PRIVACY POLICY

Last updated May 10, 2026

This Privacy Policy for Mog Studios LLC (“we,” “us,” or “our”) describes how and why we access, collect, store, use, disclose, and otherwise process (“process”) personal information when you use our services (“Services”), including when you:

• download or use our mobile application Mog Battles, or any other application of ours that links to this Privacy Policy;
• use Mog Battles, an interactive multiplayer collectible card battler with a medieval-inspired theme, centered around self-improvement, multiplayer competition, voting, AI player avatars, computer vision-based facial analysis, rankings, XP, cosmetic items, gems, clans, and gameplay rewards;
• use our website, account features, payment features, advertisements, rewarded advertisements, support channels, or related Services;
• engage with us in other related ways, including marketing, events, promotions, or support.

We are responsible for deciding how your personal information is processed. If you do not agree with this Privacy Policy, do not use the Services.

This Privacy Policy should be read together with our EULA & TOS, Cookie Policy, and Disclaimer. Any additional terms, policies, or notices will apply where they are made available to you and are relevant to the feature, promotion, service, or region concerned.

Contact: contact@mogstudios.org

SUMMARY OF KEY POINTS

What personal information do we process? We process personal information depending on how you interact with the Services, the choices you make, and the features you use. This may include account data, device data, gameplay data, purchase data, public profile data, user-submitted images, facial-analysis data, facial-recognition embeddings, advertising data, analytics data, and support communications.

Do we process sensitive personal information? Yes. With your explicit consent or as otherwise permitted by law, we may process facial images, biometric data, facial geometry, facial-recognition embeddings, facial anthropometric data, and related computer vision outputs.

Do we collect information from third parties? Yes. We may receive limited information from third-party platforms and service providers, including app stores, payment processors, social login providers, advertising and analytics providers, attribution providers, fraud-prevention partners, and platform services, depending on how you use the Services and your device settings.

How do we process your information? We process information to provide, operate, secure, improve, personalize, and monetize the Services; create and manage accounts; provide gameplay, facial-analysis, rankings, rewards, purchases, ads, support, anti-cheat, fraud prevention, and moderation; and comply with legal obligations.

Do we use facial analysis or facial recognition? Yes. We use computer vision to analyze images you submit through the mobile application for gameplay. Facial-analysis photos are submitted through the mobile application only and are not uploaded through the web application. We derive facial metrics for gameplay analysis and comparison. We also create facial-recognition embeddings to prevent smurfing, duplicate accounts, account abuse, ban evasion, fraud, and competitive manipulation.

Are your images public? Certain images and gameplay outputs may be public by default where you consent in the app. For example, your latest front profile image may be used as your default profile picture, and other users may see gameplay-related content such as profile images, Mog Cams, screenshots, scores, votes, XP, rankings, cosmetics, match history, and other public gameplay activity. Public or shared gameplay records, including Mog Cams and downloadable screenshots, may remain visible in another user’s gameplay history or archive even if you later delete your account.

Can I opt out of facial analysis and still use the app? No. Facial-analysis processing is core to the Services. If you do not want us to process facial images, facial-recognition embeddings, or facial anthropometric data, you should not create an account or use the Services. You may withdraw consent by deleting your account or contacting us, but this will prevent you from using the Services or may require us to close your account.

Do we use rewarded advertisements? Yes. The Services may offer rewarded advertisements, where you can choose to watch or interact with an advertisement in exchange for in-game rewards, such as virtual currency, items, boosts, or other benefits. Rewarded advertisements may be provided by advertising partners such as AdMob, AppLovin, Google AdSense for web advertising where applicable, or other advertising networks we integrate.

Do we sell or share personal information? We may “share” personal information for targeted advertising or cross-context behavioral advertising where applicable privacy laws define such activity as “sharing.” We do not sell facial images, facial-recognition embeddings, facial anthropometric metrics, or other facial-analysis data, and we do not share those facial data categories with advertising partners for targeted advertising. This does not prevent public gameplay content that you create, submit, share, or participate in, including Mog Cams, screenshots, profile images, battle images, rankings, match results, votes, or other public gameplay outputs, from being visible, shared, downloaded, reposted, or used as described in this Privacy Policy and our EULA & TOS.

How long do we keep your information? We keep information for as long as needed to provide the Services, maintain accounts, enforce our terms, prevent fraud, resolve disputes, comply with law, and meet legitimate business needs. Facial photos and related gameplay metrics are subject to the retention rules described below.

Do minors use the Services? No. The Services are not intended for users under 18. Users under 18 may not create an account or use the Services.

How do you exercise your rights? You may contact us at contact@mogstudios.org or use the account settings and privacy tools made available in the Services.

