Privacy Policy — Pandu

Last updated: August 14, 2026

Eibo Games ("we", "our", "us") publishes the mobile game Pandu (the "App"). This policy explains what information is collected when you use the App, who collects it, why, and what control you have. It covers Pandu specifically; our other titles are covered by the company-wide policy.

1. Information You Give Us

Nothing is required. The App has no account creation, no sign-in, no profile and no forms. We do not ask for your name, email address, phone number or postal address. If you email our support address, we receive whatever you choose to put in that email and keep it only as long as needed to answer you.

2. Information Collected Automatically

When you use the App, the following categories of information may be collected by us and by the third-party services listed in section 4:

• Device and technical information — device model and manufacturer, operating system version, screen size, language, country, network type, and app version.
• Identifiers — the Android Advertising ID (AAID), an app-instance identifier used by analytics, and identifiers assigned by advertising partners. These identify a device or app installation, not you by name.
• Usage and gameplay data — session start and length, levels started and completed, hints used, screens viewed, buttons pressed, and similar in-app events.
• Diagnostics — crash reports, stack traces, exception logs, and performance measurements such as startup time and frame rate.
• Advertising data — ad requests, impressions, clicks, approximate location inferred from IP address, and interaction with ads.
• Purchase records — the fact that an in-app purchase was made, the product identifier, and the transaction status. Payment is processed by Google Play; we never see or store your card details.

3. How the Information Is Used

Each purpose below is followed by the legal basis we rely on for it under the UK and EU General Data Protection Regulation. Where the basis is consent, you may withdraw it at any time as described in section 5.

• To run the game, remember your progress and keep it working across updates — performance of a contract
• To process and restore in-app purchases — performance of a contract
• To answer support requests you send us — performance of a contract, and our legitimate interest in supporting our players
• To find and fix crashes, errors and performance problems — legitimate interest in a game that works
• To understand how boards are played so difficulty and level design can be improved — legitimate interest in improving the game, or consent where local law requires it for analytics
• To detect and prevent fraud, invalid ad traffic and abuse — legitimate interest in protecting the game and our advertisers
• To show advertisements that are not personalised — legitimate interest in funding a free game
• To select, deliver, cap the frequency of, and measure personalised advertisements — consent
• To meet legal, tax and regulatory obligations — compliance with a legal obligation

We do not sell your personal information for money. Depending on your jurisdiction, sharing identifiers with advertising partners for personalised ads may be treated as a "sale" or "sharing" under laws such as the CCPA; section 8 explains how to opt out.

4. Third-Party Services

The App includes software from the following providers. Each acts as an independent controller of the data it collects and operates under its own privacy policy:

• Google Firebase — Analytics, Crashlytics and related diagnostics. Firebase privacy
• Unity Gaming Services — Unity Analytics and diagnostics. Unity player privacy
• Unity LevelPlay (ironSource) — advertising mediation, deciding which network fills each ad slot. ironSource privacy
• Google AdMob — advertising demand. Google privacy
• Unity Ads — advertising demand. Unity privacy
• Additional mediated ad networks — LevelPlay may route ad requests to further networks it has integrated. The current list is available on request at the address in section 13.
• Google Play Billing — in-app purchases. Governed by Google's privacy policy above.

We do not control what these providers do with the data they collect. Please read their policies if you want the detail.

5. Advertising and Your Choices

The App shows advertisements, including rewarded video you choose to watch in exchange for in-game help. Ads may be personalised using the identifiers described above.

In the European Economic Area, the United Kingdom and Switzerland, the App presents a consent screen the first time you play, provided through a Google-certified consent management platform. You may accept or refuse personalised advertising there, and you can reopen that choice at any time from the in-game settings.

Everywhere, you can limit ad personalisation on your device: Android Settings → Privacy → Ads, where you can delete or reset your advertising ID. Refusing personalised ads does not remove ads; it makes them less relevant.

6. Data Stored On Your Device

The App keeps your progress locally using standard platform storage: your current level, your daily streak and its date, your selected panda, and your settings. This stays on the device. There is no cloud save and no account, so it cannot be transferred to another device or recovered by us. Clearing the App's data or uninstalling it erases it permanently.

7. Data Transfers and Retention

Our providers operate globally, so information collected through the App may be processed on servers outside your country, including in the United States. Those transfers rely on the safeguards each provider maintains: a European Commission or UK adequacy decision where one exists, and otherwise the European Commission's standard contractual clauses.

We keep no server-side copy of player data, so the periods below are the ones our providers apply on our instruction:

• Analytics events — retained for up to 14 months from collection, then deleted or aggregated into figures that identify no device.
• Crash and diagnostic reports — retained for up to 90 days, which is the window in which a crash is still worth investigating.
• Advertising identifiers and ad interaction records — retained by each advertising partner under its own policy, generally no more than 13 months for personalised advertising in the EEA.
• Purchase records — held by Google Play under your Google account. We keep only the fact of entitlement, for as long as you hold it.
• Support emails — kept until your question is resolved and for up to 12 months afterwards, in case you write again about the same thing.

Where a longer period is required by law — tax records, for instance — we keep only what the law requires, and only for as long as it requires it.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. Residents of California may also request disclosure of categories collected and may opt out of "sale" or "sharing" of personal information.

Because the App has no accounts, we usually cannot identify you from a name or email alone. To act on a request we generally need your advertising ID so the relevant provider can locate records associated with your device. You can also exercise most of these rights directly and immediately:

• Reset or delete your advertising ID in Android settings to break the link to past advertising data
• Refuse or withdraw consent for personalised ads on the consent screen
• Clear the App's data or uninstall it to erase everything stored on the device

For anything else, or for written confirmation, contact us at the address in section 13. See also our data deletion page.

9. Children

Pandu is intended for players aged 13 and over and is not directed to children. We do not knowingly collect personal information from children under 13, or under the equivalent age in your jurisdiction. If you believe a child has provided such information, contact us and we will delete it and take steps to prevent further collection.

In the European Economic Area, the United Kingdom and Switzerland, the age at which a person can consent on their own behalf to processing of this kind is set by each country and is between 13 and 16. If you are under that age where you live, you may use Pandu only with the permission of a parent or guardian, and the choices described in section 5 — in particular any consent to personalised advertising — must be made by them. A parent or guardian may withdraw that permission at any time by contacting us at the address in section 13.

10. Security

We keep no server-side database of player information, which removes an entire class of risk. Data in transit between the App and our providers is protected using transport encryption provided by those services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. AI in Development

Parts of the game code and artwork were produced with the help of AI tools while the game was being built. The game itself contains no AI features. Nothing you do in it is sent to an AI system, no player data is used to train one, and the assets in the app are fixed, with no generation on your device.

12. Changes to This Policy

We may update this policy as the App evolves. Material changes to what is collected or who receives it will be posted here with a revised "Last updated" date before the version making that change is released. Continuing to use the App after an update means you accept the revised policy.

13. Contact Us

Email: hello@eibogames.com

Company: Eibo Games