1. Introduction

PUDDY Inc. ("we," "our," or "us") operates puddystudios.com and all associated subdomains (collectively, the "Sites"). This Privacy Policy explains how we collect, use, disclose, and protect your information. By using our Sites, you agree to the practices described here.

2. Information We Collect

Information You Provide

We may collect your name and email address if you contact us directly.

Automatically Collected Information

When you visit our Sites, we and our third-party partners may automatically collect:

• IP address and general location
• Browser type and version
• Operating system
• Pages visited and time on each page
• Referring URLs
• Device identifiers and cookie data

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our Sites and enable advertising. You can manage cookies through your browser settings. Disabling cookies may affect site functionality.

3. How We Use Your Information

We use collected information to:

• Operate, maintain, and improve our Sites
• Respond to inquiries and support requests
• Display advertising through Google AdSense
• Analyze usage and optimize user experience
• Comply with legal obligations
• Detect and prevent fraud or abuse

4. Google AdSense and Advertising

Our Sites use Google AdSense to display advertisements. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our Sites and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to our Sites and other sites on the internet.

You may opt out of personalized advertising by visiting Google Ads Settings at https://www.google.com/settings/ads or the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/.

For more information on how Google uses data: https://policies.google.com/technologies/partner-sites

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers who help operate our Sites (hosting, analytics, advertising)
• Google, for AdSense advertising services, subject to Google's Privacy Policy
• Legal authorities, when required by law or government request
• Successors, in connection with a merger, acquisition, or sale of assets

6. Your Rights

California Residents

If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt out of the sale of your personal information (we do not sell personal information); and non-discrimination for exercising your rights. To submit a request, contact us at privacy@puddystudios.com.

European Residents

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to its processing. Our legal basis for processing is legitimate interests in operating and improving our Sites. To exercise your rights or lodge a complaint with your local data protection authority, contact us at privacy@puddystudios.com.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes in this policy, comply with legal obligations, and resolve disputes. Analytics data is retained for up to 26 months.

8. Children's Privacy

Our Sites are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at privacy@puddystudios.com and we will delete it promptly.

9. Security

We implement reasonable technical and organizational measures to protect your information. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our Sites may link to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with a new "Last Updated" date. Continued use of our Sites after changes constitutes acceptance of the updated policy.

12. SPLAT Telegram Mini App

SPLAT is available as a Telegram Mini App through @puddystudiosbot. When you launch SPLAT inside Telegram, the following Telegram-provided information is sent to our servers via signed Telegram WebApp initData:

• Telegram user ID (a numeric identifier)
• Username, first name, and last name as visible on your Telegram profile
• Language code and Telegram Premium status

We also store per-game telemetry on AWS DynamoDB (us-east-1) for the purposes of leaderboards, anti-cheat, and analytics:

• Game start and end timestamps
• Final score, coins collected, jumps, play time
• A unique per-game identifier and the inscribed-file session identifier
• Game validation status (used internally for anti-cheat)

Cross-device score persistence inside Telegram is provided by Telegram's CloudStorage feature, which is scoped per-user-per-bot and not directly readable by us outside the running Mini App.

Lawful basis for processing (GDPR): legitimate interest in operating the game, providing leaderboards, and preventing fraud or abuse, plus your consent indicated by initiating an interaction with our Telegram bot.

Retention: SPLAT game records are retained indefinitely so we can support leaderboards, audit anti-cheat decisions, and offer historical statistics. You may request deletion at any time. Deletion requests are processed within 30 days. Once deleted, the data cannot be recovered after the AWS-managed point-in-time recovery window expires (currently 35 days).

Your rights regarding SPLAT data: the rights described in section 6 (California Residents) and section 6 (European Residents) above apply equally to SPLAT data. To request access, deletion, or a portable copy of your SPLAT data, email privacy@puddystudios.com with your Telegram username or user ID. We will verify your identity (typically by sending a verification code through @puddystudiosbot) before processing the request.

Monetization disclosure: the Telegram Mini App version of SPLAT is hosted on a separate domain (splat.puddygames.com) so that any future advertising integration on that surface is fully isolated from puddystudios.com. SPLAT inside Telegram does not currently display advertisements. If that changes, this policy will be updated to describe the ad provider, the data shared with that provider, and your opt-out options.

13. Contact