PRIVACY POLICY - Hitopicus

Last update: July 29th, 2026

Welcome to Hitopicus privacy policy!

First of all, thank you for playing our games!

This document describes how and why Hitopicus collects and processes your personal data (the “Data”) when you interact with our mobile games (the “Games”) or our https://hitopicus.com website (the “Website”). Hereinafter, we refer to both the Games and the Website as the “Services”.

We act as a data controller for the processing of personal data under applicable privacy laws, including the General Data Protection Regulation ("GDPR").

Please note that this policy only applies to information collected and/or processed received by Hitopicus through your use of the Services.

Please note you must be over a certain age to play our Games and use our Services, depending on where you live. If you are under the legal age in your country, please do not play our Games or use our Services.

If you have any questions, feel free to contact us at contact@hitopicus.com.

1. Who we are

Hitopicus and its affiliated companies ("Hitopicus", "we", "our", "us") develop and publish mobile games and operate related websites and services (collectively, the "Services").

Hitopicus is a French company incorporated under number 994 459 576 with the Trade and Commerce registries of Pontoise and having its main place of business located at 1 Route de Montmorency, 95580 Andilly - FRANCE.

2. Our Games

2.1 Why do we collect or use your Data

When you install and play Hitopicus’s Games, we can collect and process some of your Data based on your express consent or for different purposes.

In cases in which Hitopicus is a data “controller” (meaning, when Hitopicus is the main decision-maker, exercising overall control over the purposes and means of the processing of your Data), Hitopicus only uses your Data with a legal basis for doing so, such as:

- for the performance of our contract with you;

- where you have given your consent for a specific purpose;

- to comply with our own legal and regulatory obligations;

- for our legitimate interests or those of a third party.

A legitimate interest happens when we have a business or commercial reason to use your personal information and includes our own interests or the interests of third parties, and can cover commercial interests (e.g. sustain our free-to-play model), so long as this is not overridden by your own rights and interests.

In cases we are required under law or regulation to obtain your consent for the processing of your personal information, we will ask for your consent.

Here's why Hitopicus may collect your personal information and the legal basis we rely on in each case:

• To provide and operate our Games: Contractual Necessity
• To show personalized ads, based on your preferences and interests: Consent
• To gather and provide third-party analytics, i.e. data collected through our applications may be shared with third-party partners that provide Hitopicus ’s with analytics services: Consent
• To gather first party analytics, i.e. Data collected through our applications may be used for the purposes of Hitopicus ’s internal analytics tool ›› to understand how users interact with our applications to continuously improve them. This Data is not shared with third party partners: Legitimate interest
• Attribution, i.e. match an advertisement of one of our Games you may have seen in another application with the install of such Game: Legitimate interest
• To ensure the functionalities of our applications (for instance, debug, maintain the apps): Legitimate interest

For all data processing activities that rely on users’ consent, you can always change your preferences and withdraw your consent in the privacy settings of any of our applications.

Note that, if you opt-out, you will still be able to see ads in our applications and some of our partners may still serve ads to you.

2.2. Data we collect

When you use any of Hitopicus ’s applications on a mobile platform and, for the above specific purposes, we may collect and process (store, share with our partners, process for analytics purposes) the following Data strictly for the purposes identified above:

1. Data that you provide to Hitopicus directly

• Your profile information, which can include your player name or tag;
• Any content you submit while using our Games, including Data collected during your discussions with our customer support channels (for instance, Data included in your support requests);
• Data you provide in connection with promotional operations, surveys, competitions, sweepstakes or other events.

2. Data collected automatically by Hitopicus

• Data about your player account, game progress, which includes a unique internal ID;
• Data pertaining to your activities in game and the way you interact with our apps (for instance, gameplay data, total play time, how and when you use our applications, your level in game…);
• Data about your purchases in our Games, excluding any payment/credit card information;
• Identifiers, such as your mobile device identifiers, advertising ID, Adjust ID…;
• Your location at a city/region level (based on your Internet Protocol - “IP” - address);
• Technical information about the device you use and your connection (for instance, the operating system, device model, type of connection, language, timezone);
• Technical data pertaining to the app you’re using (for instance, the app version you’ve installed);
• Data pertaining to the advertising served in our applications (for instance, number of ads you’ve clicked on, purchase time, quantity of IAP you’ve purchased).

2.3. How is your Data collected

Most of the personal information we process via our Games comes directly from you.

In addition, we may also collect personal information:

• from our business partners SDK’s, as outlined below;
• from any other third party to whom you have given your consent.

2.4. With whom may we share your Data

When you consent to the collection of Data for advertising and third party analytics purposes, we may share the data listed above with the following categories of recipients.

a) Advertising networks and Attribution

To provide users with free-to-play Games, we are working with third parties to (i) advertise our Games on different networks and other applications and (ii) monetize our Games via advertising revenue (we insert ads in our apps) and in-app purchases.

