Grand G. – Hotel Match — Supplemental U.S. Privacy Statement
This Statement supplements our Privacy Policy and applies to residents of U.S. states with comprehensive consumer privacy laws — currently including California (CCPA as amended by the CPRA), Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia — Where your state's law grants you a right described below, you may exercise it as described in Part 4 below.
1. Notice at collection — categories
In the preceding 12 months (or since launch, if shorter) we have collected the following categories of personal information (as defined by the CCPA): identifiers (random player ID, device and advertising identifiers, IP address, and, where you contact support or link an account when available, name/alias and email); commercial information (purchase records and total spend); internet or other electronic network activity information (gameplay, session, offer-interaction and diagnostic data); approximate (coarse) geolocation derived from IP address; and audio/visual or similar information only if you submit it to support. We do not currently collect inferences about you; if we introduce player grouping for offer selection, we will update this notice before doing so. We collect these from the sources in Section 3 of the Privacy Policy, use them for the purposes in its Section 5, and disclose them to the categories of recipients in its Section 7. We do not collect sensitive personal information as defined by the CCPA and do not use or disclose personal information for purposes other than those described in the Privacy Policy. Retention criteria are described in Section 9 of the Privacy Policy.
2. "Sale," "sharing" and targeted advertising; your opt-out rights
We do not sell personal information for money. However, our disclosure of device identifiers, IP address and app activity to Google AdMob and Adjust for advertising and campaign measurement may constitute a "sale" or "sharing" under the CCPA and "targeted advertising" under other state laws. You may opt out at any time using the consent and device-level controls described in Section 6 of the Privacy Policy (the in-game consent form where it applies to you, the iOS ATT setting, and Android advertising ID controls) or by emailing support@sortisgames.com with the subject "Do Not Sell or Share" and the player ID shown in Settings. On our website, we honor opt-out preference signals such as Global Privacy Control (GPC) for the browser from which they are sent (we cannot link a browser signal to your game Account); because we do not process personal data collected through our website for targeted advertising, a website signal affects website data only. We do not knowingly sell or share the personal information of consumers under 16 years of age. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects.
3. Your state rights
Depending on your state, you have the right to: confirm whether we process your personal data and access it; delete it; correct inaccuracies; obtain a portable copy; opt out of targeted advertising, sale/sharing, and certain profiling; limit use of sensitive personal information (which we do not collect); if you reside in Oregon, obtain a list of the specific third parties to which we have disclosed personal data; and, if you reside in Minnesota, question the result of profiling that produces legal or similarly significant effects (we do not engage in such profiling). You will not receive discriminatory treatment for exercising these rights.
4. How to exercise your rights; verification; appeals
Submit requests through the in-game help function (recommended) or by email to support@sortisgames.com. We verify requests as described in Section 13 of the Privacy Policy (normally by matching the player ID shown in Settings), respond within 45 days (extendable once by a further 45 days where permitted, with notice), and will not discriminate against you for exercising your rights. Authorized agents may submit requests with proof of authorization, and we may ask you to confirm the authorization directly. If we refuse a request, you may appeal by replying to our decision or writing to support@sortisgames.com with the subject "Privacy Appeal"; we will respond to appeals within the time your state's law requires. If your appeal is denied, you may contact your state Attorney General (in California, the California Privacy Protection Agency).
5. Additional California disclosures
Do Not Track. Our website does not currently respond to browser "Do Not Track" signals; it does respond to Global Privacy Control signals as described in Part 2 above. Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes within the meaning of California Civil Code Section 1798.83. Minors. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. Financial incentives. We do not offer financial incentives in exchange for personal information.