TABLE OF CONTENTS

1. What Information Do We Collect?
2. Facial Images, Computer Vision, Biometric Data, and Facial Recognition
3. Public Gameplay, Profiles, Mog Cams, and Other Users
4. How Do We Process Your Information?
5. What Legal Bases Do We Rely On?
6. When and With Whom Do We Share Your Information?
7. Third-Party Websites, Ads, and Rewarded Advertisements
8. Cookies, Tracking Technologies, Advertising, and Analytics
9. Artificial Intelligence and Computer Vision Features
10. Social Logins
11. International Transfers
12. How Long Do We Keep Your Information?
13. How Do We Keep Your Information Safe?
14. Minors
15. Your Privacy Rights
16. Do-Not-Track Features
17. United States Privacy Rights
18. Other Regional Privacy Rights
19. Updates to This Policy
20. Contact Us
21. Review, Update, or Delete Your Data

1. WHAT INFORMATION DO WE COLLECT?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register, use the Services, submit images through the mobile application, participate in gameplay, make purchases, use social features, contact support, enter promotions, or otherwise interact with us.

This may include:

• username or display name;
• email address;
• password or authentication data;
• contact preferences;
• billing information;
• country or region;
• gender, where provided or required for gameplay filters or features;
• profile picture;
• submitted gameplay images;
• support messages;
• clan chat messages;
• votes, match activity, and gameplay choices;
• public profile information;
• account settings and preferences.

Sensitive personal information

With your explicit consent or as otherwise permitted by law, we may process:

• facial images;
• biometric data, including facial geometry and facial-recognition embeddings;
• facial anthropometric data;
• facial-analysis outputs;
• derived facial metrics;
• image metadata where relevant to security, moderation, fraud prevention, or gameplay.

Payment and purchase data

We may process purchase-related data when you buy subscriptions, gems, cosmetics, chests, packs, or other in-app or web-based products.

For mobile purchases, payment processing may be handled by Apple In-App Purchase / StoreKit or Google Play Billing.

For web purchases, payments may be processed by Stripe.

We do not directly store full payment card numbers or card security codes when payments are processed through Apple, Google Play, or Stripe. These providers process payment information according to their own terms and privacy notices. We may receive limited transaction-related information, such as:

• product purchased;
• purchase amount;
• currency;
• purchase status;
• transaction identifiers;
• receipts;
• subscription status;
• renewal or cancellation status;
• refund status;
• chargeback information;
• billing country or region;
• fraud-prevention signals;
• limited payment method details, such as card brand, expiry month/year, and last four digits, where made available by the payment provider.

Payment providers may process personal information under their own privacy notices:

Social login data

If you register or log in using a third-party account, such as Google, Apple, Discord, TikTok, or another provider we make available, we may receive limited profile information from that provider, depending on the provider and your settings.

This may include:

• name, display name, username, or handle;
• email address;
• profile picture, if provided by the login provider;
• account identifier;
• authentication token;
• information you make available through that provider.

Application data

If you use our mobile application, we may collect or request access to the following information and device features.

Camera access

We request camera access to allow you to capture required gameplay images through the mobile application. Facial-analysis images are captured and submitted through the mobile application only and are not uploaded through the web application or from your device gallery unless we later introduce and disclose that feature.

Mobile device access

We may request access to device features such as camera, storage, sensors, push notifications, social login features, and other permissions necessary to operate the Services.

Mobile device data

We may collect device and technical data, including:

• device model;
• manufacturer;
• operating system;
• app version;
• system configuration;
• device identifiers;
• advertising identifiers, where permitted;
• app instance identifiers;
• IP address;
• browser type and version;
• mobile carrier;
• network information;
• crash logs;
• performance logs;
• security logs;
• app feature usage.

Push notifications

We may request permission to send push notifications related to your account, gameplay, purchases, clan activity, events, rankings, rewards, support, security, or other app features. You can disable push notifications in your device settings.

Information automatically collected

We automatically collect certain information when you use the Services. This may include:

• IP address;
• device information;
• browser and operating system;
• language preferences;
• referring URLs;
• device name;
• country or approximate location;
• date/time stamps;
• pages or screens viewed;
• gameplay activity;
• features used;
• searches;
• crash logs;
• performance logs;
• event logs;
• security logs;
• advertising and analytics events.

Log and usage data

We collect log and usage data for security, diagnostics, performance, analytics, fraud prevention, anti-cheat, moderation, and service improvement.

Device data

We collect device data such as IP address, device identifiers, app identifiers, browser type, hardware model, ISP or mobile carrier, operating system, and system configuration.

Location data

We may process approximate location based on IP address, device settings, country or region selection, app store region, billing region, or analytics/ad network signals.

