Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by Guangzhou Qupu Information Technology Co., Ltd. ("we," "us," or "our") and applies to the personal information processing activities related to your download, installation, or play of the Game, as well as your visits to our website (tower.quputech.com), your emails to us, and your interactions with our marketing pages.

The current release of the Game does not require you to register an account or sign in. You play the Game through a local guest profile that we create automatically the first time you start it. By starting to use the Game you confirm that you have read and understand this Policy; if you disagree with any portion of it, you may stop using the Game and request deletion of the data we already collected by following the steps described in the "Contact Us" section below.

This Policy does not apply to third-party platforms (for example, the App Store, Google Play, or social media services) or to third-party SDKs and services that we integrate into the Game. Those third parties handle your data under their own privacy policies, which we encourage you to read alongside this Policy.

2. Information We Collect

When you play the Game, we collect the following categories of information: (a) Player identity: an opaque player ID that we generate and assign to the local guest profile on your device. The player ID is created the first time the Game is launched, lets us recognize your save across reinstalls, and is not tied to your real name, email address, phone number, or any account you have with us. (b) Device and app information: device model, operating system and version, device language, time zone, screen size, current Game version, network type (Wi-Fi / cellular), and an anonymized per-device UID. We send the player ID together with this device and app information to our backend at cn.quputech.com so that we can deliver Game content, measure basic gameplay telemetry, and diagnose crashes. (c) Crash and performance logs: stack traces, exception types, and performance metrics produced when the Game encounters a fault or abnormal behaviour. (d) Purchase and payment information: when you purchase virtual items or otherwise pay for in-Game content, the corresponding app store provides us with transactional receipts (such as order number, product ID, and currency); sensitive payment data such as full card numbers and CVVs is handled directly by the App Store or Google Play and is not accessible to us. (e) Communication records: when you contact us by email or submit a feedback form, the name, email, region, and message content you provide.

We do not knowingly collect sensitive personal information such as racial or ethnic origin, religious beliefs, medical or health information, biometric data, government identifiers, financial account details, or precise location history. Any collection of sensitive information is strictly limited to what is necessary to provide a feature you have actively requested.

3. How We Use Your Information

We use your information only for the following purposes: (a) to provide the Game's core gameplay, including local save, in-app purchases, and customer support; (b) to operate the Game securely, including failure diagnosis, abuse detection, and crash triage; (c) to improve the product, by analyzing aggregated and de-identified data to understand stage difficulty, climbing pacing, and player dropout patterns so that future versions can be better tuned; (d) to comply with our legal obligations, such as retaining accounting records, filing tax returns, and responding to lawful requests from regulators; (e) to send you important announcements (for example, service interruptions, version updates, or policy changes) by email when you have given consent.

We do not use your personal information for any purpose not described in this Policy.

4. Third-Party Services, SDKs, and Data Sharing

Today the Game integrates a single third-party SDK: the Google Mobile Ads SDK (AdMob). AdMob serves the in-game bottom banner and also loads rewarded ads when you actively choose to "Watch an ad to refill stamina" or "Watch an ad to unlock Auto Climb". AdMob is now configured to serve live ads using the production ad unit IDs allocated by Google AdMob under our AdMob account (AdMob Publisher ID pub-3627843535508952, matching the google.com entry in our app-ads.txt). That account is owned by Guangzhou Qupu Information Technology Co., Ltd., with Google Ireland Limited acting as the data controller for ad serving and personalization in the EEA / UK. Under this configuration AdMob serves ads according to the personalization settings applicable in your region by default. You can limit the data AdMob uses for ad personalization at any time by resetting or limiting your advertising identifier through iOS "Settings → Privacy & Security → Apple Advertising" or Android "Settings → Google → Ads". The Game's App Privacy manifest declares NSPrivacyTracking = false, and we do not call the App Tracking Transparency (ATT) prompt in this release — AdMob only reads the advertising identifier when you have already granted that permission, and uses it for ad serving and frequency capping; it does not build cross-app user profiles from in-Game behaviour.

Backend infrastructure. The Game sends the player ID and the device and app information described in Section 2(b) to our backend at cn.quputech.com over TLS. cn.quputech.com is operated by us; it is our own infrastructure and not a third party. We retain data on this backend only as long as needed to deliver the services described in this Policy.

Other third-party SDKs. The current release does not integrate any social-login SDK (such as Apple, Google, LINE, KakaoTalk, or WeChat), any analytics SDK (such as Firebase, Sentry, or Unity Analytics), any anti-cheat SDK, or any crash-reporting SDK beyond the basic crash logs described in Section 2(c). If we add any of these in a future release, we will update this Policy first and obtain any consent required by applicable law.

Business transfers. We will not sell your personal information as an asset. In the event of a merger, spin-off, asset sale, or insolvency proceeding, we will notify you in advance via in-Game notice and email and will require the successor entity to continue protecting your data under standards that are no less protective than this Policy.

5. Cookies, SDKs, and Local Storage

The Game stores the local guest profile (player ID, gameplay settings, language, audio preferences, and the latest save snapshot) on your device using platform-standard local storage. We do not currently use cookies, LocalStorage, or IndexedDB on tower.quputech.com for tracking; the marketing site is static.

You may clear the Game's local data through your device's standard "clear storage" or "uninstall" flow. Doing so permanently removes the guest profile; the same player ID cannot be restored after local data is deleted.

6. Device Permissions

We request device permissions only when strictly necessary to provide a corresponding feature. Each permission is explained in a dialog before it is requested. You may revoke any permission at any time through your device settings; doing so will disable the related feature without affecting the data you have already provided to us.

