Privacy Policy

1. Who we are

Mega Games Hub (the “Service”) — including the website, the Android and iOS apps and the games offered through them — is owned and operated by NXTKRAFT SOLUTIONS (OPC) PRIVATE LIMITED, a company incorporated in India (“we”, “us”, “our”). We are the data fiduciary / data controller for the personal data described in this policy.

By using the Service you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Service.

2. Information we collect

2.1 Information you provide or authorise

• Google account information — when you choose “Continue with Google”, Google shares your name, email address, profile picture and a unique Google account identifier with us. We never receive your Google password.
• Profile information — the display name and avatar you choose, and optionally your country.
• Messages — the name, email address and message you send us through the contact form or by email.

2.2 Information created when you use the Service

• Gameplay data — games played, scores, the time and duration of rounds, best scores and rankings, favourites, ratings, play history, coins, experience points (XP), level and daily-reward streaks.
• Guest accounts — if you play as a guest in the mobile app, the app creates a random identifier stored on your device so your progress can be restored on that device. It is not linked to your name or contact details.
• Technical and usage data — IP address (recorded with score submissions to detect cheating and abuse), device platform (Android, iOS or web), app version, and timestamps of sign-in and activity.
• Local storage on your device — preferences such as theme, sound setting and your sign-in session token, stored in your browser's local storage or the app's storage. See our Cookie Policy.

2.3 Information collected by advertising partners

Our website uses Google AdSense and our apps use Google AdMob to show ads. These services may collect and use information such as cookies, your device's advertising identifier (e.g. Android Advertising ID or Apple IDFA, where permitted), IP address, device and browser information and ad interactions. This collection is governed by Google's own privacy policy (see section 6).

We do not collect precise location, contacts, photos, microphone or camera data, and we do not process payment card information.

3. How we use your information

We do not use your personal data for automated decisions that produce legal or similarly significant effects. Our anti-cheat checks only decide whether a score is shown on public leaderboards.

4. Information visible to other players

Leaderboards are public. Your display name, avatar or Google profile photo, level, scores and rank may be visible to other users of the website and apps. Your email address is never shown publicly. You can change your display name and avatar at any time from your profile.

5. How we share information

We do not sell your personal data. We share information only:

• With service providers who process data on our behalf under confidentiality obligations — for example cloud hosting and database providers, and email providers used to answer you.
• With Google for Google Sign-In, Google AdSense and Google AdMob, as described in sections 2.3 and 6.
• For legal reasons — if required by law, court order or a government authority, or to protect the rights, property or safety of our users, the public or us.
• In a business transfer — if we are involved in a merger, acquisition or sale of assets, subject to this policy.

6. Advertising and Google

The Service is free because it is supported by advertising. On our website, ads are served by Google AdSense; in our apps, ads are served by Google AdMob. We may also show our own promotions.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our sites and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising at www.aboutads.info or www.youronlinechoices.eu.
• Learn how Google uses information from sites and apps that use its services: policies.google.com/technologies/partner-sites. Google's privacy policy: policies.google.com/privacy.
• In the mobile apps you can reset or limit your advertising identifier in your device settings (Android: Settings → Privacy → Ads; iOS: Settings → Privacy & Security → Tracking).

Where required by law (for example in the European Economic Area, the United Kingdom and Switzerland), we or Google will ask for your consent before personalised ads are shown, and you can change your choice at any time. If you do not consent, you may still see non-personalised ads.

Some ads are rewarded: if you choose to watch a video ad in the app, we record that you completed it so we can credit coins. Coins have no monetary value (see our Terms).

7. How long we keep information

• Account and gameplay data — for as long as your account exists. When you delete your account, your profile, scores, favourites, ratings and history are deleted from our active systems.
• Inactive guest accounts — may be deleted after a long period of inactivity.
• Game session records — automatically deleted after about 24 hours.
• Contact messages — kept as long as needed to handle your request and for a reasonable period afterwards.
• Backups and logs — may persist for a limited period before being overwritten, and some data may be kept longer where the law requires it.

8. Your rights and choices

Subject to applicable law — including India's Digital Personal Data Protection Act, 2023 and, where applicable, laws such as the EU/UK GDPR and US state privacy laws — you have the right to:

• Access a summary of the personal data we hold about you;
• Correct or update inaccurate data (you can edit your name and avatar in the app or website);
• Erase your data — delete your account any time in Profile → Settings → Delete account, or see Account & data deletion;
• Withdraw consent — for example for personalised ads — without affecting earlier processing;
• Object to or restrict certain processing, and to data portability where applicable;
• Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act);
• Raise a grievance with us (section 12) and, if unresolved, complain to the Data Protection Board of India or your local data protection authority.

To exercise these rights, email [email protected] from the address linked to your account. We may need to verify your identity, and we respond within the time required by law (normally within 30 days).

9. Children's privacy

The Service is intended for a general audience. Some games (for example in the “Kids” and “Educational” categories) are suitable for younger players, but the Service is not directed primarily at children.

• Users under 13 (or the minimum age in their country) must not create a Google-linked account without the involvement of a parent or guardian, and should play only as a guest under supervision.
• In India, users under 18 are children under the DPDP Act; they should use the Service only with the consent and supervision of a parent or lawful guardian. We do not knowingly track children or direct targeted advertising at them.
• We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child has provided personal information to us, contact [email protected] and we will delete it.

10. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), hashed credentials for administrator accounts, signed session tokens, access controls and logging of administrative actions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the authorities as required by law.

11. International transfers

We are based in India and our service providers may process data in India or other countries. When information is transferred outside your country, we take steps to ensure it remains protected as described in this policy and as required by applicable law.

12. Grievance Officer and contact

In accordance with the Information Technology Act, 2000, the rules made under it and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was last changed. For significant changes we will provide a notice in the app or on the website. Continuing to use the Service after a change means you accept the updated policy.