PRIVACY POLICY

Last updated: April 15, 2026

This Privacy Policy describes how Kelthos Inc. ("we," "us," or "our") collects, uses, and shares information when you use the TESSERA mobile application ("App") and related services ("Services").

1. INFORMATION WE COLLECT

1.1 Information You Provide

• Account information: email address, display name, password (hashed)
• Profile data: avatar selection, guild membership
• Payment information: processed by Google Play and Stripe (we do not store card data)
• Communications: support requests, feedback, guild chat messages
• KYC data: government ID and name (required for token withdrawal and annual challenge)

1.2 Information Collected Automatically

• Device information: device model, OS version, screen resolution, unique device identifier
• Game data: level progress, scores, moves, play time, power-up usage
• Usage data: session duration, feature interaction, crash reports
• Network data: IP address, connection type
• Advertising identifiers: Google Advertising ID (for ad personalization)

1.3 Information from Third Parties

• Google Play: purchase verification, subscription status
• Firebase: analytics events, crash data, push notification tokens
• AdMob: ad interaction data, eCPM metrics
• Polygon blockchain: wallet address, transaction history (for TESS token users)

2. HOW WE USE YOUR INFORMATION

• Operate and maintain the App and Services
• Authenticate your identity and manage your account
• Process in-app purchases and subscriptions
• Match you with opponents in PvP and tournaments
• Track game progress, leaderboard rankings, and achievements
• Manage mining sessions and TESS token balances
• Send push notifications (lives refill, events, PvP matches)
• Serve and optimize advertisements via Google AdMob
• Detect cheating, fraud, and abuse
• Analyze usage patterns to improve the game experience
• Comply with legal obligations

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share data with:

• Service Providers: Google (Firebase, AdMob, Play Services), Cloudflare (CDN, security), hosting providers
• Blockchain Networks: Polygon network for TESS token transactions (wallet address and amounts are public on-chain)
• Other Players: Display name, level, rank, guild membership, and PvP stats are visible to other players
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4. DATA RETENTION

We retain your account data for as long as your account is active. Game progress and leaderboard data are retained indefinitely for the integrity of rankings. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for fraud prevention.

Blockchain transactions (TESS token) are permanent and cannot be deleted due to the immutable nature of distributed ledgers.

5. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and associated data (see Account Deletion)
• Export your data in a portable format
• Opt out of targeted advertising
• Withdraw consent for data processing
• Lodge a complaint with a data protection authority

6. DATA SECURITY

We implement industry-standard security measures including TLS encryption for all data in transit, encrypted storage for sensitive data at rest, JWT authentication with short-lived tokens, rate limiting on all API endpoints, and regular security audits. No system is 100% secure, and we cannot guarantee absolute security.

7. CHILDREN'S PRIVACY

TESSERA is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you are a parent and believe your child has provided us with personal data, please contact us.

8. ADVERTISING

We use Google AdMob to serve advertisements. AdMob may use your advertising identifier and device information to show personalized ads. You can opt out of personalized advertising through your device settings (Settings > Google > Ads > Opt out of Ads Personalization). Premium subscribers do not see interstitial ads but may still interact with rewarded video ads voluntarily.

9. INTERNATIONAL TRANSFERS

Your data may be processed in countries other than your own. We use servers located in Germany (EU) and may transfer data to service providers in the United States. We ensure appropriate safeguards are in place for international transfers.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use of the App after changes constitutes acceptance of the updated policy.

11. CONTACT US