Permissions the Game may request include: network access (for loading ads and sending telemetry to cn.quputech.com); local storage (for the guest profile and save data); and accelerometer / gyroscope (optional, for motion-based controls). The Game does not request access to the camera, photo library, contacts, microphone, location services, or push notifications in the current release.

7. Children's Privacy

The Game is a casual climbing title for general audiences and is not directed at children. We do not knowingly collect personal information from children under the age of 13. Higher age thresholds may apply in certain regions, including but not limited to: 16 in the European Union and the United Kingdom; 14 in the Republic of Korea; 8 in mainland China (when relying on consent of a guardian).

If you are the guardian of a minor and wish to review, correct, or delete data associated with your child, please contact us through the "Contact Us" section. We will respond and complete the request within 15 business days after verifying your identity.

8. Retention, Deletion, and Data Deletion

We retain your personal information only for the shortest period necessary to achieve the purposes described in this Policy. Once the retention period ends, we will delete the data or irreversibly anonymize it. Specific retention periods include: (a) Player ID and gameplay save data: retained on our backend for as long as you continue playing from the same device and for up to 24 months after the last activity; if you uninstall the Game or clear its local data, the guest profile is removed from your device and the matching backend record is purged within 30 days. (b) Purchase records: retained for 7 years to comply with applicable tax and accounting laws. (c) Crash logs and abnormal event data: retained for no more than 90 days. (d) Customer-support tickets: retained for no more than 36 months.

Because the current release does not provide a player account, there is no in-Game account-deletion flow at this time. If a future release introduces user accounts, we will provide an in-Game "Settings → Account → Permanently delete my account" entry that meets Apple App Store Review Guideline 5.1.1(v) and equivalent Google Play requirements, and we will complete the review and deletion within 15 business days.

To stop us from holding any of your data, you can either (i) clear the Game's local data on your device and contact us to request deletion of the matching backend record, or (ii) uninstall the Game and email [email protected] from the address we already have on file (if any) so we can match your request to the player ID we have on file.

9. International Transfers and Your Data Rights

We may store your data in multiple data centers around the world (for example, in the European Union, Singapore, Japan, or the Republic of Korea). When data is transferred from your jurisdiction to another region, we ensure that the destination region provides a level of protection for personal information that is no lower than the level in your jurisdiction (for example, through European Standard Contractual Clauses, intercompany data transfer agreements, or comparable mechanisms).

Depending on your jurisdiction, you may have the following rights: (a) the right to be informed and to make decisions about how your data is processed; (b) the right of access to the data we hold about you; (c) the right to correct inaccurate or incomplete data; (d) the right to request deletion of your data (subject to retention exceptions required by law); (e) the right to restrict processing under specific circumstances; (f) the right to data portability — to obtain a copy of your data in a structured, commonly used, machine-readable format; (g) the right to object to decisions based solely on automated processing that produce legal or similarly significant effects on you; (h) the right to withdraw consent at any time when processing is based on consent, without affecting the lawfulness of processing before withdrawal; (i) the right to lodge a complaint with the data protection authority in your jurisdiction.

EU / UK users. You may also submit requests under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Our appointed GDPR representative's contact details are available in the "Contact Us" section.

California users. Under the California Consumer Privacy Act (CCPA / CPRA), you have the rights described in (b) through (f) above and may opt out of any "sale" or "sharing" of "sensitive personal information." The Game does not sell personal information as a business.

Mainland China users. Under the Personal Information Protection Law (PIPL), you have the rights to be informed, to decide, to access, to correct, to delete, to port, and to receive explanations. When transferring personal information across borders, we will obtain your separate consent and complete any required security assessment or certification.

Exercising these rights is free of charge. Please use the "Contact Us" section to send us a request. We will reply within 15 business days. To protect your data, we may first verify your identity before processing the request.

10. Data Security

We use industry-standard physical, electronic, and procedural safeguards to protect your personal information, including transport-layer encryption (TLS 1.2 or higher), storage-layer encryption (AES-256), access controls based on least privilege and two-factor authentication, security audits and penetration tests, employee background checks and confidentiality agreements, and incident-response plans and drills. If a personal-information breach, alteration, or loss is suspected or confirmed, we initiate our incident response immediately and notify you and the relevant regulator within the longest period allowed by applicable law (for example, 72 hours under the GDPR and 24 hours under the PIPL), and we will explain the response measures being taken.

Please note that the Internet is not a perfectly secure environment. While you use the Game, please keep your device lock screen secure and avoid installing modified clients, because the Game does not require any account credentials in this release.

11. Changes to This Policy

We may revise this Policy to reflect changes in our business, in applicable laws, or in significant technology developments. When this happens, we will post the new effective date and a summary of the changes in a banner at the top of our website.

For material changes (such as an expansion of processing purposes, the introduction of a new category of personal information, an expanded scope of third-party sharing, or a change in how rights are exercised), we will give you prominent notice at least 30 days before the change takes effect. If you do not accept a change, you may stop using the Game before it takes effect and request deletion of your data.

12. Contact Us

If you wish to exercise any right described in this Policy, or if you have any questions, complaints, or suggestions about this Policy or our data-handling practices, please contact us through the channels below.

Email: [email protected]

Postal address: Guangzhou Qupu Information Technology Co., Ltd., Room F24, Building A, No. 89 Fenghuang Avenue, Nansha District, Guangzhou, Guangdong, China.

We respond within 15 business days of receiving your message. For complex or repeated requests, the response window may be extended to 60 days after we notify you; in that case we will explain the reason for the extension.