SPLITSPECTRA PRIVACY POLICY Effective date: August 25, 2026 The latest version of this policy is always available online at https://splitspectra.com/privacy-policy. PT Mirsani Gambar Digital ("Mirsani", "we", "us", or "our") operates the SplitSpectra game (the "App"). This Privacy Policy explains what information we collect through the App, how we use it, and the choices you have. By using SplitSpectra, you agree to the collection and use of information as described here. If you have questions about this policy, contact us at privacy@splitspectra.com. 1. INFORMATION WE COLLECT a) Account information If you create an account to save progress online or appear on leaderboards, we collect: - A username you choose (this is not required to be your real name) - A display name you choose (this is not required to be your real name nor be the same with your username) - A password (stored securely by our authentication provider, Firebase Authentication; we never see or store your password in plain text) - An internal account identifier - Your account creation date - Your country, if you provide it (this is not required to be your real country) You may also use the App without an account ("guest mode"), in which case no account information is collected and your progress is kept only on your device, if any. b) Gameplay and usage data When signed in, we store your game scores, per-puzzle-type statistics, and in-app virtual currency ("Diamonds") balance, so they carry over between devices and can appear on public leaderboards under your chosen display name. c) Feedback and support data If you submit feedback or report a bug through the App, we collect the message you write, together with your app version, build number, device locale, platform (Android/iOS), operating system version, and device model, to help us diagnose and respond to your report. If you are signed in, your report is linked to your account. d) Diagnostics and crash data We use Firebase Crashlytics to automatically collect crash reports and error logs (including device model, operating system version, and stack traces) when the App crashes or encounters an error, so we can find and fix bugs. We also use Firebase App Check, which uses on-device attestation (Google Play Integrity on Android, App Attest on iOS) to verify that requests to our servers come from a genuine, unmodified copy of the App; this does not identify you personally. e) Advertising data The App displays ads served by Google AdMob (Google Mobile Ads SDK). To serve ads, Google and its advertising partners may collect your advertising identifier (Android Advertising ID / Apple IDFA) and other device and usage data, which may be used to show personalized ads if you consent, or non-personalized ads if you do not. Before any ad is requested, the App asks for your consent through a Google-certified consent form (Google's User Messaging Platform) where required by your region (e.g. EEA, UK, or applicable US states). You can change your ad consent choice at any time from Settings > Ad Privacy Options within the App, and you can reset or limit your advertising identifier from your device's system settings. f) Locally stored preferences Settings such as sound, haptics, tutorial progress, and language override are stored only on your device and are never transmitted to us. We do not request access to your camera, photo library, contacts, microphone, or precise location, and the App does not collect any of that information. 2. HOW WE USE INFORMATION We use the information described above to: - Create and maintain your account and sync your progress across devices - Operate leaderboards and other online features - Respond to feedback and bug reports - Diagnose crashes and improve app stability and performance - Detect and prevent fraud, abuse, and unauthorized access to our backend services - Serve and measure advertising, consistent with your consent choices - Comply with legal obligations 3. THIRD-PARTY SERVICE PROVIDERS We share information with the following service providers, who process it on our behalf under their own privacy and security safeguards: - Google Firebase (Authentication, Crashlytics, App Check) — https://firebase.google.com/support/privacy - Google AdMob / Google Mobile Ads SDK — https://policies.google.com/privacy We do not sell your personal information. We do not share your information with third parties for their own independent marketing purposes, except as described above for advertising delivery. We may also disclose information if required by law, to protect the rights, safety, or property of Mirsani or our users, or in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections. 4. DATA RETENTION We retain account and gameplay data for as long as your account remains active. If you delete your account through the App, this data is erased immediately, as described in Section 5 below. Bug report and diagnostic data is retained only as long as needed for troubleshooting and is periodically purged. 5. YOUR RIGHTS AND CHOICES - Access and correction: signed-in players can view and update their display name and country from within the App, but not their username. - Data export: signed-in players can download a full copy of the data associated with their account (account details, game statistics, diamond balance and transaction history, and any bug reports linked to their account) at any time from Profile > Export My Data within the App. - Account and data deletion: signed-in players can permanently delete their account at any time from Profile > Delete Account within the App. This immediately and irreversibly erases your username, display name, country, game statistics, and diamond balance, and deletes your sign-in credential so the account can never be accessed again. Any bug reports you previously submitted are kept for support purposes but may be unlinked from your account. - If you no longer have the App installed, you can export or delete your data from https://splitspectra.com/account by verifying your username and password. - Advertising choices: manage your ad consent at any time from Settings > Ad Privacy Options in the App, or limit ad tracking from your device's system settings. - Depending on where you live (for example, the EEA, UK, or certain US states), you may have additional rights not covered above, such as the right to object to or restrict certain processing. These are handled on a case-by-case basis; for your security, we can only act on verified requests from the account holder — see Section 6 for why this also applies to requests made on behalf of someone else. 6. CHILDREN'S PRIVACY SplitSpectra is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. If a child has created an account, that account can be deleted the same way any account is deleted — see "Account and data deletion" in Section 5 above — using the account's username and password. We can only act on account deletion requests we can verify come from the account holder, so we are unable to delete an account based solely on a third party's unverified claim that it belongs to a child; a parent or guardian who wishes to delete a child's account will need access to that account's sign-in credentials to do so. If you have a concern you are unable to resolve this way, contact us at privacy@splitspectra.com. 7. INTERNATIONAL DATA TRANSFERS Our service providers may process and store information on servers located outside your country, where Google and our hosting infrastructure operate. We rely on appropriate safeguards required by applicable law for such transfers. 8. DATA SECURITY We use industry-standard measures, including encrypted network connections and server-side request verification (Firebase App Check), to protect information from unauthorized access, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. 9. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Effective date" above. Continued use of the App after changes take effect constitutes acceptance of the revised policy. 10. CONTACT US PT Mirsani Gambar Digital Email: privacy@splitspectra.com