These third parties generally collect user and device-related Data via their own SDKs (Software Development Kit), notably for attribution purposes. For example, you may see our Games advertised in other apps. After clicking on one of these advertisements and installing our Game, you will become a user of our Services. In order to verify the installs, a device identifier may be shared with our attribution partner to ‘match’ the advertisement with your install: this is what we call the “mobile attribution”.

The privacy policies of our partners may include additional terms and disclosures regarding their data collection and tracking technologies. We encourage you to check those privacy policies to learn more about practices and exercise your rights directly towards them:

AdColony https://www.adcolony.com/consumer-privacy/

Adjust https://www.adjust.com/fr/terms/privacy-policy/

Adnet.qq https://www.qq.com/yszc-en.htm

Appier https://www.appier.com/privacy-policy/

Apple Search Ads https://searchads.apple.com/fr/privacy/

AppLovin https://searchads.apple.com/fr/privacy/

Bidmachine https://bidmachine.io/privacy-policy/

Chartboost https://answers.chartboost.com/en-us/articles/200780269

Digital Turbine https://www.hubsupport.center/privacypolicy/

Facebook https://www.facebook.com/policy.php

Fyber https://www.fyber.com/privacy-policy/

Google AdMob https://policies.google.com/privacy

Google Ads https://privacy.google.com/businesses/adsservices/

Helpshift https://www.helpshift.com/legal/privacy/

InMobi https://www.inmobi.com/privacy-policy/ https://www.inmobi.com/privacy-policy-for-eea/

IronSource https://developers.ironsrc.com/ironsource-mobile/air/ironsource-mobile-privacy-policy/

Jetfuel https://www.jetfuel.it/privacy

Liftoff https://liftoff.io/privacy-policy/

Mintegral https://www.mintegral.com/en/privacy/

MoPub https://www.mopub.com/en/legal/privacy

MyTarget https://legal.my.com/us/mytarget/privacy/

Nativex https://legal.my.com/us/mytarget/privacy/

Ogury https://ogury.com/privacy-policy/

Pangle https://www.pangleglobal.com/privacy/enduser-en

CSJ https://www.csjplatform.com/en/policy-center

ShareIt https://cdn.ushareit.com/shareit/w/privacy/pr_en/index.html

Snap https://www.snap.com/en-US/privacy/privacy-policy

TapJoy https://www.tapjoy.com/legal/general/privacy-policy/

TikTok https://ads.tiktok.com/i18n/official/policy/privacy

Unity Ads https://unity3d.com/legal/privacy-policy

Verizon Media https://legal.yahoo.com/ie/en/yahoo/privacy/index.html

Vungle https://vungle.com/privacy/

b) Analytics partners

These partners provide us with tools and technologies that allow us to better understand how users interact with our Games and will help us improve it:

Adjust https://www.adjust.com/fr/terms/privacy-policy/
GameAnalytics https://gameanalytics.com/privacy/

c) Storage / Servers

Hitopicus is relying on either AWS or GCP to store the Data we collect via our apps:
Amazon Web Services https://aws.amazon.com/fr/privacy/
Google Cloud Platform https://cloud.google.com/terms/cloud-privacy-notice

In addition to the other disclosures described in this Privacy Policy, we will also share your information:

- as is necessary to comply with any legal obligation;
- if there is a sale of the assets of Hitopicus or corporate restructuring, or as a result of a change of control of Hitopicus or in preparation of any of these events. Any third party to which Hitopicus transfers or sells Hitopicus's assets will have the right to continue to use the Data that you provide to us in the manner set out in this Privacy Policy.

d) Payment processors

We rely on different payment processors for our Games, depending on your device type (Google if it runs with Android, Apple AppStore Payments if it runs with iOS).

Please refer to their respective privacy policies and terms:

• Google https://policies.google.com/privacy
• Apple: https://www.apple.com/legal/privacy/

2.5. How long do we keep your Data

We keep the Data collected and processed for the purposes described in this policy only as long as necessary.

We will also retain and use your information for as long as is required in order to comply with our legal obligations.

2.6. Our policy regarding children

You must be over a certain age to play our Games and use our Services, depending on where you live. For the list of age restrictions by country, you can refer to this page published by the European Union Agency for Fundamental Rights.

We do not knowingly or willingly collect or solicit personal information from anyone under the applicable age, or knowingly allow such persons to use our Services.

If you are under the legal age in your country, please do not play our Games or use our Services.

In the event that we learn that we have collected personal information from children under the legal age, we will delete that information as quickly as possible. If you believe that we might have any information from or about children under the legal age please contact us at contact@hitopicus.com

2.7. Data storage and International transfers

We store our Data on servers located in Europe via Amazon Web Services or Google Cloud Platform.

To deliver Services to you, it is sometimes necessary for us to share your Data outside of your country or region, e.g.:

- with our offices and group companies;
- with our service providers.

