Privacy Policy

Welcome to ThunderPop’s Privacy Policy (this “Policy”). By using our Services, you agree to this Policy.  This Policy explains how we collect, disclose, use, and protect personal information  that identifies, relates to, describes, or can reasonably be linked to you or your household, either directly or indirectly (“Personal Information”). We know our users don’t love long and complicated policies, but it’s important for you to read them, so we’ve tried to make this as straightforward to follow as possible. 

OddBytes LLC, with its principal place of business at 301 N. Main St., Ste. 201, Huntington Beach, CA 92648, USA (“ThunderPop,” “we,” “us” or “our”) operates the ThunderPop Game and is the data controller for information collected under this Policy. The words “Game,” “Website,” “Services,” and any other terms that are capitalized but not defined in this Policy have the meanings in our Terms of Service.

This Policy applies to:

• Players of the ThunderPop Game;

• Visitors to the ThunderPop Website;

• Individuals who contact ThunderPop customer support;

• Individuals who exercise privacy rights or otherwise communicate with us about the Game and Website.

This Policy does not apply to:

• Products and services offered by us or our affiliates other than ThunderPop, which are governed by separate privacy notices; or

• Information collected by third parties, whose collection and use of information is governed by their own privacy policies.

If you use our Services, we collect and process certain categories of Personal Information.
 

• Identity Data such as your first and last name, username, account identifier, or other similar identifiers used to identify you.
   

• Account Credentials such as your username/nickname, email address, password, and other information used to authenticate your account.
   

• Game Data such as gameplay events, user agent, crash reports and diagnostic information, and information relating to in-app purchases.
   

• Communication Interaction Data such as your email address, the contents of your communications with us, and any information you submit through web forms, including customer support requests and requests to exercise your privacy rights. We collect only the information reasonably necessary to respond to your inquiry, communicate with you, verify your identity where required, and maintain records of your request in accordance with applicable law. 
   

• Technical and Analytics Data such as your internet protocol (IP) address, login information, browser type and version, browser plug-in types and versions, operating system, device identifiers, time zone, browsing activity, pages visited, links clicked, and other technical information collected from the devices you use to access our Services.
   

• Derived Data such as approximate geographic information (including country, state, city, and ZIP code) and internet service provider (ISP) information derived from your IP address, user agent, or other technical information.
   

• Ad Data such as advertising identifiers (only after applicable consent), and information about your interactions with in-game advertising, such as impressions, clicks, and conversions. The data we collect, combined with identifiers such as IP address, user agent, and unique ID, allows us to deliver targeted ads, track conversions, and analyze usage patterns across sessions. We combine this information to create profiles that enable targeted advertising, measurement, and service improvement. These processes may create persistent profiles of user behavior, which we use for ad delivery, analytics, and to enhance the overall performance of the Game. 
   

• Payment Data such as in-app purchase receipts (processed by Apple/Google with only transaction confirmation meta data provided to ThunderPop)

We do not collect information we consider to be “Sensitive Personal Information” such as racial or ethnic origin, religious affiliations, sensitive health information, sexual orientation or sex life information, genetic or biometric data, precise geolocation information, or social security numbers. 

ThunderPop uses the Personal Information it collects when you use our Services for the following purposes. 
 

• Providing and Improving Our Game, Website, and Services: We use Personal Information to operate, maintain, secure, support, troubleshoot, enhance, and improve our Game, Website and Services, including account administration, improve user experience (including the performance of its computer servers), and other operational purposes. This allows us to provide, personalize, and improve content and advertising.
   

• Analyzing Use of Our Game, Website, and Services: We use Personal Information to better understand how individuals access and use our Game, Website, and Services, analyze trends and performance,  track Website visits, and gather other broad demographic information to assist us in identifying user preferences, and conduct research, analytics, and statistical analysis. This allows us to develop analytics and reporting to support our operations.
   

• Fraud Detection: We use Personal Information to detect, investigate, prevent, and respond to fraud, abuse, unauthorized activity, and other security incidents.
   

• Communicating with You: We use Personal Information to respond to inquiries, customer support requests, privacy rights requests, account-related communications, and other information relating to our Services. Legal Compliance and Honoring Preferences: We use Personal Information to comply with applicable laws and legal obligations, respond to lawful requests from regulators or government authorities, process and maintain records of privacy rights requests, verify identity where required, enforce our legal rights, and honor your preferences and choices regarding the collection, use, and disclosure of your Personal Information, including your communication and cookie preferences.

