability

When your personal data is processed to fulfill Summer Blast’s core contractual service obligations, based on your explicit consent, or through automated technical means, you may request us to deliver your data in standard, widely adopted and machine-readable formats such as CSV and JSON. Where technically achievable and not infringing on the legitimate rights and interests of other parties, we will assist you in transferring your personal data directly to another data controller at your explicit request.

10. Right to File Complaints

If you deem your privacy rights infringed during your use of Summer Blast, you may submit a complaint via our official contact email: prosperrea@gmail.com. We will confirm complaint receipt within 5 working days and deliver a complete processing result and solution within 30 days. You also reserve the right to lodge a formal complaint with the official data protection regulatory authority of your residential country, workplace location or the jurisdiction where the alleged privacy infringement occurs.

Privacy Rights for California Residents

Residents of California are entitled to additional privacy protection rights under the California Consumer Privacy Act (CCPA), which supersede our standard privacy provisions. Detailed guidelines for exercising these exclusive state-level rights are specified in the subsequent “Exercising Your California Privacy Rights” section of this document. It is clarified that the following provisions apply exclusively to California users, while non-California users shall abide by the general terms of this Privacy Policy applicable to their regions.

1. Right to Access and Obtain Personal Data Details

California users have statutory eligibility to submit valid requests for full details of all personal data we have collected about them within the preceding 12 months. The disclosure report we provide will cover comprehensive information as follows:

l  All categories of collected personal data, including user identification information, commercial data and internet usage activity records;

l  Source channels for each type of collected data, including data actively submitted by users, data sourced from third-party platforms, and data automatically collected via the Summer Blast App;

l  Legitimate business and operational purposes for data collection, including App function optimization and personalized content delivery for users;

l  Specific personal data records currently stored by us, presented in a clear and user-friendly format.

2. Right to Personal Data Deletion

You have the right to request permanent erasure of all personal data collected by our platform. Upon verification and approval of your valid deletion request, we will erase your relevant data from our internal systems and require our third-party service providers and data processors to perform synchronous deletion operations. Nevertheless, this deletion right is subject to legal exceptions. We may retain your personal data for the following legitimate purposes:

l  Delivering core services you have requested and authorized, such as maintaining your Summer Blast user account and preserving your in-app usage progress;

l  Resolving system technical faults and ensuring the stable and continuous operation of Summer Blast;

l  Complying with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.) and other valid state-level privacy laws and regulations;

l  Conducting public welfare-oriented scientific, historical or statistical research, provided that the research complies with strict ethical standards and applicable privacy rules;

l  Fulfilling statutory legal obligations, including responding to legal subpoenas, court rulings, regulatory supervision requirements and other legally permitted scenarios.

3. Personal Data Retention Rules

l  We may extend the retention period of your personal data in two circumstances: you have granted explicit authorization for extended retention and have not withdrawn your consent; or data retention is mandatory under federal, state or local laws and regulatory provisions.

l  In line with our data minimization principle, all stored user personal data will be completely and securely deleted once Summer Blast terminates all operational services.

4. Request Processing and Response Mechanisms

We commit to acknowledging and responding to all verifiable consumer requests submitted under the CCPA within 45 calendar days upon receipt. If your request is complex and requires extended processing time (with a maximum extension of 90 days as permitted by CCPA regulations), we will promptly notify you via email, phone or your preferred electronic communication channel, clearly stating the extension rationale and updated final response timeline.

We do not charge fees for processing valid CCPA user requests under normal circumstances. However, we reserve the right to levy a reasonable service fee for repetitive, excessive or obviously groundless requests. Prior to charging any fees, we will provide you with a written fee explanation and detailed cost assessment, allowing you to adjust or withdraw your request at your discretion.

5. Non-Discrimination Commitment

We strictly prohibit discriminatory behaviors against any user exercising their CCPA privacy rights. We will not take any adverse measures against you solely for claiming your legal privacy entitlements, including refusing your access to Summer Blast and its supporting services, imposing differentiated prices and service fees, providing degraded service quality, or enforcing unfair service terms and restrictive conditions.

6. Special Provisions for Minor User Data Collection

The Summer Blast App is not designed or intended for users under the age of 13, and we have adopted targeted technical and operational measures to proactively avoid collecting personal data from underage users in this age group. If we confirm that we have unintentionally acquired personal information from users under 13, we will immediately delete the relevant data from our systems and require cooperating service providers to complete synchronous deletion.

Parents or legal guardians of children under 13 may contact us at any time to inquire about our minor data processing rules and practices. Users aged 13 to 16 are eligible to independently authorize optional data processing activities related to Summer Blast, and their parents or legal guardians may also contact our team directly to exercise relevant privacy rights on their behalf.

Privacy Rights for EU and UK Residents

If you reside within the European Union or the United Kingdom, all personal data processed in relation to your Summer Blast usage is protected by stringent data protection laws. EU users are covered by the General Data Protection Regulation (GDPR), while UK users are protected under the UK Data Protection Act 2018, which aligns with GDPR standards post-Brexit. Under these regulatory frameworks, you are granted the following core privacy entitlements:

1. Right to Confirm Personal Data Processing

You may submit an official inquiry to confirm whether we are processing your personal data. Where processing is ongoing, you are entitled to obtain full details of the personal data we store about you, alongside clear explanations of processing purposes and valid legal bases supporting such activities.

