Effective Date: July 30, 2026
TATTOO COMPUTER LLC (“we”, “us”, or “our”) specializes in game development, Google Play & iOS app distribution and official website services. We attach great importance to the personal information security and privacy rights of global users. This Privacy Policy clearly outlines the complete rules governing how we collect, store, use and share your personal information, and complies with major global data regulations including the EU GDPR, California CCPA and COPPA. This Policy applies to all users who visit our official website, browse our products or submit consultation feedback. Your continued access to and use of our online services constitutes your acceptance of all terms of this Policy. We may revise this Policy in accordance with applicable laws, regulations and business developments, and will notify all users via prominent announcements on our website homepage upon any updates.
We adhere strictly to the data minimization principle, and only collect data necessary to maintain normal website operation, implement security risk control and optimize product experience. Information is obtained from two categories of sources:
When you send us inquiries, product suggestions, fault reports or business communications via website forms or email channels, you voluntarily provide us with personal materials at your own discretion, including your email address, contact phone number, full name or preferred display name, textual descriptions attached to your feedback, screenshots, media files and other supporting materials.
All information is filled out and sent by you proactively. We will never force you to provide any personal data, and you may choose to only share basic contact information required for communication.
When you browse our website and product pages, our servers automatically record device and network data that you do not manually submit, solely to safeguard access security and optimize page compatibility: device model, operating system version, unique device identifiers, public IP address, internet service provider, network connection type, page access timestamps, browsing paths, click records, page dwell time, program operation logs, system error logs and device load metrics, which help us troubleshoot page loading failures, display abnormalities and other access issues.
We only acquire a small amount of basic public information when you voluntarily redirect to partner channels and grant explicit authorization: public nicknames and avatars synchronized when you jump to us via social platforms, as well as anonymized page access statistical data provided by compliant data analysis partners. All information obtained from external sources complies with legal requirements, and we will not privately crawl or collect your confidential personal data.
All processing activities of personal information are limited to the following legitimate scenarios, and we will never misuse your data beyond the stated purposes:
Maintain basic website access services
We adapt page display effects based on automatically collected device and network data to resolve page loading failures and layout errors across different devices and network environments. We retain your submitted consultation records to fully follow up on your inquiries and provide complete responses.
Product iteration and online experience optimization
We aggregate anonymized access data to identify product sections of high user interest and optimize our website layout. We consolidate error and fault logs to locate vulnerabilities related to web pages and promotional materials, and continuously enhance browsing experience. We also adjust product displays and website functions based on your feedback and suggestions.
Security protection and compliance risk control
We identify bulk high-frequency visits and malicious abnormal access via IP addresses and device identifiers to defend against web crawlers and cyberattacks and guarantee stable website operation. We fully retain access and communication logs for security risk traceability. When law enforcement or regulatory authorities issue legal document requests for data disclosure, we will provide necessary compliant information as required.
New product newsletter distribution (subject to your explicit consent)
Only with your clear permission will we send you emails regarding product updates, new game launches and industry-related news via the contact address you provided. You may notify us to stop sending newsletters at any time by replying to our emails or leaving a message on our website. Once consent is withdrawn, we will immediately cease all relevant communications.
We will never sell or rent any of your personal information. We only share data with third parties under circumstances permitted by law or required for business operations, and sign strict non-disclosure agreements with all partners to regulate their data processing activities.
Limited permitted third-party recipients
Third-party service providers offering server hosting, online customer support systems and data analysis services, who will only receive anonymized and desensitized data solely for supporting their corresponding services; affiliated group entities bound by equivalent privacy protection standards; law enforcement and regulatory bodies that submit formal legal documents requesting information disclosure, to whom we will provide required data in compliance with the law.
Rules for cross-border data transmission
All user-related data is stored on servers located in the United States. For data belonging to users in the European Economic Area (EEA) transmitted across borders, we adopt EU Standard Contractual Clauses (SCCs) to establish equivalent security safeguards ensuring data protection levels meet GDPR requirements. If cross-border data transfer is involved, we will specify the transfer purposes and security measures via website announcements in advance, and you may raise objections at any time.