We may therefore transfer information that we collect about you to our third-party partners across borders, including outside of the European Economic Area (the “EEA”).

Please note that these countries outside of the EEA may not have the same data protection laws as your own jurisdiction. We take steps to ensure that there are adequate safeguards and mechanisms in place (including the use of EU Standard Contractual Clauses) to allow the transfer of your information outside of the EEA.

We also make sure any third parties we share information with have an adequate transfer mechanism in place, as well.

2.8. Security

We take appropriate security and technical measures to protect your information from unauthorised access, loss and misuse.

In addition, we request that our suppliers who process personal information on our behalf take a range of security measures designed to help protect your personal information and maintain an appropriate level of security.

3. Our Website

When you visit our https://hitopicus.com Website, here are the information that we may collect and process:

- browsing events and interactions with the Website’s contents and services (for instance, operating system, IP address access times, browser type and language);
- information that you provide us with when you fill in forms on our Website;
- if you contact us or respond to messages and communications that we send to you, we may keep a record of that correspondence;
- your interactions with us on our social media channels;
- information we collect via cookies and other similar technologies. For more information, see the “Cookies” section below.

We, or our partners may use these information:

- to operate and optimize the Website;
- to contact you, for example to send you updates about our Games or the Website;
- for the purposes of research, surveying, and engaging with you, for example by sending you communications (including by email) for these purposes.

If you no longer wish to receive these emails, you may opt-out from receiving them at any time by emailing us at contact@hitopicus.com

Cookies

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are small text files stored on your browser that allow the collection of information related to your navigation on a website (e.g. interactive content or analytics).

Hitopicus uses Google Analytics to collect information related to the web traffic on our website. The following cookies have been set on our Website:

_ga: Used to distinguish users.

_gid: Used to distinguish users.

_ga_<container-id>: Used to persist session state.

_gac_gb_<container-id>: Contains campaign related information. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. Learn more.

To opt-out from Google Analytics data collection: https://tools.google.com/dlpage/gaoptout

In accordance with our Data Protection Authority guidelines, cookies exempted of consent are valid for a maximum of 13 months, and cookies requiring consent are generally valid for 6 months.

In addition, the maximum data retention period of information collected via technical cookies is 25 months.

4. Your choices and rights

Under data protection law, you have certain rights in connection with your personal information and how we handle it. You can exercise these rights at any time by contacting us at contact@hitopicus.com:

- Right of access. You have the right to know what information we hold about you and in some cases to have the information communicated to you. If you wish to exercise this right please contact us letting us know that you wish to exercise your right of access and what information in particular you would like to receive. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any information.
- Right to rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Right to erasure. You have the right to ask us to erase your personal information in certain circumstances.
You can contact us, as indicated in the “Contact” section below, in order to have the data previously collected by Hitopicus on you and/or your device permanently erased.
In addition, in order for your data not to be collected anymore (for the future), you can, in the following order:

• Activate “Limit Ad Tracking” (LAT) in your device settings to opt-out of having an ID for Advertisers and don’t see specific ads targeted at you; and
• Desinstall our Games; and
• Reinstall our Games.

Where we delete personal information about you, we may still retain some or all of that information for other purposes such as maintaining financial records, protecting or enforcing legal rights. We may also retain your information in an anonymised form.
- Right to restrict processing. In some cases, you may have the right to request a restriction of the processing of your personal data, such as when you are disputing the accuracy of your data held by us.
- Right to data portability. When the processing of your personal data is based on consent or contract, you may have the right to request that personal data that you have provided to us is provided to another data controller of your choice in a portable format.
- Right to object to processing. You have the right to object to the processing of personal data about you which is processed on the grounds of legitimate interests.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at contact@hitopicus.com

If you’re a user under CCPA or other US state laws

In order to comply with CCPA or other US state laws, this paragraph aims at disclosing the mandatory information.

Sharing and Selling of Personal Data

We may share your data with third-party service providers such as:

• Advertising networks
• Analytics providers
• Attribution platforms

Under the CCPA, "selling" includes disclosing personal data for monetary or other valuable consideration. While we do not sell your personal data in the traditional sense, some of our ad partners may process data in a way that qualifies as a "sale" under the CCPA.

We share data with our partners for advertising and analytics, subject to appropriate safeguards. You have the right to opt-out of such selling and sharing.

5. Contact Information

You may exercise your rights in the Games or by contacting us at:

Email: contact@hitopicus.com

Postal Address:

Hitopicus

Legal Team

1 Route de Montmorency, 95580 Andilly - FRANCE

As a data subject, you have the right to lodge a complaint with the CNIL, our French data supervisory authority: www.cnil.fr

California and Virginia residents may also opt-out of the sale/sharing of data via our in-game settings or use an authorized agent to make a request on their behalf.

We will respond within the timelines prescribed by applicable law. Identity verification may be required.

If you have any questions about this Privacy Policy, please contact us at contact@hitopicus.com