We do not use precise GPS location unless we specifically request permission and explain the feature requiring it.

Advertising and analytics data

We and our advertising, analytics, attribution, and measurement partners may process:

• device identifiers;
• advertising identifiers;
• app activity;
• engagement data;
• purchase events;
• approximate location;
• IP address;
• attribution data;
• ad interactions;
• fraud-prevention signals.

Google API data

If we receive information from Google APIs, we will use it in accordance with the Google API Services User Data Policy, including applicable Limited Use requirements.

2. FACIAL IMAGES, COMPUTER VISION, BIOMETRIC DATA, AND FACIAL RECOGNITION

Mog Battles includes gameplay features that use facial images, computer vision, facial-analysis data, and facial-recognition technology.

Images we collect

If you choose to use the Services, you must submit images through the mobile application for facial-analysis gameplay features. These may include:

• front profile image;
• smiling image;
• 45-degree left image;
• 45-degree right image;
• 65-degree left image;
• 65-degree right image.

These images are captured and submitted through the mobile application. They are not taken from your camera roll or gallery unless we later introduce that feature and update our disclosures.

Consent

We request explicit consent before processing facial images, biometric data, facial-recognition embeddings, or facial anthropometric data where required by law.

By using facial-analysis features and submitting images through the mobile application, you consent to the processing described in this Privacy Policy and in the in-app consent flow.

Facial-analysis processing is core to the Services. If you do not want us to process facial images, facial-recognition embeddings, or facial anthropometric data, you should not create an account or use the Services. You may withdraw consent by deleting your account or contacting us, but this will prevent you from using the Services or may require us to close your account because the Services cannot function as intended without facial-analysis processing.

Facial metrics we derive

We use computer vision, including MediaPipe-based facial landmark detection, to derive approximately 60 geometric facial metrics and related technical outputs for gameplay and analysis.

These may include, without limitation:

• symmetry measurements, such as left-right facial feature comparisons and bilateral proportional differences;
• facial ratios and proportions, such as chin-philtrum ratio and other distance-based facial proportions;
• facial angles, such as facial convexity angle and other landmark-based angular measurements;
• measurement-plane relationships, such as relationships to Burstone line or other facial reference planes;
• facial depth and projection measurements, such as paranasal depth and other depth-related estimates;
• facial landmarks, landmark coordinates, landmark distances, and landmark relationships;
• pose, image quality, expression, lighting, and capture-quality signals;
• feature spacing, normalized comparison values, and gameplay scoring outputs.

These metrics are used for gameplay analysis, comparison, match outcomes, scoring, and leaderboard placement.

Facial-recognition embeddings

We create facial-recognition embeddings to prevent smurfing, duplicate accounts, account abuse, ban evasion, fraud, and manipulation of competitive features.

Facial-recognition embeddings are used only for account integrity, duplicate-account detection, anti-smurfing, fraud prevention, ban-evasion prevention, and related security purposes. They are not used as public gameplay metrics, used to identify you outside the Services, used to authenticate your legal identity, or provided as identity-verification services to third parties.

Use of anthropometric data

Facial anthropometric data is used solely for analysis and gameplay features, such as metric comparison, scoring, match outcomes, rankings, and leaderboard placement.

We do not use facial anthropometric data to identify you outside the Services, verify your legal identity, make employment decisions, make credit decisions, make housing decisions, make insurance decisions, make healthcare decisions, or make other legally significant real-world decisions.

Human review

Humans may review submitted images in certain game modes where human voting, moderation, or review is part of the feature.

Other game modes use metric comparison analysis and may not involve human image review, except where needed for moderation, fraud prevention, safety, support, legal compliance, or enforcement.

Public visibility and sharing

Certain images and outputs may be visible to other users by default where you consent in the app.

Images may be shared as part of gameplay, Mog Cams, historical gameplay, screenshots, profile features, voting, matches, or leaderboards. Public gameplay content, including Mog Cams and downloadable screenshots, may be shared by users and may also be featured on official Mog Battles social media, marketing, promotional, website, app store, or community channels, including where high-ELO or notable battles are showcased.

We do not display raw facial metric values to other players by default. Other users may see normalized comparison scores, match outcomes, votes, gameplay results, Mog Cams, screenshots, rankings, and other gameplay outputs.

We do not sell facial images, facial-recognition embeddings, facial anthropometric metrics, or other facial-analysis data, and we do not share those facial data categories with advertising partners for targeted advertising. Public gameplay content that you create, submit, share, or participate in may still be visible, shared, downloaded, reposted, or used as described in this Privacy Policy and our EULA & TOS.

Accuracy and limitations

Facial-analysis outputs may be approximate, incomplete, inaccurate, or affected by image quality, pose, lighting, expression, camera characteristics, facial hair, accessories, or other factors.

