Data Privacy Rights

1. How to Submit a Request

Send privacy requests to support@tsumo.io from your account email when possible. You may also use the Contact Us page if email is not available. Include your request type and enough details for us to identify the account and scope.

• Contact Us

2. Requests We Support

Depending on where you live and which laws apply, you may request access, portability/export, correction, deletion, restriction, objection, consent withdrawal, opt-out of applicable sale/share or targeted advertising, and appeal review. If a request type is not available in your jurisdiction, we will explain the reason when required.

3. Verification Process

To protect account security, we may require verification steps before fulfilling a request, such as confirming control of the account email or requesting limited additional identity information reasonably necessary to verify identity. We use verification information only to process the request and protect the account.

4. Authorized Agents

Where required by law, you may authorize an agent to submit requests on your behalf. We may require signed authorization and direct confirmation from you before completing agent-submitted requests.

5. Response Timelines by Jurisdiction

We aim to acknowledge requests promptly and respond within applicable statutory deadlines. Typical windows include 45 days (with permitted extensions) under many US state privacy laws and one month (with permitted extensions) under GDPR/UK GDPR. If more time is needed, we will notify you as required.

6. Access, Portability, and Correction

Where required by law, we will provide access to personal information and deliver portable copies in a commonly used format, subject to legal limitations. We also support correction of inaccurate personal information, including account profile details where correction is technically and legally available.

7. Deletion and Retention Exceptions

Deletion requests remove, de-identify, or disconnect account data unless we must retain it for security, fraud prevention, legal obligations, dispute resolution, service integrity, or other legally permitted reasons. Some gameplay, ranking, or puzzle records may remain in aggregate, de-identified, or integrity-preserving form after account deletion.

8. Opt-Outs and Consent Withdrawal

You can change optional site analytics choices from the Cookie Policy page. Advertising choices may also be available through Google Privacy & messaging, Google ad settings, browser controls, and legally required opt-out or consent mechanisms. We do not sell personal information for money, and we will provide required opt-out controls where applicable.

• Cookie Policy

9. Appeals and Complaints

If we deny a request, you may ask for internal review by replying to the response message. Where applicable, you may also file a complaint with your state attorney general or local data protection authority.

10. Children's Data

The Service is not intended for children under 13. If we learn we collected personal data from a child under 13 without required consent, we will delete it and may disable the account.