1. Who we are and what this notice covers
Pandadoku is a puzzle game operated by Hong Kong Truveltang co., ltd (“we”, “us”, or “our”). This Privacy Policy explains information used by the Android game and the policy website at https://pandadoku.truveltang.com. It covers local gameplay, non-personalized advertising when enabled, and communications you choose to send to us.
Privacy contact: pandadoku@truveltang.com. This notice is prepared for the United States release. Other regional rights apply where the relevant law applies to our processing.
2. Gameplay and information kept on your device
The game stores your puzzle progress, current board, completion records, scores, playing time, daily challenge and streak records, earned tools, reward receipts, selected nickname, built-in avatar and frame, and game settings in the app’s storage on your device. These records restore your game, remember your choices, and prevent the same reward being granted repeatedly. Nicknames are optional local labels; please do not enter a real name or contact details.
Pandadoku does not require an account and does not provide a player login, public leaderboard, chat, photo upload, cloud-save service, or in-app purchase in this release. Our game code does not send your nickname, selected avatar, full puzzle board, or local save file to an operator-run gameplay server. Device or operating-system backup services, if enabled, follow their own settings and notices.
3. Intended audience and children's privacy
Pandadoku is intended for a general audience aged 13 and older and is not directed to children under 13. The game does not ask for an age group, date of birth, identity document or parental contact information. It does not display an age-selection screen or identify a player’s age.
All in-game advertising is configured as non-personalized. We do not offer an option to enable personalized advertising. This is an advertising configuration, not a technical age-verification or child-blocking mechanism.
We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child’s information has reached us or an advertising provider through the game, contact pandadoku@truveltang.com. We will investigate, take appropriate steps to remove information we should not hold, and help identify the relevant provider’s rights channel where needed. Please do not send a child’s identity document or additional sensitive information unless we explain why it is necessary.
4. Advertising and related information
When advertising is active, we use AppLovin MAX to mediate rewarded video, interstitial, and banner advertising, with Unity Ads and Mintegral as integrated advertising networks. Availability depends on network connectivity, ad inventory, and our active configuration. Rewarded video is offered as an optional way to receive the displayed in-game benefit.
Advertising SDKs may process advertising or app-instance identifiers, IP address and approximate location inferred from it, device model and operating-system information, language and network information, app version and installation information, advertising privacy choices, ad requests, impressions, clicks and reward-completion events, and diagnostic or fraud-prevention signals. The exact fields depend on the SDK, permissions, operating system, and privacy choices. We do not request precise GPS location.
These services use information to obtain and display non-personalized ads, measure delivery and performance, limit repetition, establish reward completion, prevent invalid traffic, and diagnose faults. Non-personalized ads still involve some data processing; they do not mean that no information is transmitted. The game sends MAX a refusal of personalized-ad consent and a do-not-sell signal. An advertising provider may obtain further data if you interact with an ad or visit the advertiser’s site, under the notices applicable to that separate interaction.
5. Advertising providers and their responsibilities
The integrated providers are AppLovin (MAX mediation), Unity (Unity Ads), and Mintegral. They receive information through their SDKs when those services are active. They may use service providers, bidding partners, advertisers and measurement partners as explained in their own notices. A provider is not necessarily only our processor; it may determine its own advertising purposes and act as an independent controller or business under applicable law.
The links below explain each provider’s current data practices and privacy-rights channels. Our policy explains our implementation and does not substitute for their notices.
6. Advertising privacy settings and your choices
Personalized advertising is disabled for every player. Before initializing MAX advertising, the game sets its user-consent value to false and its do-not-sell value to true. There is no in-game opt-in to personalized advertising. From the home screen, open Settings → Privacy Policy → Advertising privacy to view this protection. Our contact information is provided in this Privacy Policy.
Non-personalized ads may still process limited information for delivery, measurement, security and fraud prevention. Choosing not to view an optional rewarded video does not prevent ordinary puzzle play, although that particular optional reward will not be earned. A privacy setting is different from deleting information already held by a provider. You may request deletion through the contact or provider channels described in this notice.
You can also use Android advertising-ID controls and the privacy controls displayed within an ad where available. Device and provider choices may apply separately from the game’s fixed settings. Clearing app storage deletes local progress and preferences but does not by itself delete advertising providers’ records. We will not reduce existing local progress because you exercise a protected privacy right.
7. Android permissions
The Android build includes internet and network/Wi-Fi state access for online advertising and connection handling; the advertising-ID and Android advertising-services permissions used by advertising dependencies; vibration for game feedback; and technical permissions supplied by SDK dependencies for background work, wake/boot handling, service operation and package-integrity checks. A declared permission does not mean that every related operation is performed.
The game does not request camera, microphone, contacts, SMS, precise-location, or photo-library permissions. The sound and voice options play bundled audio; they do not record your voice. Selecting an avatar uses built-in artwork. Normal puzzle progress is written to the app’s own storage.
