SpruceGames Privacy Policy

Last updated / Effective date: October 15, 2026

Introduction

This Privacy Policy explains how SPRUCETREE GAMES LIMITED, doing business as SpruceGames ("SpruceGames," "we," "us," or "our"), collects, uses, discloses, stores, and otherwise processes personal information when you access or use Land Of Zombos, our websites, customer support, and related services (collectively, the "Services").

Land Of Zombos is distributed through Google Play in the United States, United Kingdom, Canada, Australia, Indonesia, the Philippines, and Thailand.

We aim to process personal information lawfully, fairly, transparently, and only to the extent reasonably necessary for the purposes described in this Privacy Policy. This Privacy Policy explains:

• what personal information we process;
• why and on what basis we process it;
• how we disclose, transfer, retain, and protect it; and
• the choices and rights available to you.

Please read this Privacy Policy before using the Services. Where consent is required by applicable law, we will ask for it separately and you may withdraw it as described below. Using the Services does not constitute consent where applicable law requires a separate affirmative choice.

1. Information We May Collect

1.1 Information you provide

Land Of Zombos does not require you to provide your name, government-issued identification number, mobile number, address, contact list, precise location, biometric information, or voiceprint information.

If you contact us at sprucetreebiz@gmail.com, we will process the email address, message, attachments, account or device details, and any other information that you choose to include in the support request. Please do not include unnecessary sensitive personal information.

When you use social features in Land Of Zombos, we process the profile name, account or player identifier, messages, posts, guild and friend interactions, reports, and other content you choose to provide through those features. Other users may be able to see information you choose to share, as indicated within the relevant feature.

1.2 Information collected when you use the Services

The only device identifier that Land Of Zombos intentionally collects is your device's advertising identifier (such as the Google Advertising ID). Subject to applicable law and your device choices, we use this identifier for advertising attribution and campaign measurement. We do not use the advertising identifier to personalize advertisements.

Our servers and infrastructure providers process limited network connection information, including IP address and request time, to transmit the Services, maintain security, and prevent abuse. We retain routine connection-security logs as described in Section 4.

We do not collect precise GPS location, contacts, voiceprints, government ID information, or installed-app lists through Land Of Zombos.

1.3 Information from third parties

We may receive limited information from Google Play, our advertising and attribution providers, our U.S.-based hosting providers, and our third-party customer-support provider. This may include an advertising identifier, campaign and attribution results, and information included in a support request.

These third parties may change as we maintain and improve the Services. We require service providers acting on our behalf to process information only for the relevant service and subject to appropriate confidentiality and security obligations.

1.4 Sensitive personal information

We do not intentionally collect sensitive personal information through Land Of Zombos. If you voluntarily include sensitive information in a support request, we will use it only as reasonably necessary to respond, protect the Services or users, comply with law, or resolve a related dispute.

2. How We Use Information

We use personal information for the following purposes, as applicable:

2.1 To provide and operate the Services

This includes operating Land Of Zombos and providing customer support.

2.2 To maintain and improve the Services

This includes measuring advertising campaigns, maintaining service performance, troubleshooting errors, and improving the user experience without using additional personal identifiers beyond those described in Section 1.

2.3 To protect users and the Services

This includes preventing fraud, cheating, abuse, unauthorized access, and violations of our User Agreement; moderating content; investigating reports; enforcing rules; protecting legal rights; and maintaining network and information security.

2.4 To communicate with you

We may send service messages, security alerts, account notices, support responses, and information about material changes. Subject to applicable law and your choices, we may also send marketing messages. You can opt out of marketing messages using the unsubscribe mechanism provided in the message or by contacting us. Essential service and security messages are not promotional and may continue while you maintain an account.

2.5 Advertising and attribution

Subject to applicable law, consent requirements, and device settings, we and our attribution partners use the advertising identifier to attribute installs and measure campaign performance. We do not use it to build an advertising profile or provide personalized or interest-based advertisements.