We use cookies and similar tracking technologies to collect and store information about how you use our Services. Cookies are small files that a game or extension places on your device for record-keeping and other purposes. We use these technologies to:
 

• Operate and secure our Services;

• Measure and analyze usage patterns;

• Learn about your preferences and personalize advertising; and

• Improve overall functionality and performance.
   

Cookies and tracking technologies may include browser cookies, web beacons, pixels, tags, and local storage objects. Certain cookies are essential to the operation of the Services, while others are used for analytics, advertising, or personalization.
 

Some uses of cookies and similar technologies may be considered a “sale” or “sharing” of Personal Information under applicable U.S. state privacy laws. You may opt out of such uses by following the instructions in the “Your Privacy Rights” section below.
 

Please note that if you block or disable cookies, certain features of our Services may not function properly.

We disclose Personal Information to third parties only as described below and consistent with applicable law:
 

1. With third-party service providers, who assist us in operating, analyzing, or improving our Services. These include providers of data analysis, infrastructure, information technology, email delivery, and market-research. We share Personal Information with such providers only to the extent necessary for them to perform their contracted functions, and we require them to protect your information to at least the same level of privacy and security standards that we maintain. Service providers are prohibited from using Personal Information for any purpose other than providing technical assistance on our behalf and must notify us if they can no longer meet our data-protection expectations.
    

2. With your consent or at your direction, such as when you request or authorize a specific disclosure.
    

3. For law enforcement, compliance, and protection: We may use or disclose Personal Information as we believe necessary or appropriate: (a) to comply with applicable laws, legal processes, or governmental requests; (b) to enforce our Terms of Service or other agreements; (c) to protect our operations, rights, privacy, safety, or property, or those of our employees, users, or others; (d) to assist in fraud detection, prevention, or investigation;  (e) to pursue available remedies or limit potential damages or (f) to manage or resolve legal disputes or claims, including with persons authorized to act on your behalf in emergencies or events beyond our control, such as natural disasters.
    

4. In aggregated or de-identified form, which we may share with our partners, service providers, advertisers, and other third parties for business purposes, such as maintaining, improving, and securing our Services, or supporting related functionality. 
    

5. With advertising or marketing partners: We may use third-parties to deliver or measure marketing messages about our own products, and to enhance your experience with our Services. These providers may collect device identifiers and usage data to provide and measure advertising. We do not permit these partners to use your Personal Information for their independent advertising or marketing purposes without your consent. Users can manage ad preferences through their device settings. For more information about how we use cookies and other tracking technologies—and your choices regarding advertising—please see our Cookies and Tracking Technologies section.
    

6. In connection with mergers, acquisitions, or similar corporate transactions, including the sale, transfer, or reorganization of all or a portion of our business or assets. In such cases, Personal Information may be among the assets transferred, and we will ensure that any successor entity continues to handle your Personal Information in accordance with this Policy or provides you with notice and an opportunity to exercise your rights before any material changes take effect.
    

7. A complete list of third-party data recipients is set forth in a link at the footer of our website under: https://www.thunderpop.com/privacy-policy-1. 
    

Any disclosures we make are limited to what is reasonably necessary for the purpose described and are subject to appropriate contractual or legal safeguards.

OddBytes LLC is located in the United States. However, our service providers may be located in other jurisdictions. Any information we collect from you may be processed in a jurisdiction other than the United States.

We use commercially reasonable efforts to secure your Personal Information, but we cannot and do not assure that these measures will be sufficient to protect against all efforts to gain unauthorized access to the information.
 

Collected data is retained for only so long as needed to fulfill the purpose for which it was provided, or as long as is reasonably necessary for our legitimate business purposes. We may retain your information for longer periods if required by law, or in relation to legal claims.

Our Services are not directed to children as defined under applicable law in the jurisdiction where the child resides. We do not knowingly collect, use, or process Personal Information from children without the consent required by applicable law (including, where required, verifiable consent from a parent or legal guardian).
 

If we become aware that we have collected Personal Information from a child in a manner inconsistent with applicable legal requirements, we will take appropriate steps to delete or otherwise address that information in accordance with applicable law.
 

Parents or legal guardians who believe that a child has provided us with Personal Information may contact us at the privacy email in the final paragraph of this Policy to request review and deletion.