8. Information you choose to send us
If you contact the privacy or support address, we receive the address you send from, your message, and any attachments you choose to provide. We use them to respond, investigate the matter, verify a rights request where necessary, and keep records needed to resolve the request. Please do not send payment-card information, identity documents, health information, passwords, or information about a child unless specifically necessary and requested through an appropriate process.
The game does not automatically upload a support report or attach your local save. The in-game feedback form is not part of this release.
9. Policy website
The policy website provides public information and does not require a player account. The pages themselves do not embed advertising, social-media widgets, third-party analytics, or tracking pixels. Following an external link takes you to a separately operated service.
When you request a page, the hosting infrastructure necessarily receives connection information such as your IP address, requested URL, request time, and browser information. The website uses our existing hosting infrastructure. Routine access and security logs may be maintained to deliver pages, prevent abuse and diagnose faults. Any retained operational logs are kept only as reasonably necessary for those purposes, relevant incidents and applicable legal obligations; the duration depends on the operational need and nature of the record. We do not use these logs to profile game players for advertising.
11. Retention and deletion
Local progress and preference records are kept while the app’s data remains on your device. To remove them, use Android Settings → Apps → Pandadoku → Storage → Clear storage, or uninstall the app and remove any retained app data. This erases progress and earned items from that local installation. Device backups, if any, must be managed through the relevant operating-system or backup-service controls.
We retain correspondence only for as long as reasonably necessary to address the request, maintain the resulting resolution, meet applicable legal requirements, or handle a related dispute. The relevant factors include the type and sensitivity of the information, why it was supplied, whether the matter remains open, and applicable legal retention obligations. Information no longer needed is deleted or de-identified.
Advertising providers determine retention for data they independently control under their own notices. Clearing the game’s local storage does not automatically erase their records. Contact us or use the provider’s rights channel for assistance with a request. Website-log retention is described in Section 9.
12. Security
We limit the information our own game code handles to the features described here and use the app’s local-storage boundary for saved gameplay. Public policy pages are intended to be delivered over HTTPS. We take reasonable measures appropriate to information we hold and investigate reported security issues; no device or internet service can be guaranteed completely secure.
Please keep your device and operating system updated and avoid sharing private correspondence or copied save files publicly. We will provide notices of a data incident when applicable law requires them.
13. International processing
The operator and service providers may process information in different countries. Local gameplay files are not transferred to a company server by our game code. Advertising data, website connection information and correspondence may be processed outside the United States or your place of residence where the relevant hosting, communication or advertising provider operates. The location of a website server does not determine every advertising provider’s processing location.
Where a transfer requires legal safeguards, the responsible party must use the safeguards required by the applicable law. Advertising providers describe their transfer arrangements in their policies. We do not claim that Pandadoku is certified under a data-transfer framework.
14. Privacy rights and requests
Depending on the law that applies to you and our processing, you may have rights to know or access information, obtain a copy, correct it, delete it, restrict or object to certain processing, withdraw consent, opt out of sale or sharing or targeted advertising, or appeal a decision about your request. Contact pandadoku@truveltang.com with the subject “Pandadoku privacy request”. State what you are requesting and the information reasonably needed to find the relevant record; do not send an identity document unless we explain why it is necessary.
We will verify requests proportionately, respond within the period required by applicable law, and explain any lawful exception. Where applicable, an authorized agent may act for you with appropriate authority, and you may ask us to review a refusal through the same contact channel. You may also contact the relevant privacy regulator or state authority. We do not discriminate against people for exercising protected privacy rights.
For California and other U.S. states where the relevant law applies, you may opt out of sale or sharing or targeted advertising. Pandadoku already requests non-personalized advertising with the MAX do-not-sell signal enabled. The Privacy Policy → Advertising privacy panel, accessible from home settings, explains this fixed setting. You may also contact pandadoku@truveltang.com for assistance with an opt-out or other rights request, including a request concerning information previously received by a provider. We do not offer a financial incentive program in exchange for personal information.
If European, UK or similar data-protection law applies to a particular processing activity, the relevant legal basis depends on the purpose: requested gameplay and replies may be necessary to provide the requested service; compliance with law may require some records; security may rely on an applicable legitimate interest; and any processing that requires consent must rely on a valid choice, which can be withdrawn. Non-personalized advertising does not remove the need for a lawful basis. A U.S. launch does not by itself establish that these additional regimes apply.
15. Changes and contact
We will update the date and version when this notice changes. For a material change, we will provide a clear notice in the game or on the policy website, and obtain a new choice where required. A policy update will not treat silence or continued play as consent to new optional data uses.
Operator: Hong Kong Truveltang co., ltd. Privacy and rights contact: pandadoku@truveltang.com. Policy website: https://pandadoku.truveltang.com/privacy/.