2.6 Legal compliance and corporate transactions

We may process information to comply with law, respond to valid legal requests, establish or defend legal claims, and support a merger, acquisition, financing, reorganization, sale of assets, or similar transaction subject to appropriate safeguards.

2.7 Legal bases for EEA/UK users

Where the GDPR or UK GDPR applies, our legal bases may include:

• performance of a contract, where processing is necessary to provide the Services you request;
• legitimate interests, such as securing, maintaining, improving, and understanding the Services, provided those interests are not overridden by your rights;
• consent, for processing that requires consent, such as certain advertising, cookies, or optional device permissions; and
• legal obligation, where processing is required to comply with applicable law.

For users in the UK, advertising-identifier processing that requires consent will be based on consent; support requests and service delivery may be processed to perform our contract or for our legitimate interests in operating and securing the Services. You may withdraw consent at any time through the choices made available in the Services or your Android device settings.

2.8 Cookies and similar technologies

SpruceGames websites may use cookies or similar technologies that are necessary to operate the website and, where applicable, limited analytics technologies. Where required, we will request consent before using non-essential technologies. You may also manage cookies through your browser settings.

3. How We Disclose or Transfer Information

We do not disclose personal information except as described in this Privacy Policy.

3.1 Service providers and business partners

We may disclose the advertising identifier and limited related campaign information to advertising and attribution providers. Our hosting providers in the United States may process limited connection information necessary to deliver and secure the Services. Our third-party customer-support provider may process the information you submit in a support request. These providers may process information only for the relevant service and subject to contractual and legal safeguards.

We may also disclose limited information to platform operators, advertising partners, and other business partners where necessary to provide an integration, measure a campaign, prevent fraud, or comply with your instructions and choices.

3.2 Other users and the public

Land Of Zombos includes social features such as profiles, guilds, friend interactions, chat, sharing, or similar functions. Information you choose to post may be visible to other users or the public as indicated within the feature. Do not post information you do not want others to see.

3.3 Legal, safety, and enforcement disclosures

We may disclose information when we reasonably believe disclosure is required by applicable law or a valid legal process; necessary to protect the rights, safety, and property of users, SpruceGames, or others; or necessary to investigate fraud, abuse, security incidents, or violations of our agreements.

3.4 Corporate transactions

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar transaction. Where required, we will notify you and require the recipient to handle the information consistently with applicable law and this Privacy Policy or obtain new consent.

3.5 International data transfers

Our game servers are located in the United States. Game and core service information may be stored or otherwise processed in the United States or Singapore. Customer-support information may also be accessed from other countries where authorized service-provider personnel operate. Where applicable, we use contractual and other legally recognized safeguards for international transfers.

3.6 Sale or sharing under U.S. state privacy laws

We do not sell personal information for money. We do not use or disclose the advertising identifier for cross-context behavioral or interest-based advertising. Attribution providers process the advertising identifier on our behalf to attribute installs and measure campaign performance.

4. Retention, Storage, and Security

4.1 Retention

Unless a longer period is reasonably necessary for a legal claim, security incident, or legal obligation, we apply the following retention periods:

• advertising identifiers and identifiable attribution records: up to 180 days after collection;
• routine IP address and connection-security logs: up to 90 days;
• records isolated for investigating confirmed fraud, abuse, or a security incident: up to one year after the investigation closes;
• customer-support requests and related correspondence: up to two years after the request closes;
• account information during an approved deletion request: the 60-day grace period, followed by deletion or anonymization from active systems within 30 days; and
• residual copies in backups: until overwritten through the ordinary backup cycle, normally within 90 days after deletion from active systems.

Aggregated or irreversibly anonymized information that no longer identifies a person may be retained for longer.

When information is no longer required, we will delete or anonymize it, unless continued retention is required or permitted by law. Data in backups may remain until the relevant backup is overwritten or deleted, subject to access restrictions.