The Services are provided for entertainment, gameplay, and self-improvement features. Facial-analysis results are for fun within the game and should not be treated as medical, psychological, identity, employment, financial, legal, or real-world assessment tools.

For more information about our gameplay, facial-analysis, looksmaxx, self-improvement, and no-professional-advice disclaimers, please see our Disclaimer.

Infrastructure

Facial-analysis processing is performed on our own infrastructure. We do not use a third-party AI provider to process facial-analysis images for these features unless we update this Privacy Policy or provide additional notice where required.

3. PUBLIC GAMEPLAY, PROFILES, MOG CAMS, AND OTHER USERS

The Services include multiplayer, social, competitive, and public gameplay features.

Other users may see information connected to your account, gameplay, profile, and activity, including:

• username;
• profile picture;
• latest front profile photo, if used as your default profile picture;
• AI player avatar, where applicable;
• leaderboard position;
• XP;
• country or region;
• match results;
• votes;
• scores;
• normalized comparison scores;
• cosmetics collection;
• achievements;
• clan membership;
• clan chats;
• Mog Cam screenshots;
• Mog Cams and historical gameplay;
• gameplay stats;
• badges;
• banners;
• emotes;
• other public gameplay activity.

Do not use a real name, identifying username, identifying image, or personal information in public areas unless you want other users to see it.

If you choose to use a submitted photo as your profile picture, battle image, Mog Cam, shared screenshot, or public gameplay content, that image or a derived version may be visible to other users according to the feature and your in-app settings.

Public or shared gameplay records, including Mog Cams, historical gameplay, downloadable screenshots, match results, battle records, and archived gameplay involving other users, may remain visible on another user’s profile, gameplay history, archive, screenshots, or shared content even if you later delete or terminate your account.

You may change or delete certain profile images through your account settings. Copies may remain temporarily in backups, caches, moderation records, security logs, fraud-prevention systems, or legal/compliance records where permitted by law.

4. HOW DO WE PROCESS YOUR INFORMATION?

We process personal information for the following purposes.

To create and manage accounts

We process information to create accounts, authenticate users, maintain account security, manage login sessions, and provide account features.

To provide the Services

We process information to operate gameplay, matchmaking, rankings, leaderboards, XP, rewards, voting, clans, chat, Mog Cams, cosmetics, gems, purchases, support, subscriptions, and other features.

To provide facial-analysis gameplay features

We process voluntarily submitted images and derived facial-analysis data to provide facial-analysis gameplay, metric comparison, normalized scores, match outcomes, leaderboard placement, and related app functionality.

To prevent smurfing and account abuse

We process facial-recognition embeddings, device data, account activity, gameplay signals, and security logs to detect and prevent smurfing, duplicate accounts, ban evasion, fraud, cheating, and abuse.

To manage purchases and subscriptions

We process transaction records, receipts, subscription status, purchase history, refund status, chargeback information, and payment provider signals to fulfill purchases, provide subscriptions, manage refunds, prevent fraud, and comply with platform rules.

To enable user-to-user communications

We process information when you use clan chat, voting, public profiles, gameplay interactions, or other social features.

To provide public gameplay features

We process and display public gameplay information such as usernames, profile pictures, XP, rankings, votes, scores, match results, Mog Cams, screenshots, cosmetics, achievements, and gameplay stats.

To deliver targeted advertising

We may process advertising and analytics data to display ads, measure ad performance, attribute installs, prevent ad fraud, and, where permitted, personalize ads.

To provide rewarded advertisements

If we offer rewarded advertisements, we may process identifiers, ad interaction data, reward information, and fraud-prevention signals to verify ad completion, prevent abuse, and credit your account with in-game rewards.

To protect the Services

We process information for security, fraud monitoring, anti-cheat, moderation, abuse prevention, account integrity, and enforcement of our legal terms.

To moderate content

We may use automated tools and human review to detect, review, remove, or restrict images, profile pictures, usernames, chat, screenshots, Mog Cams, or other user content that may violate our content rules, safety standards, intellectual property rules, platform rules, or applicable law.

To improve the Services

We process analytics, crash logs, gameplay events, feedback, surveys, support tickets, and performance data to improve user experience, balance gameplay, fix bugs, test features, and develop new features.

To communicate with you

We may send service-related messages, account notices, support responses, security alerts, purchase confirmations, policy updates, event notices, and marketing communications where permitted.

To comply with law

We may process information to comply with legal obligations, respond to lawful requests, enforce legal rights, resolve disputes, protect users, and cooperate with regulators or law enforcement where required.