You have rights and choices regarding your Personal Information, which may vary depending on where you live. To exercise your privacy rights, including the rights to access, delete, correct, and limit Personal Information, please submit a request by email at the privacy email in the final paragraph of this Policy or mail to OddBytes LLC, 301 N. Main St., Suite 201, Huntington Beach, CA 92648. If you would like to continue to opt out of the sharing of your Personal Information, you may submit a request at the privacy email in the final paragraph of this Policy

Your privacy rights may include the right to:
 

• Access – depending on applicable laws, request that we disclose the categories and specific pieces of Personal Information we collect, use, disclose, and share, as well as the business purposes for which we collect and use that information;
   

• Correction – request that we correct any Personal Information that is inaccurate or outdated;
   

• Deletion – request that we delete Personal Information we maintain about you, subject to applicable legal limitations;
   

• Portability – if it is reasonable under applicable laws for us to do so, request a copy of your data in a structured, machine-readable format and, in certain cases, ask that we transmit it to another data controller;
   

• Limit, restrict, object to, or opt out of processing or selling – under certain applicable laws, you may request that we stop or limit how we process your data, including the processing of your data for certain purposes, and opt out of the selling of your Personal Information. Specifically, under California law, you also have the right to direct us not to “share” your Personal Information for targeted or cross-context behavioral advertising purposes at any time. In other U.S. states, similar opt-out rights may apply where our activities fall within the concept of a “sale” of Personal Information; and
   

• Be free from discrimination for exercising your privacy rights.
   

If you have provided personal data based on consent, you may withdraw your consent at any time. We will consider and process your request within a reasonable time period as required by applicable law.
 

Before processing or granting any request, we are required to confirm that the right being exercised is available under applicable law, as certain rights may apply only to residents of specific jurisdictions. Only you — or a person authorized to act on your behalf — may submit a verifiable request related to your Personal Information. To ensure security, we must verify your identity and confirm the Personal Information associated with you, which may require additional details depending on the type of request. We may use a third-party verification service to assist in this process.

​

We cannot process or respond to a request if we cannot verify your identity or authority to make the request and confirm that the Personal Information relates to you. Depending on the jurisdiction, limitations may apply to how often access requests can be submitted within a 12-month period, and we may have the right to decline requests that are unfounded, excessive, or otherwise not considered reasonable within that jurisdiction’s standards. For example, under California law you may only make a verifiable consumer request for Access twice within a 12-month period. If we deny your request, we will explain the reason and provide information about any rights to appeal. We strive to respond within the timeframes required by applicable law.

​

• To exercise your privacy rights, including the rights to access, delete, correct, and limit Personal Information as described below, please email us at the address in the Contact Us section or write to us at OddBytes LLC, 301 N. Main St., Suite 201, Huntington Beach, CA 92648.

• Use our consent management tool via the cookie banner or the “Your Privacy Choices” link on our website to opt out of tracking. Please note that if you delete your browser cookies or use a different browser, you will need to opt out again using the link above.

• If you have opted in to marketing emails, use the unsubscribe link included at the bottom of any marketing or promotional email we send you to opt out. Please note that even after you unsubscribe, you may still receive transactional or service-related messages related to your account or our ongoing business relationship.

Certain states may allow residents to appeal a denial of a privacy-related request. If we decline to process your request, you may have a right to appeal by emailing us at the privacy email in the final paragraph of this Policy. We may reject your request for appeal if the state in which you reside does not allow a right to appeal.

​

If you wish to make a complaint about how we process your personal data, please contact us at the privacy email in the final paragraph of this Policy. We take all complaints seriously and aim to resolve them with respect. Although we believe we can address most complaints with you directly, you may also choose to file a complaint with the relevant data protection authority.

We are committed to honoring the privacy rights afforded to individuals under applicable data protection laws wherever they reside. Depending on your location, your rights may be governed by laws such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), Brazil's Lei Geral de Proteção de Dados (LGPD), Indonesia's Personal Data Protection Law (PDPL), Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), or other applicable privacy laws. While these laws generally provide similar core privacy rights as the ones described in section 8 above, they may differ in the terminology used to describe those rights, the procedures for exercising them, and certain legal requirements or exceptions. This country- or jurisdiction-specific section is intended to help individuals who reside in those jurisdictions to better understand how the rights described in this Privacy Notice correspond to the rights available under the privacy law applicable to them.

The CCPA requires businesses to provide specific additional disclosures to California residents regarding the collection, use, and sharing of certain categories of Personal Information. For California purposes, the categories of Personal Information we have collected, disclosed, and shared in the preceding 12 months are described below.

(A) Identifiers: For example, we collect name, alias, email address, IP address, online identifiers, and account name when shared with us. 

