BambooClues Privacy Policy Effective Date: October 23, 2026 1. Overview BambooClues is provided by Shenzhen Yinglian Intelligent Technology Co., Ltd ("we," "us," or "our"). This policy describes the advertising-enabled iOS app, beginning with version 1.0.1, and how information is handled when you use the app or contact us. You can play without creating an account. The app stores gameplay records on your device and uses the third-party services described below for advertising, analytics, attribution, diagnostics and configuration. These services may transmit information from your device; the app is not a no-data-collection app. 2. Information Stored on Your Device The app stores game progress, board state, preferences, tutorial progress, Daily Challenge and check-in records, earned supplies, and any feedback draft on your device. It also stores technical settings, privacy choices, generated installation and session identifiers, and a limited queue of gameplay events for delivery when collection is permitted. We do not provide account-based cloud save synchronization. Your device backup or transfer settings may copy local app data separately. Local save files and complete puzzle boards are not uploaded as analytics payloads, although selected progress and gameplay statistics are included in the events described below. A feedback draft saved in the app is not automatically sent to us. 3. Advertising: Google AdMob We use Google AdMob to display banner ads during play, interstitial ads after eligible completed levels, and optional rewarded ads for supplies or other in-game benefits. A rewarded benefit is granted when the ad service reports that the reward was earned. Google and its advertising partners may process device or app identifiers, including an advertising identifier where permitted; IP addresses and approximate location derived from them; app, operating system and device information; ad impressions, views, clicks and other interactions; and crash, performance and other diagnostic information. These data support ad delivery, personalization where permitted, measurement, reporting, fraud prevention and operation of advertising services. We do not request GPS location access. 4. Analytics, Attribution and Diagnostics Google Analytics for Firebase We use Google Analytics for Firebase to understand app sessions, tutorial progress, level attempts and outcomes, gameplay actions, supply use, settings changes and advertising performance. Events may include generated installation and session identifiers, event identifiers and timestamps, level identifiers, gameplay statistics and technical app/device information. Google also collects app lifecycle events and derives approximate location from IP addresses. We do not send a player-provided name, feedback text or the complete puzzle board as analytics parameters. Tenjin We use Tenjin to measure advertising attribution, selected conversion events such as tutorial and level completion, and advertising revenue reported by the ad SDK. This helps us evaluate campaigns that promote the app and understand advertising performance. Where the applicable privacy choices and iOS tracking permission allow it, Tenjin may receive advertising and other device/app identifiers, IP/network and technical device/app information, conversion events and ad revenue data. The app enables Tenjin's device-level attribution and event reporting only when iOS tracking permission and the app's applicable consent conditions allow it. Apple's aggregate advertising attribution reports can operate separately from device-level tracking. Firebase Crashlytics We use Firebase Crashlytics to diagnose crashes and technical errors. Reports may include installation identifiers, stack traces, app state and events preceding an error, device/operating system details, and other diagnostic information. Custom JavaScript error reports use fixed error categories and restricted source locations, excluding feedback text and arbitrary error messages. Crash report transmission is controlled by the app's analytics privacy decision. Firebase Remote Config We use Firebase Remote Config to retrieve advertising switches and frequency settings when the app's analytics privacy decision permits it. Firebase may process installation identifiers and technical information such as app version, operating system, country/language and time zone to provide configuration and operate the service. The app keeps local defaults or previously available settings when no valid new configuration is available. 5. Privacy Choices and iOS Permissions The app uses Google's User Messaging Platform to request consent where applicable and present regional privacy choices. When available, you can revisit these choices in Settings > Privacy choices. Advertising requests and analytics collection are controlled separately according to the applicable choices; permission to request an ad does not by itself mean you have agreed to analytics or tracking. In regions where the consent service reports that consent is not required, analytics may be enabled without a regional consent form. On iOS, Apple's App Tracking Transparency permission separately controls tracking across other companies' apps and websites. You can manage it in iOS Settings > Privacy & Security > Tracking. Refusing tracking does not prevent normal puzzle play. Ads may still be available, with their availability and personalization depending on your choices, region, service settings and network connection. Refusing tracking does not automatically disable all analytics or diagnostic processing. Changing your choices affects subsequent processing and does not automatically erase information already transmitted to a provider. To request deletion of previously collected information, contact us as described below. The app does not request camera, microphone, photo library, contacts or GPS location access. 6. Recipients and International Processing Google and Tenjin process information for the services described above. Advertising information may also be shared with advertising partners involved in delivering and measuring ads. Information may be processed in countries other than the country where you live, under the providers' applicable terms and privacy arrangements. More information is available at: Google Privacy Policy: https://policies.google.com/privacy Google AdMob data disclosure: https://developers.google.com/admob/ios/privacy/data-disclosure Firebase privacy and security: https://firebase.google.com/support/privacy Tenjin Privacy Policy: https://tenjin.com/privacy/ Apple Privacy Policy: https://www.apple.com/legal/privacy/ Apple separately provides the App Store, TestFlight, system diagnostics and device backup services under its policies and your settings. 7. Retention, Deletion and Other Requests Local records remain while the app's data remains on your device. Deleting the app through iOS removes its local app data; offloading the app may retain documents and data, and a separate backup may still exist. Deleting local records does not delete information already received by Google, Tenjin or other service providers. Service data retention varies by service, data type, configured retention settings, operational needs and applicable obligations. Some reports may be aggregated. Contact us for information about a particular data category or to request access, correction, deletion or other applicable privacy rights. Where applicable, you may also withdraw consent or object to processing. We may need limited additional information to locate relevant records and verify a request, especially because the app has no account system. Do not send passwords, advertising identifiers or other sensitive information in your initial request. If you contact us by email, we receive your email address and the information you choose to send. We use it to respond, handle your request and resolve the reported issue, and retain correspondence as needed for those purposes and applicable obligations. 8. Children The app does not ask for a date of birth or require a real-world identity. The advertising and measurement practices described in this policy are relevant even though the app has no account system. Parents or guardians can review the app's available privacy choices and iOS tracking settings and help children avoid entering personal information in drafts or correspondence. If you believe a child's personal information has been collected improperly, contact us so we can investigate and handle the request under applicable requirements. 9. Website Visits and Policy Updates Viewing this policy on our website sends a request to the website server, which may receive routine access information such as an IP address and browser details. This is separate from local game records. This plain-text policy contains no analytics scripts or advertising. We may update this policy as the app and its information practices change. Updates will be published at https://yinglianai.com/bambooclues/privacy.txt with a revised effective date, with additional notice where required. 10. Contact Shenzhen Yinglian Intelligent Technology Co., Ltd Email: lyncorelian@gmail.com Website: https://yinglianai.com/