5. WHAT LEGAL BASES DO WE RELY ON?

If you are located in the EEA, UK, or another region requiring a legal basis, we rely on the following bases.

Consent

We rely on consent where required, including for:

• facial images;
• biometric data, including facial geometry and facial-recognition embeddings;
• facial anthropometric data and derived facial-analysis metrics;
• certain cookies and tracking technologies;
• personalized advertising where required;
• marketing communications where required;
• other sensitive personal information where required.

You may withdraw consent at any time. Because facial-analysis processing is core to the Services, withdrawing consent for facial images, biometric data, facial-recognition embeddings, or facial anthropometric data may prevent you from using the Services or may require account closure.

Performance of a contract

We process information where necessary to provide the Services, including account features, gameplay, purchases, subscriptions, support, rankings, rewards, and app functionality.

Legitimate interests

We may process information for legitimate interests, including:

• service security;
• fraud prevention;
• anti-cheat;
• abuse prevention;
• debugging;
• analytics;
• service improvement;
• gameplay balancing;
• support;
• moderation;
• marketing where permitted;
• non-personalized advertising;
• protecting our rights and users.

Legal obligations

We process information where necessary to comply with law, tax, accounting, regulatory, platform, security, or legal requirements.

Vital interests

We may process information where necessary to protect the vital interests of a person.

6. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We may share personal information with vendors, service providers, advertising partners, analytics partners, attribution providers, payment processors, authentication providers, cloud infrastructure providers, fraud-prevention providers, moderation providers, and other partners that help us operate, secure, improve, measure, and monetize the Services.

Depending on the type of processing, these parties may act as our service providers/processors, independent controllers, or joint controllers where applicable law recognizes that role.

Advertising, direct marketing, monetization, and attribution

We may share identifiers, device data, advertising identifiers, approximate location, app activity, ad interaction data, purchase events, and fraud-prevention signals with advertising, monetization, analytics, and attribution partners where permitted by law and your device or consent settings.

Cloud infrastructure, backend, storage, and hosting

We may share or store information with cloud infrastructure and backend service providers used to host, secure, and operate the Services.

User account registration and authentication

We may share limited information with authentication and social login providers when you choose to use those login methods.

Payments and billing

We may share transaction-related information with payment providers and app stores to process purchases, subscriptions, refunds, chargebacks, fraud prevention, and platform compliance.

Analytics, testing, crash reporting, and performance monitoring

We may share app usage, crash, diagnostic, performance, and testing data with providers that help us understand and improve the Services.

Security, fraud prevention, anti-cheat, and moderation

We may share information with service providers that help detect fraud, prevent abuse, secure accounts, investigate cheating, moderate content, respond to reports, enforce our legal terms, or protect users and the Services.

This may include account information, device data, transaction records, gameplay events, facial-recognition abuse-prevention signals, reports, moderation evidence, and technical logs.

Business transfers

We may share or transfer information in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction.

Other users

Other users may see public gameplay and profile information as described in this Privacy Policy.

Legal and safety disclosures

We may disclose information where necessary to comply with law, respond to lawful requests, enforce our terms, protect rights, prevent harm, investigate fraud, or protect the security of the Services.

7. THIRD-PARTY WEBSITES, ADS, AND REWARDED ADVERTISEMENTS

The Services may link to third-party websites, services, advertisements, app stores, payment processors, social platforms, or advertising placements.

If you click a third-party link or advertisement, you may leave our Services. Information you provide to third parties is governed by their own privacy notices and terms.

Rewarded Advertisements

The Services may offer rewarded advertisements, where you can choose to watch or interact with an advertisement in exchange for in-game rewards, such as virtual currency, items, boosts, or other benefits.

Rewarded advertisements may be provided by advertising partners such as AdMob, AppLovin, or other advertising networks we integrate. Web advertising may also be provided through services such as Google AdSense, where applicable.

These partners may process:

• user ID or app instance ID;
• device identifiers;
• advertising identifiers, where permitted;
• approximate location;
• ad interaction data;
• ad completion status;
• reward status;
• fraud-prevention signals;
• analytics and measurement events.

This information is used to deliver ads, measure performance, prevent abuse, verify ad completion, and credit your account with the relevant reward.

Opting out of personalized advertising, targeted advertising, sale, or sharing does not remove all advertisements from the Services. You may still see contextual ads, non-personalized ads, rewarded ads, house ads, service messages, or promotions. If you purchase an ad-removal subscription, the scope of ad removal is governed by the subscription terms shown in the app.

8. COOKIES, TRACKING TECHNOLOGIES, ADVERTISING, AND ANALYTICS

We may use cookies, SDKs, pixels, local storage, mobile identifiers, analytics tools, advertising identifiers, and similar technologies to operate, secure, improve, measure, and monetize the Services.