(B) Personal Information under Cal. Civ. Code §1798.80(e):  For example, we collect contact details from customers, such as name when shared with us.

(C) Characteristics of Protected Classifications: Users may be asked for their age when they download and open the ThunderPop Game for the first time to prevent individuals who are below the minimum age permitted in the applicable app store from downloading or accessing the Game. We do not knowingly otherwise collect race, ethnicity, gender, sexual orientation, or any other protected characteristics as defined by law.

(D) Commercial Information: For example, we collect records of services obtained, considered, or interacted with.

(E) Biometric Information: We do not knowingly collect biometric identifiers such as facial recognition or fingerprints.

(F) Internet or Other Electronic Network Activity Information: For example, we collect browsing history, gameplay activity, and interaction data (pages visited, clicks, usage patterns).

(G) Geolocation Data: For example, we collect approximate geographic location derived from your IP addresses or devices.

(H) Sensory Information: We do not knowingly collect audio, electronic, or visual information from individuals.

(I) Professional or Employment-Related Information: We do not knowingly collect job title, employer, industry, or other professional details.

(J) Education Information (FERPA): We do not knowingly collect education records as defined by applicable law.

(K) Inferences: We make inferences about preferences, interests, or likely needs of users.

We collect the information from users as described above and use it for the following business purposes:

• Performing Services to operate, deliver, maintain, and manage the Services, and communications with users.

• Security and Integrity to protect our Services, systems, users, and data; detect, investigate, and prevent fraud, unauthorized access, and other malicious or unlawful activity; and comply with applicable legal obligations.

• Debugging and Troubleshooting to identify, investigate, and fix errors, bugs, and other issues affecting the functionality of our Services.

• Auditing and Analytics to measure usage, evaluate performance, monitor effectiveness, and better understand how our Services are used.

• Internal Research and Development to analyze user needs, develop new products and features, and improve our Services and offerings.

• Quality Assurance and Improvement to maintain accurate records, enhance functionality, improve performance, optimize user experience, and support our business operations.

• Advertising and Marketing to provide relevant communications, tailor content and offerings, and promote our products and services.

• Short-Term Transient Use including providing non-personalized advertising to users.

If you are physically located in Brazil, the descriptions below explain how the privacy rights detailed in Section 8 (Your Privacy Rights) apply under the LGPD, including any differences in terminology or applicable procedures. : 
 

• Confirmation of processing: the right to confirm whether we process your personal data. 
   

• Information on shared use: the right to know with whom (public/private) entities we share personal data and for what purpose. 
   

• Anonymization/blocking/deletion of unnecessary or excessive data: where data is unnecessary, excessive or processed in non-compliance. 
   

• Automated decisions: the right to request a review of decisions based exclusively on automated processing (profiling, credit scoring, etc.) that impact your interests. 
   

• Consent specifics: the right to revoke consent at any time, and to be informed of the possibility and consequences of refusing consent (e.g. without an email we can’t create an account). 
   

• Language and contact information: you may submit requests to the privacy email in the final paragraph of this Policy.

If you are physically located in Indonesia, the descriptions below explain how the rights detailed in Section 8 (Your Privacy Rights) apply under Indonesia’s Personal Data Protection Law (PDPL), including any differences in terminology or applicable procedures.  

• Right to information (transparency): You have the right to clear information about our identity, legal basis, purposes, categories of data, and recipients when we process your data.
   

• Access and copy: You have the right to know whether we process your data and to receive a copy in a commonly used, machine-readable format (where feasible).
   

• Automated decisions/profiling: You have the right to object to decisions based solely on automated processing (including profiling) that have legal or similarly significant effects, and to request human review where applicable.
   

• Complaints and redress: You have the right to to lodge a complaint with the competent Indonesian supervisory authority (once designated/operational) and to seek compensation for violations.  
   

Language & Process: you may submit a request to to the privacy email in the final paragraph of this Policy, and we will verify your identity and respond within PDPL timeframes.

We may revise or update this Policy from time to time. If we make significant changes to how we handle Personal Information, we will post changes to the Policy on our site and change the date on the top of this page. Your use of our Services following the posting of changes on our Game and/or Website will constitute your consent to the changes.  If material changes are made, we will provide additional notice in advance (for example, a disclaimer on our Website).

If you have any questions about our privacy practices, you can reach out at privacy@thunderpop.com. 

Account-related or technical questions concerning the operation of the Game should be sent to support@thunderpop.com. 
 

Thanks for playing ThunderPop!