2. Right to Correction and Data Validation

If any personal data records we hold about you are inaccurate, outdated or incomplete, you have the statutory right to demand prompt correction and supplementation of such data. You may also apply for verification of your stored personal data at any time to ensure its accuracy, currency and compliance with intended processing purposes.

3. Right to Data Deletion (Right to Be Forgotten)

You may apply for permanent deletion of your personal data in cases where the data is no longer needed for the original collection purpose, when you withdraw prior consent and no alternative legal basis supports continued processing, or when data processing violates legal regulations. This right is not absolute; we may retain relevant data if legally required to fulfill statutory duties or support legal proceedings initiation, defense and response.

4. Right to Object to Data Processing

You have the right to raise objections at any time if we process your personal data based on legitimate business interests (excluding user consent or contractual necessity). We will immediately terminate processing activities unless we can prove that overriding legitimate operational interests take precedence over your privacy rights, or continued processing is essential for legal proceedings.

5. Right to Data Portability

You are entitled to obtain the personal data you have provided to us in standard, widely recognized and machine-readable formats including CSV and JSON. We will not impose unnecessary restrictions on your independent data transfer to another eligible data controller, provided the operation is technically feasible and does not infringe third parties’ legitimate rights and interests.

6. Channels to Exercise EU/UK Privacy Rights

To exercise any of the above rights, please submit your request via email to: prosperrea@gmail.com. We will confirm application receipt within 7 working days and deliver a full substantive reply within one calendar month, fully complying with GDPR and UK data protection legislation. For complex requests requiring extended review, we will notify you in advance and extend the response period by up to two additional months.

If you believe we have failed to comply with prevailing data protection rules, you have the right to file a formal complaint with your local data protection authority. EU residents may contact their national data protection supervisory authority, while UK users may submit complaints directly to the Information Commissioner’s Office (ICO).

Third-Party Privacy Policy Links

We publish third-party partner privacy policy links to maintain full transparency over user personal data handling outside our own system ecosystem. These partners provide core support for the operation of Summer Blast, covering data analysis, advertising delivery and technical service infrastructure. It should be clearly noted that all linked privacy policies are independently formulated and managed by the respective third-party service providers. We hold no right to revise, supervise or enforce the rule contents of these external policies.

Each third-party privacy policy elaborates its internal data operation rules, including methods of user information collection, data application scope for service provision, and data sharing arrangements with its affiliated companies and sub-processing institutions. Since your use of Summer Blast may involve data transmission to these third-party platforms, we highly advise you to read each privacy policy carefully to fully understand your privacy rights under their data processing rules.

The full list of third-party privacy policy links is set forth below:

1.       Adjust: https://www.adjust.com/terms/privacy-policy/

2.       Unity: https://unity3d.com/legal/privacy-policy

3.       Pangle: https://www.pangleglobal.com/privacy

4.       Mintegral: https://www.mintegral.com/en/privacy

5.       Vungle: https://vungle.com/privacy/

6.       Max/Applovin: https://www.applovin.com/privacy/

7.       ironSource: https://www.is.com/privacy-policy/

Children’s Privacy Safeguards

The protection of minor users’ personal privacy stands as a fundamental principle in our overall data management framework for Summer Blast. We fully acknowledge that minors need extra guidance when using online digital services. Therefore, we sincerely recommend parents and legal guardians to actively pay attention to and supervise their children’s online behaviors, including the use of mobile game applications.

If you are a parent or legal guardian and discover that your minor child has submitted personal details — such as real name, contact information or device identification codes — to us via Summer Blast without your prior consent, please get in touch with us promptly. After we receive and verify your identity and guardianship certification for security confirmation, we will conduct a priority review of the involved data and complete permanent deletion from our server systems as soon as practicable, complying fully with global minor privacy protection regulations including COPPA and GDPR-K.

Privacy Policy Updates

We reserve the right to revise this Privacy Policy from time to time to adapt to functional iteration of Summer Blast, internal business adjustment and updates to applicable data protection legislation, including revisions to the CCPA, GDPR and UK Data Protection Act. Once we make material changes that substantially affect user privacy rights and our daily data processing practices, the latest version will be prominently displayed inside Summer Blast (usually under Settings > About > Privacy) as well as on official application distribution channels such as Google Play and App Store product pages.

For important policy revisions, we will also deliver reminders through accessible notification methods, such as in-app pop-up prompts, system push messages, or emails sent to the contact address you associated with Summer Blast (if provided). We suggest you carefully read the updated clauses to understand how the revisions may impact your personal information arrangement.

Should you not agree to the updated Privacy Policy terms, you may stop using Summer Blast at any time. Your continued access to and use of the application after the revised policy takes effect will be deemed as voluntary acceptance of the new terms.

Contact Information

If you have any inquiries, feedback or doubts regarding this Privacy Policy, or concerning our processing methods of your personal information related to Summer Blast, you may reach us through the official contact channel below:

l   Official Contact Email: prosperrea@gmail.com