These technologies may help us:

• maintain security;
• prevent crashes;
• fix bugs;
• save preferences;
• operate basic features;
• analyze app usage;
• measure ad performance;
• attribute installs;
• prevent ad fraud;
• deliver ads;
• personalize ads where permitted.

To the extent online tracking technologies are considered “selling,” “sharing,” targeted advertising, or profiling under applicable law, you may opt out as described in this Privacy Policy.

Personalized advertising controls

You may control personalized advertising through device settings and platform tools.

On iOS, you can manage app tracking and personalized advertising through Apple’s privacy settings, including App Tracking Transparency and Apple Advertising settings.

On Android, you can manage advertising ID settings through Android privacy or ad settings, including resetting or deleting the advertising ID where supported.

You may also use in-app consent settings, cookie preference settings, or privacy choices where available.

Opting out of personalized advertising, targeted advertising, sale, or sharing does not remove all advertisements from the Services. You may still see contextual ads, non-personalized ads, rewarded ads, house ads, service messages, or promotions. If you purchase an ad-removal subscription, the scope of ad removal is governed by the subscription terms shown in the app.

9. ARTIFICIAL INTELLIGENCE AND COMPUTER VISION FEATURES

We offer features powered by artificial intelligence, machine learning, computer vision, or similar technologies.

These features may include:

• image analysis;
• facial landmark detection;
• facial metric generation;
• normalized comparison scoring;
• gameplay insights;
• AI player avatars for bots or non-human player characters;
• moderation support;
• anti-fraud and anti-abuse systems.

AI player avatars, bot characters, and arcade characters are not generated from ordinary users’ submitted facial-analysis photos, facial-recognition embeddings, or facial anthropometric data. Some arcade or promotional characters may depict real people, creators, or influencer partners where we have separate permission or partnership rights to use their likeness, photos, name, handle, or related materials.

Facial-analysis features use MediaPipe-based computer vision to detect and measure facial features for gameplay, especially short-form gameplay modes.

Outputs may be inaccurate, approximate, incomplete, or affected by image quality, pose, lighting, expression, and technical factors.

These features are for entertainment, gameplay, and self-improvement. They are not intended to produce real-life consequences or legally significant decisions.

For more information about our AI, computer vision, facial-analysis, looksmaxx, self-improvement, and no-professional-advice disclaimers, please see our Disclaimer.

Facial-analysis features are core to the Services. If you do not want us to process facial images, facial-recognition embeddings, or facial anthropometric data, you should not create an account or use the Services. You may withdraw consent by deleting your account or contacting us, but this will prevent you from using the Services or may require us to close your account because the Services cannot function as intended without facial-analysis processing.

10. SOCIAL LOGINS

If you choose to register or log in using a third-party account, such as Google, Apple, Discord, TikTok, or another provider we make available, we may receive limited information from that provider, depending on the provider and your settings.

This may include:

• name, display name, username, or handle;
• email address;
• profile picture, if provided by the login provider;
• account identifier;
• authentication token;
• information you make available through that provider.

We use this information to create your account, authenticate you, prevent fraud, secure the Services, and provide requested features.

We do not control how third-party social platforms process your information. Their processing is governed by their own privacy notices and settings.

11. INTERNATIONAL TRANSFERS

Our servers are located in the United States. Your information may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate.

If you are located in the EEA, UK, Switzerland, Brazil, South Korea, Turkey, or another region with international-transfer requirements, we take steps to protect personal information transferred internationally, including using Standard Contractual Clauses, contractual safeguards, service-provider commitments, or other lawful transfer mechanisms where required.

12. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep personal information for as long as necessary to provide the Services, operate accounts, fulfill purchases, maintain security, prevent fraud, resolve disputes, enforce our legal terms, comply with legal obligations, and meet legitimate business needs.

We may retain certain information after deletion requests where necessary for legal obligations, disputes, enforcement, fraud prevention, security, accounting, tax, chargebacks, platform compliance, or other legitimate purposes permitted by law.

Retention by data type

When we no longer have an ongoing need to process personal information, we will delete, anonymize, or securely isolate it until deletion is possible.

13. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use reasonable technical and organizational measures designed to protect personal information, including access controls, infrastructure security, authentication controls, monitoring, logging, and vendor safeguards.

No electronic transmission or storage technology can be guaranteed to be 100% secure. You should use the Services only within a secure environment and protect your account credentials.

14. MINORS

The Services are not intended for users under 18 years of age.

Users under 18 may not create an account, submit images, use facial-analysis features, make purchases, join clans, participate in multiplayer features, or otherwise use the Services.

We do not knowingly collect personal information from users under 18. If we learn that we have collected personal information from a user under 18, we will deactivate the account and take reasonable steps to delete the information.