4.2 Storage location

Game and core service information is stored and processed in the United States or Singapore. Customer-support requests may also be accessed from countries in which our authorized customer-support providers operate. We apply appropriate contractual, access-control, confidentiality, and security safeguards to such processing.

4.3 Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, which may include access controls, encryption in transit and at rest where appropriate, authentication, logging, vulnerability management, incident response, and personnel confidentiality obligations. No system or transmission method is completely secure.

4.4 Security incidents

If a personal-data breach occurs, we will investigate, mitigate, document, and provide notices to users and regulators when and within the time required by applicable law.

5. Your Choices and Rights

Depending on where you live, you may have the right to:

• request access to or a copy of your personal information;
• correct inaccurate information;
• request deletion of information;
• restrict or object to certain processing;
• withdraw consent, without affecting earlier lawful processing;
• receive certain information in a portable format;
• opt out of direct marketing and, where applicable, targeted advertising, sale, or sharing;
• limit certain uses of sensitive personal information;
• appeal our decision on a privacy request where applicable; and
• lodge a complaint with a competent data-protection authority.

You may exercise available rights through the privacy and account functions provided in Land Of Zombos, or by emailing sprucetreebiz@gmail.com. We may take reasonable steps to verify your identity and authority. Authorized agents may submit requests where applicable, subject to verification.

We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

5.1 Account deletion

You may submit an account-deletion request through the account-deletion function provided within the game. If you have uninstalled the game or cannot access the in-game function, you may submit a request by emailing sprucetreebiz@gmail.com.

We will review a deletion request within 15 business days. If the request is approved, the account will enter a 60-day grace period. During this period, the account will not yet be deleted or anonymized. To complete deletion, do not log in to or use the account during the grace period; doing so will be treated as withdrawal of the deletion request. After the grace period, we will stop providing the account-based Services and delete or anonymize associated personal information, except information that we must or are permitted to retain by law.

Account deletion is permanent after completion and may remove game progress and other associated information.

5.2 Advertising and communications choices

You may manage push notifications in your device settings, unsubscribe from promotional email or SMS using the instructions in the message, and manage the advertising identifier through your Android device settings and any privacy controls made available in the Services.

6. Third-Party Services

The Services may link to or integrate third-party platforms, login providers, app stores, social features, analytics tools, advertising networks, attribution providers, and other services. Their handling of information is governed by their own terms and privacy policies when they act independently. We are not responsible for third-party services that we do not control.

We review third-party services used with Land Of Zombos and update this Privacy Policy or our Google Play disclosures when their material data practices change.

7. Children and Minors

Land Of Zombos is a general-audience game and is not intended for children under 13. Children under 13 may not access or use the Services. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take reasonable steps to delete it.

Users who are at least 13 but below the age of legal majority where they live should review this Privacy Policy and the User Agreement with a parent or legal guardian. A parent or guardian may contact sprucetreebiz@gmail.com regarding a child's information.

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, our practices, or applicable law. We will update the "Last updated" date and provide additional notice, or obtain consent, when required. If you do not agree with a change, you may stop using the Services and request account deletion. Continued use will not be treated as consent where applicable law requires an affirmative choice.

9. Scope

This Privacy Policy applies to Land Of Zombos, SpruceGames websites that link to it, customer support for Land Of Zombos, and related services identified in this policy. It does not apply to third-party services governed by their own policies. A product-specific notice may supplement this Privacy Policy; if there is a conflict, the more specific notice applies to the relevant processing.

10. Contact Us

Data controller / operator: SPRUCETREE GAMES LIMITED
Business address: UNIT B, 13/F, SHING LEE COMM BUILDING, NO. 8. WING KUT ST, CENTRAL, HONG KONG
Privacy email: sprucetreebiz@gmail.com
Customer support: sprucetreebiz@gmail.com
Security and legal notices: sprucetreebiz@gmail.com
If you have a question, complaint, security report, or privacy request, please use the contact details above. You may also contact the data-protection authority in your country or region where applicable.