Data transfer upon business restructuring
In the event of corporate mergers, asset acquisitions or business reorganizations, user information will be transferred together with the corresponding business assets to the successor party. We will require the transferee to maintain equivalent privacy protection standards set forth in this Policy and post public notifications of such changes on our website in advance.
Data retention period
We retain your data only for the shortest period necessary to fulfill the purposes for which it was collected. Consultation and communication records will be retained for 90 days after all follow-up responses are completed and automatically purged upon expiry. Anonymized access statistics are archived and desensitized on a regular basis. Records required to be retained by applicable laws will be preserved for the minimum statutory term and irreversibly anonymized upon expiration.
Multi-layer security control measures
On the technical front, we adopt SSL/TLS transmission encryption, segregate storage of personally identifiable information, and conduct regular system vulnerability scanning and security patches. On the administrative front, we enforce a least-privilege access policy, under which only a small number of operation and customer service staff may view limited user data on an as-needed basis, with all data access actions fully logged for traceability. We organize regular internal employee training on privacy compliance, and impose serious disciplinary penalties for unauthorized data access or information leakage.
Emergency response mechanism for data breaches
In the event of a personal information leakage incident, we will immediately block risk access channels, conduct a full assessment of the scope and impact of the leak, notify affected users within the statutory 72-hour window, and report the incident to corresponding regulatory authorities. We will simultaneously provide remedial security protection solutions to mitigate losses to your personal information. No online data storage system can guarantee absolute zero risk. Please contact us immediately if you detect any abnormal leakage of your personal data.
Right to Know & Right of Access: You may submit requests via designated channels to obtain a list of your personal information retained by us and descriptions of data processing purposes. We will complete identity verification and provide written feedback within 15 working days.
Right to Rectification & Right to Erasure: You may submit rectification requests if your contact information or feedback records stored by us contain errors or incomplete content. You may request full deletion of all your personal data when the data processing purpose has been fulfilled, you voluntarily withdraw communication consent, or we process information in violation of applicable laws.
Right to Withdraw Consent: You may revoke your authorization to receive new product newsletters at any time. Withdrawal of consent will not affect the legality of data processing activities completed prior to revocation.
Right to Restrict Processing: You may request us to restrict the use of your information for data analysis or newsletter distribution. We will only retain data processing activities essential to responding to your inquiries and website security maintenance.
You have the right to be informed of the categories of information we collect, sources of such information, and a list of third parties with whom we share data. You may request export and full deletion of all your personal information. We will not discriminate against you in service quality for exercising your privacy rights. We do not sell any user information at present. If our business model changes to involve information sales in the future, we will provide a simple permanent opt-out channel. You may authorize designated agents to submit all types of data right requests on your behalf.
We will not proactively collect personal information from users under the age of 13. If a minor wishes to submit inquiries via our website, their legal guardian must communicate on their behalf and provide contact information. We only collect the minimum data required to complete communications and will never use minor information for marketing campaigns. If we confirm that personal data of a minor has been retained without guardian consent, we will immediately delete such data and terminate all communications. Guardians may submit requests to view or erase all information submitted by their children, and we will complete all processing procedures within 20 working days.
Our website contains redirect links to partner manufacturers and industry platforms. Independent third-party websites maintain their own separate privacy policies, and we shall not be liable for their collection and processing of personal information. All external links will be clearly labeled as third-party redirects before navigation. We recommend that you carefully review the privacy rules of external websites prior to access.
We will post prominent notifications on our website homepage and send separate update notices to email addresses provided for consultation if this Policy undergoes material revisions, including adjustments to information sharing scope or user data right clauses. Your continued website access after the effective date of revised terms constitutes your acceptance of the updated Privacy Policy.
For privacy policy inquiries, data right applications and information security complaints, please contact us via the unified channels below:
Email: [email protected]
We will complete identity verification and respond to all compliant requests within 10 to 15 working days. If you disagree with our handling results, you may file a complaint with the local personal information protection regulatory authority.