Contact us at contact@mogstudios.org if you believe we have collected information from a user under 18.

15. YOUR PRIVACY RIGHTS

Depending on where you live, you may have rights to:

• access personal information;
• correct inaccurate information;
• delete information;
• restrict processing;
• object to processing;
• withdraw consent;
• receive a portable copy of information;
• opt out of targeted advertising;
• opt out of sale or sharing;
• limit use or disclosure of sensitive personal information;
• appeal a denied privacy request;
• request human review of certain automated decisions where required by law.

You may exercise rights by contacting us at contact@mogstudios.org or using available in-app tools.

Account information

You may review or update certain account information through your account settings.

If you request account deletion, we will deactivate or delete your account and associated information according to this Privacy Policy, subject to lawful retention exceptions.

Consent withdrawal

If we rely on consent, you may withdraw consent at any time. Withdrawal may disable or prevent access to features that require the relevant data. Because facial-analysis processing is core to the Services, withdrawal of consent for facial images, facial-recognition embeddings, biometric data, or facial anthropometric data may prevent you from using the Services or may require account closure.

Marketing communications

You can opt out of marketing emails by using the unsubscribe link or contacting us.

You may still receive service, security, legal, purchase, and account-related messages.

16. CONTROLS FOR DO-NOT-TRACK FEATURES

Some browsers and mobile systems include Do-Not-Track signals. Because there is no uniform standard for recognizing or responding to these signals, we do not currently respond to them.

Where required by law, we will honor recognized opt-out preference signals or other legally required privacy-control mechanisms.

17. UNITED STATES PRIVACY RIGHTS

If you are a resident of a US state with applicable privacy laws, you may have rights regarding your personal information, including access, deletion, correction, portability, opt-out, appeal, and rights relating to sensitive data, targeted advertising, sale, sharing, or profiling.

Categories of personal information we collect

Sources of personal information

We collect personal information from:

• you;
• your device;
• your gameplay activity;
• submitted images;
• payment providers;
• app stores;
• social login providers;
• advertising and analytics partners;
• attribution providers;
• security and fraud-prevention systems;
• other users, such as reports or votes.

Purposes of collection and use

We use personal information for the purposes described in this Privacy Policy, including:

• providing the Services;
• facial-analysis gameplay;
• facial-recognition abuse prevention;
• account creation and authentication;
• purchases and subscriptions;
• rankings, rewards, and leaderboards;
• public gameplay features;
• chat and clan features;
• advertising and analytics;
• rewarded advertisements;
• anti-cheat, fraud prevention, and security;
• moderation;
• support;
• legal compliance.

Disclosures for business or commercial purposes

We may disclose the following categories for business or commercial purposes:

• Category A: Identifiers;
• Category B: Customer records information;
• Category C: Protected classification characteristics;
• Category D: Commercial information;
• Category E: Biometric information;
• Category F: Internet or network activity;
• Category G: Geolocation data;
• Category H: Audio, electronic, visual, or similar information;
• Category K: Inferences;
• Category L: Sensitive personal information.

The categories of third parties are described in “When and With Whom Do We Share Your Information?”

Sale or sharing of personal information

We do not sell personal information for money.

We may share personal information for targeted advertising or cross-context behavioral advertising where applicable law defines that activity as “sharing” or “sale.” This may include:

• identifiers;
• device data;
• advertising identifiers;
• internet or app activity;
• approximate location;
• analytics events;
• advertising events;
• inferences related to ad measurement or ad personalization.

We do not sell facial images, facial-recognition embeddings, facial anthropometric metrics, or other facial-analysis data, and we do not share those facial data categories with advertising partners for targeted advertising.

This does not prevent public gameplay content that you create, submit, share, or participate in, including Mog Cams, screenshots, profile images, battle images, rankings, match results, votes, or other public gameplay outputs, from being visible, shared, downloaded, reposted, or used as described in this Privacy Policy and our EULA & TOS.

Sensitive personal information

We process sensitive personal information only where necessary for permitted purposes, with consent where required, or as otherwise allowed by law.

You may have the right to limit the use or disclosure of sensitive personal information, including biometric or facial-recognition data, depending on your state.

Your US privacy rights

Depending on your state, you may have the right to:

• know whether we process your personal information;
• access your personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain a copy of personal information;
• opt out of targeted advertising;
• opt out of sale or sharing;
• opt out of certain profiling;
• limit use or disclosure of sensitive personal information;
• withdraw consent;
• appeal a denied request;
• request a list of categories or specific third parties to whom information was disclosed, where required by law.

