Privacy Policy

1♠ Contact Us

For any question or request about this Privacy Policy or your personal data, reach us at:

2♥ The Data We Collect

We collect information in three ways.

Information you give us

• Your display name — taken from your Apple or Google account when you sign in with one, or generated for you if you play as a guest. 304 has no name-entry screen.
• Support correspondence — the content of any email you send us, and the address you send it from.

Information collected automatically as you play

• Account identifiers — the account ID our game server creates for you, which provider you signed up with, and when the account was created.
• Device identifiers — a device ID (used to recognise a guest account on the same device), your advertising ID, and your IP address.
• Gameplay data — match results, scores, bids, your in-game coin and gem balances, daily-reward streak, items unlocked, and purchase history.
• Device and app information — device model, operating-system version, app version, language, and screen settings.
• Approximate location — country or region, derived from your IP address. The Game does not request GPS location.
• Diagnostics — crash reports, error logs, and basic performance data.
• Push token — an identifier that lets us send notifications, if you allow them.

Information from partners

• Apple and Google sign-in — when you sign in, the provider gives us a signed token that proves the account is yours, along with your name. We do not request your email address, and Apple’s Hide My Email means we may never see a real one. Apple supplies your name only on the very first sign-in; if you decline it, we simply generate a display name for you.
• App Store and Google Play — a receipt for each purchase, which our server checks with the store before crediting anything to your account. We never see your card number or billing address.
• Advertising and analytics partners — measurement and fraud-prevention signals relating to ads shown in the Game.

3♦ Why We Collect Your Data

We use the information we collect to:

• Create and maintain your account, and let you keep your progress if you change device
• Run matches, keep score, and show other players who they are playing against
• Hold your coin and gem balances on our server, so a balance cannot be altered on the device
• Deliver what you buy, and verify each purchase receipt with Apple or Google
• Give out daily rewards and track streaks
• Diagnose crashes, fix bugs, and improve how the Game performs
• Show and measure advertisements
• Detect and prevent cheating, fraud, and abuse
• Answer your support requests and resolve disputes
• Meet our legal obligations

Our legal bases for processing are contract performance (running the Game and your account), legitimate interests (security, anti-cheat, analytics, and improving the Game), consent (personalised advertising, push notifications, and tracking where your device asks you first), and legal obligation.

4♣ Who Can See Your Data

• Other players — your display name and game statistics are visible to people you play against, as part of normal gameplay.
• Service providers — the companies listed in the next section, which host our servers or provide the sign-in, payment, analytics, crash-reporting, and advertising functions of the Game. They may process your data only on our instructions.
• Public authorities — where required by applicable law, court order, or other valid legal process.
• Business transfers — in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We do not sell your personal data to any third party.

5♠ Services We Use

304 includes the following third-party services. Each has its own privacy policy governing what it does with the data it receives.

Advertising partners in the LevelPlay mediation chain may receive your advertising ID, IP address, and device information in order to select and measure an ad. See Section 8 for how to limit this.

6♥ International Data Transfers

Ceydigital Studios is based in Sri Lanka. Our game servers and the services listed above operate in various countries, so your data may be transferred to and processed outside your own country, including in places where data-protection law differs from your own.

Where such transfers happen, we rely on appropriate safeguards — including standard contractual clauses and data-processing agreements with our vendors — so that your information keeps an adequate level of protection wherever it is handled.

7♦ Your Rights and Options

Depending on where you live, you may have the right to:

• Access your data — request a copy of the personal data we hold about you (see Section 13).
• Correct your data — ask us to fix anything inaccurate. Your display name comes from your Apple or Google account; changing it there and signing in again updates it here.
• Delete your data — request erasure of your account and the data attached to it (see Section 14).
• Object or restrict — ask us to stop or limit processing based on legitimate interests.
• Withdraw consent — where we rely on consent, you may withdraw it at any time. This does not affect processing that already took place.
• Turn off notifications — in your device settings, at any time.
• Opt out of personalised ads — see Section 8.

To exercise any of these rights, email info@ceydigital.com. If you are in the European Economic Area or the United Kingdom and are not satisfied with our response, you may complain to your local data-protection authority.

8♣ Advertising and Identifiers

304 shows advertisements. To select an ad and to count whether it was seen, our advertising partners use your device’s advertising identifier along with device and network information. They do not receive your name or your game account ID.

You can limit this at any time from your device:

• iOS — Settings Privacy & Security → Tracking. On iOS, the Game must ask your permission before tracking; if you decline, ads are still shown but are not personalised.
• Android — Settings Google → Ads, where you can reset or delete your advertising ID.

The Game does not use browser cookies. It does use similar technologies — device identifiers and third-party SDKs — for the purposes described in this policy.

9♠ Purchases

Coins, gems, and offers are sold through the App Store and Google Play. Those stores handle the payment; we never receive your card details or billing address.

What we do receive is a purchase receipt. Our server verifies it directly with Apple or Google, and only then credits your account — which is also why a purchase you make on one device appears on another. We keep a record of the transaction, the item bought, and when it was credited, for support, refunds, and accounting.

10♠ How We Protect Your Data

We use technical and organisational measures appropriate to the data we hold, including:

• Encrypted transport (TLS/HTTPS) between the Game and our servers
• Session tokens that expire and are refreshed, rather than stored passwords — 304 has no password to steal
• Server-side authority over balances and purchases, so currency cannot be granted by a modified app
• Access controls limiting who within Ceydigital Studios can reach player data
• Ongoing monitoring, patching, and review of our servers

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us at info@ceydigital.com.

11♥ Data Retention

We keep your personal data for as long as your account exists or as long as we need it to provide the Game. When it is no longer needed, we delete it or strip it of anything that identifies you.

• Active accounts — kept while you keep playing.
• Inactive accounts — reviewed periodically and de-identified after an extended period of inactivity.
• Purchase and financial records — kept for the period required by tax and accounting law.
• Crash and diagnostic logs — kept for a short period, then deleted, in line with our providers’ retention settings.
• Aggregated data — statistics that cannot identify you may be kept indefinitely.

If you ask us to delete your data, we may still keep what we need to meet legal obligations, resolve disputes, and enforce our agreements.

12♦ Age Limits

304 is intended for players aged 13 or over. We do not knowingly collect personal data from children under 13, and we do not direct interest-based advertising to them. If you are a parent or guardian and believe your child has given us personal data, contact us at info@ceydigital.com and we will delete it promptly.

13♣ Access Requests

You may ask whether we hold personal data about you and, if so, receive a copy. To make a request:

• Email info@ceydigital.com with the subject line Data Access Request — 304
• Include your display name and, if you can find it, your player ID from the Game’s settings screen, so we can locate the right account

We respond within 30 days, and may ask you to verify your identity before releasing anything.

14♠ Account Deletion

You may ask us to delete your account and the personal data attached to it at any time:

• Email info@ceydigital.com with the subject line Account Deletion Request — 304, including your display name and player ID.

Requests are processed within 30 days of identity verification. Deletion removes your account, display name, game progress, and balances, and it cannot be undone — coins, gems, and anything you have bought are lost with it. Some records are kept for a limited period where the law requires it, as described in Section 11.

15♠ Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page shows the most recent revision. We will tell you about material changes through a notice in the Game before they take effect. Continuing to play after that point means you accept the revised policy.