Privacy Policy

Effective Date: October 10, 2026

Operating as PT POLA PAPERINDO JAYATAMA ("we," "our," or "us"), our primary commitment is to act as responsible custodians of your information when you access Coral Monsters: Idle Merge on the Google Play platform. This Data Stewardship & Privacy Assurance Code establishes the definitive rules governing the acquisition, processing, and safeguarding of your digital profile to guarantee both a premium entertainment experience and uncompromised data privacy.

Information Acquisition Directives

We employ rigorously structured methodologies to capture and manage your digital footprint, prioritizing strict cyber-hygiene. The sections below delineate the precise arrays of data we log and our handling protocols.

1.1 Core Telemetry Logging

As soon as Coral Monsters: Idle Merge is launched on your hardware, our backend architecture is programmed to securely log specific data vectors:

Network Signatures: Routing IP addresses, definitive timestamps for server interactions, and broad hardware family categorizations.

Device Blueprint: The hardware manufacturer, precise device model variant, operating system ecosystem (Android/Google OS), user interface language, and geographical time zone parameters.

Persistent Hardware Anchors: Device-bound identification strings, encompassing your Google Advertising ID (GAID), Android Device ID, Google Play Games ID, and the primary Google Account token.

Interactive Event Logs: Chronological gameplay achievements, peak performance scores, multiplayer networking packets, and unlocked digital milestones.

Economy & Interface State: Histories of fiat acquisitions, digital currency expenditures, individualized client-side configurations, and virtual asset inventories.

1.2 Federated Identity Gateways

Should you decide to bypass local account creation by utilizing federated gateways, such as Google Play Games Services, we will securely pull authorized profile attributes (e.g., standard public aliases) based strictly on their API permissions. This data transfer requires your explicit prior agreement to the third-party's data sharing mandate.

Users are legally advised to scrutinize the compliance frameworks of these external gateways:

Google Play Games / Google Services: https://policies.google.com/privacy

By authenticating via a third-party gateway, you formally stipulate that:

Your engagement is in absolute compliance with the active Terms of Service of that external platform.

You satisfy the legal minimum age thresholds enforced by that provider in your specific global region.

Statutory Justifications for Processing

We subject your personal data to processing exclusively to fulfill the operational mandates listed below, ensuring every computation is validated by a statutory legal anchor:

Service Operations & Technical Support: To authenticate digital purchases, answer helpdesk inquiries, and maintain client-server stability; to render the core game mechanics, inject your saved UI configurations, and distribute software updates or security advisories.

Statutory Anchor: Grounded in GDPR Article 6(1)(b) (contractual necessity). This processing is structurally inescapable for us to execute our Terms of Service and keep the application viable.

Platform Evolution & Promotional Ecosystem: To dispatch tailored promotional materials concerning PT POLA PAPERINDO JAYATAMA or vetted alliances; to cache your progression data; and to deploy behavioral analytics to engineer new features, thereby elevating our software standard and marketing efficacy.

Statutory Anchor: Authorized by GDPR Article 6(1)(f) (legitimate interests). We utilize this provision to satisfy a legitimate corporate drive to refine our product and optimize user engagement.

Programmatic Advertising Deployment: To project highly relevant commercial advertisements to players who have positively affirmed our ad-tech partners' rights to access their hardware tracking anchors.

Statutory Anchor: Equivalently justified under GDPR Article 6(1)(f). This operationalizes our legitimate interest in securing platform revenue via optimized programmatic ad placements.

Retention Horizon and Archival

Your personal information is maintained within our active databases solely for the minimum duration necessary to sustain the game, satisfy legal audits, and navigate judicial disputes. In specific regulatory, infrastructural, or legal contingencies, we retain the jurisdiction to quarantine certain data segments in cold storage for a legally extended epoch.

Concurrently, aggregated and stripped usage statistics are utilized for internal dashboarding. This non-identifiable data is generally subjected to rapid garbage collection cycles, unless severe security vulnerabilities or legal holds demand an extended preservation window.

Authorized Data Syndication

Respecting your digital sovereignty and operating strictly under GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may establish secure data pipelines to route your information to vetted external entities under these circumstances:

Strategic Allies: For the deployment of integrated services, legal compliance workflows, corporate restructuring, or any scenario demanding your explicit consent flag.

Judicial & State Actors: In the event of a verified policy violation, or if binding subpoenas force data disclosure to protect the physical safety, intellectual property, or legal rights of PT POLA PAPERINDO JAYATAMA and the general public.