Exercising rights

You can exercise rights by:

• emailing contact@mogstudios.org;
• using in-app privacy settings where available;
• visiting our Contact page;
• using cookie or advertising preference tools where available.

Verification

We may verify your identity before fulfilling privacy requests. We may request additional information if needed for verification, security, or fraud prevention.

Authorized agents

Where permitted by law, you may designate an authorized agent to submit a request. We may require proof of authorization and verification of identity.

Appeals

If we deny your request and your state gives you appeal rights, you may appeal by emailing contact@mogstudios.org.

18. OTHER REGIONAL PRIVACY RIGHTS

You may have additional rights depending on where you live. We will handle privacy requests in accordance with applicable law.

EEA, UK, and Switzerland

If you are located in the EEA, UK, or Switzerland, you may have rights to:

• access your personal information;
• correct inaccurate personal information;
• request deletion;
• restrict processing;
• object to processing;
• withdraw consent;
• request data portability;
• lodge a complaint with a data protection authority.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

Where automated processing produces legal or similarly significant effects, we will provide rights required by applicable law, including information, contestation, or human review where required.

Our gameplay scoring, ranking, and facial-analysis features are designed for entertainment, gameplay, and self-improvement. They are not intended to produce legal or similarly significant real-world effects.

Brazil

If you are located in Brazil, you may have rights under the Lei Geral de Proteção de Dados Pessoais (LGPD), including the right to:

• confirm whether we process your personal information;
• access your personal information;
• correct incomplete, inaccurate, or outdated information;
• request anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed information;
• request portability where applicable;
• receive information about entities with whom we share personal information;
• receive information about the possibility of denying consent and the consequences of denial;
• withdraw consent where processing is based on consent;
• request deletion of personal information processed based on consent, subject to lawful retention exceptions;
• object to processing where permitted by law;
• request review of certain automated decisions where required by law.

We may transfer personal information internationally, including to the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers, such as contractual safeguards, service-provider commitments, or other lawful transfer mechanisms.

South Korea

If you are located in South Korea, you may have rights under applicable Korean privacy laws, including the right to:

• request access to personal information;
• request correction of inaccurate personal information;
• request deletion of personal information;
• request suspension of processing where applicable;
• withdraw consent where processing is based on consent;
• request information about the processing of your personal information;
• request information about third-party disclosures or international transfers where required.

We may process sensitive information, including facial images, facial geometry, facial-recognition embeddings, and facial anthropometric data, only as described in this Privacy Policy and with consent where required.

We may transfer personal information internationally to the United States and other countries where we or our service providers operate, including for hosting, authentication, payments, analytics, advertising, security, and support.

Turkey

If you are located in Turkey, you may have rights under the Law on the Protection of Personal Data No. 6698 (KVKK), including the right to:

• learn whether your personal data is processed;
• request information if your personal data has been processed;
• learn the purpose of processing and whether it is used appropriately for that purpose;
• know the third parties to whom personal data is transferred domestically or internationally;
• request correction of incomplete or inaccurate personal data;
• request deletion or destruction of personal data where permitted by law;
• request that correction, deletion, or destruction be notified to third parties to whom data was transferred;
• object to a result against you arising from analysis exclusively by automated systems, where applicable;
• request compensation where you suffer damage due to unlawful processing, where applicable.

We may transfer personal information internationally to the United States and other countries where we or our service providers operate, including for hosting, authentication, payments, analytics, advertising, security, and support.

Canada

If you are located in Canada, you may have rights to access, correct, and withdraw consent subject to applicable law.

Australia and New Zealand

If you are located in Australia or New Zealand, you may have rights to request access to or correction of your personal information.

Republic of South Africa

If you are located in South Africa, you may have rights to request access to or correction of your personal information and to contact the Information Regulator.

19. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated version will be indicated by the updated “Last updated” date at the top.

If we make material changes, we may notify you by in-app notice, email, website notice, or another appropriate method.

20. CONTACT US

If you have questions or comments about this Privacy Policy, contact us at:

Mog Studios LLC 30 N Gould St Ste N Sheridan, WY 82801 United States

Email: contact@mogstudios.org

21. REVIEW, UPDATE, OR DELETE YOUR DATA

You may request to review, update, correct, or delete personal information by:

• using your in-app account settings;
• emailing contact@mogstudios.org;
• visiting our Contact page.

If you delete your account, app-associated photos and facial data are deleted after one month, subject to lawful retention exceptions for security, fraud prevention, disputes, enforcement, legal obligations, backups, or platform compliance. Public or shared gameplay records, including Mog Cams, historical gameplay, downloadable screenshots, match results, battle records, and archived gameplay involving other users, may remain visible as described in this Privacy Policy.

We may retain de-identified or aggregated information for longer where it no longer identifies you.