Yiyosa Arena — PRIVACY POLICY

Version 2.2 · Effective 8 October 2026

Controller: Yiyosa Technology LLC, Delaware, USA. Yiyosa Arena is operated by Yiyosa Technology LLC, Delaware, USA.

1. WHAT WE COLLECT

From everyone (guest play)

anonymous account id · the nickname you choose · device model, OS, language, country · gameplay telemetry (moves, think times, touch positions, drag paths) — used for cheat detection and score verification · verified scores, ranks and badges · advertising id (AdMob) · IP address.

Only if you sign in

the identifier and e-mail address provided by Apple or Google, used solely to keep your account across devices. Your real name is never shown on any ranking.

Only if you use friends and invites

your friend code, your friends list, the invite code you entered or the invite link you opened (so the inviter can be recognised), and blocks or reports you file.

Only if you enable notifications

a push token for your device and your language and time zone, so reminders arrive in your language at a sensible hour.

Notification preferences, quiet hours and recent app activity help us avoid unwanted or duplicate alerts. You can independently switch friend-overtake alerts, daily reminders, weekly reminders and weekly results on or off in Settings. Delivery and deduplication records are retained for up to 30 days.

Only if you choose a rewarded ad to unlock a joker

your account and run identifiers · joker type and grant identifier · ad transaction identifier, ad unit, time and verification status. These link a completed ad to the correct run and prevent duplicate rewards from the same ad. Applied joker type, placement index, rotation choice or reroll seed becomes part of the gameplay record used to verify your score.

🔴 We collect no payment, identity, tax or bank details. Nothing is ever paid out in this version of the service.

2. WHY

Running the rankings and the friends league · preventing cheating and fraud · awarding badges · sending notifications you opted into · meeting legal obligations · improving the service.

3. WHO WE SHARE WITH

Google (Firebase, AdMob) — infrastructure and ads · Apple (push notifications, Sign in with Apple) · public authorities — only where required by law. Your nickname, scores, ranks and badges are visible to other players on rankings and friend boards. We do not sell personal data. When you choose a rewarded ad, your account and joker grant identifiers are shared with AdMob to link completion to your account.

4. RETENTION

gameplay telemetry 90 days · verified scores, ranks and badges for as long as your account exists (closed days and weeks are kept as an archive) · account data until deletion · after deletion your entries are anonymised and your friends links removed. Reward verification records (grant and transaction identifiers, account/run linkage, joker type, time and status) have a 30-day retention period. Applied joker actions in the gameplay record follow the gameplay telemetry retention period above.

We keep restricted recovery copies against data loss: point-in-time recovery for the last 7 days, daily database backups retained for 30 days and weekly backups for 84 days. Recovery copies of Google/Apple links and guest account identities follow an 84-day deletion rule; passwords and refresh tokens are excluded. To prevent deleted accounts from reappearing after recovery, a separate record containing only the account identifier and deletion time follows a 91-day deletion rule. Expired copies are removed automatically; infrastructure deletion can take additional time. Backups are not accessible through normal app use. Account deletion requests are reapplied during recovery. Abuse limits use keyed, one-way digests of account and network identifiers; raw IP addresses are not stored in these counters, which become eligible for automatic deletion after 2 hours.

5. YOUR RIGHTS

Access · correction · deletion · portability · objection. Request: privacy@yiyosa.com, answered within 30 days. You can also delete your account inside the app.

6. CHILDREN

The service is not directed at children under 13 and we do not knowingly collect their data. Users aged 13–17 may sign in with guardian consent. If we learn we hold data from a user under 13 we delete it immediately.

7. SECURITY

TLS in transit · server-side access control · all rankings and badges are written only by our servers · administrative actions are logged.

8. INTERNATIONAL TRANSFERS

Data may be processed in the USA and EU. Standard contractual clauses apply for EU users.

9. CHANGES

Changes are announced in the app and dated on this page. Contact: privacy@yiyosa.com