Global Player Community: Consequent to your active participation in networked multiplayer environments, public forums, or global ranking ladders.

4.1 Syndication to Advertising Coalitions

Subject to registering your active consent pursuant to GDPR Article 6(1), we will route your hardware anchors to advertising coalitions to power precision ad targeting. Our integrated roster of ad-tech collaborators includes:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Disclaimer: This Code does not govern the independent algorithmic handling of these external firms. Please navigate to their respective privacy portals to audit their internal mechanics.

4.2 Technical Sub-Processors

To preempt server bottlenecks and guarantee networking stability, we lease processing power and analytic dashboards from specialized enterprise vendors:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

Youth Privacy Directives

The Coral Monsters: Idle Merge application explicitly prohibits engagement by individuals under 13. We implement strict safeguards against the intentional collection of personally identifiable information (PII) from this demographic. If an unauthorized data ingress from a minor is detected, we execute immediate and permanent eradication scripts. Custodians suspecting a minor has submitted data must contact our support desk immediately to trigger this purge.

Cyber Defense Baseline

We enforce commercially rigorous cryptographic perimeters to shield your personal data. However, the digital community must concede the axiom that no internet transmission or cloud infrastructure is flawlessly impenetrable. Consequently, we cannot issue an absolute legal warranty against sophisticated zero-day exploits or unauthorized exfiltration.

OS-Level Alerting

Conditioned upon your explicit opt-in flag, we are authorized to push system-level notifications, promotional content, and update alerts directly to your Android/Google interface. You wield the absolute authority to revoke this permission and block these payloads instantly by modifying the native notification preferences within your device's OS.

Statutory Jurisdictional Rights

8.1 European Economic Area (EEA) Stipulations

We SLA our privacy resolution desk to a standard 30-day window. For highly fragmented inquiries, GDPR Article 12 grants us the legal flexibility to delay resolution by a maximum of two additional months. We will proactively transmit an explanatory alert regarding any such delay.

(1) Data Access Entitlement: Governed by GDPR Article 15, you may petition for a granular readout of your retained records, processing motives, external recipients, and archival lifespans. A digital extract can be provided, barring intellectual property conflicts.

(2) Processing Objection: Under GDPR Article 21, you can contest processing tied to "legitimate interests" (Article 6(1)(f)). We will halt active processing threads unless we establish overriding legal justifications. Objecting to direct marketing data usage remains an absolute, unconditional right.

(3) Data Rectification: Under GDPR Article 16, you hold the authority to compel the overwrite of corrupted, inaccurate, or partial profile records.

(4) Processing Restriction: Per GDPR Article 18, you may mandate a system-level freeze on the active processing of your data under narrowly defined legal parameters.

(5) Consent Revocation: Dictated by GDPR Article 7, if a specific workflow hinges upon your consent, you may nullify that consent instantly. This revocation is forward-looking and does not invalidate prior computational actions.

(6) Data Portability Extraction: Authorized by GDPR Article 20, you possess the entitlement to extract your personal files in a standardized, machine-readable format and route them to an alternate data controller without systemic friction.

8.2 California Resident Stipulations (CCPA)

(1) Execution Timeline: We target a 45-day statutory turnaround for verifiable consumer inquiries. If technical complexities necessitate a prolongation (up to a 90-day absolute ceiling), a formal written status log will be dispatched.

(2) Retroactive Lookback: Evidentiary data disclosures provided to you are strictly limited to the 12-month trailing window preceding your formal inquiry.

(3) Opt-Out Directive: The CCPA enshrines your undeniable right to set a "Do Not Sell" command regarding your personal information.

(4) Right to Know: You are granted full transparency regarding the exact data vectors we log and our operational motives, as transparently hardcoded in this Code.

(5) Access to Ledgers: Twice every calendar year, completely free of charge, you may execute a demand for a comprehensive audit of the personal information logged over the trailing 12 months.

(6) Deletion Command: You can issue a mandate for the permanent wiping of personal data collected over the preceding 12 months, provided it does not trigger statutory exemptions (e.g., critical bug fixing, legal compliance, or security auditing).

Erasure Execution

Should your digital profile no longer serve a functional requirement for our operations, you possess the authority to mandate a permanent data purge. To compel this systemic erasure protocol, please route your formal directive to the designated compliance email below.

Compliance Hub

For regulatory clarifications, security feedback, or the execution of your formal privacy rights, direct all correspondence to:

Contact Email: [email protected]