Privacy Policy
Effective date: October 13, 2026
In short: Auction Master is made by an independent developer. We collect only what we need to run the game, process purchases, show ads and keep the game fair. We do not sell your personal data. You can delete your account at any time in the game (Settings → Delete Account) or by emailing support@zenflowing.com.
1. Who we are
Auction Master (the “Game”) is developed and operated by Alex Wong, an individual developer (“we”, “us”, “our”). We are the data controller for the personal data described in this policy.
Contact: support@zenflowing.com
This policy applies to the Game on iOS and Android and to our website at zenflowing.com.
2. Data we collect
| Category | What it includes | Source |
|---|---|---|
| Account data | Player ID, a device identifier generated by the Game for guest login, nickname (randomly generated, you can change it), avatar choice, language setting, registration date and platform. If you link a third-party account (Sign in with Apple or Google, when available): the account identifier provided by that service and, if you choose to share it, your email address. | You, your device |
| Gameplay data | Matches played, bids, items, collections, in-game currency balances and transaction history, settings. | Your use of the Game |
| Purchase data | Product purchased, price, currency, transaction / order IDs and receipts from the App Store or Google Play. We never receive your card or bank details; payments are processed by Apple or Google. | App Store, Google Play |
| Advertising data | When you choose to watch a rewarded ad: the advertising identifier (IDFA / Android Advertising ID, if permitted), IP address, device and app information, and ad interaction data, collected by Google AdMob. We receive a confirmation that the ad was watched so we can give you the reward. | Google AdMob |
| Technical data | IP address, device model, operating system, app version, request logs and timestamps, error information. | Your device, our servers |
| Support data | Emails and information you send us when you contact support. | You |
We do not collect your precise location, contacts, photos, or your real name unless you send it to us yourself.
3. How we use your data and our legal bases
| Purpose | Legal basis (EEA / UK) |
|---|---|
| Create and maintain your account, run matches, save your progress, provide in-game features | Performance of our contract with you (the Terms of Service) |
| Process and verify purchases, deliver items, handle refunds | Performance of contract; legal obligations (accounting and tax) |
| Show rewarded ads and verify that an ad was watched | Performance of contract (you choose to watch the ad for a reward); for personalized ads, your consent where required |
| Prevent cheating, fraud and abuse; enforce our Terms; keep the service secure | Legitimate interests (a fair and secure game) |
| Fix bugs, balance the game and improve performance | Legitimate interests |
| Respond to your support requests | Performance of contract; legitimate interests |
| Comply with law and respond to lawful requests | Legal obligations |
We do not use your data for automated decisions that produce legal or similarly significant effects on you.
4. Advertising and tracking
The Game offers optional rewarded video ads served by Google AdMob. Google may use your advertising identifier and other data to show ads and measure their performance, as described in Google’s advertising policies and Google’s Privacy Policy.
- iOS: we ask for permission through Apple’s App Tracking Transparency prompt before the advertising identifier is used for tracking. You can change this any time in Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your Advertising ID, or opt out of personalized ads, in your device’s Google settings.
- EEA, UK and Switzerland: where required, we show a consent message before personalized ads are served. If you do not consent, you may still see non-personalized ads.
5. Who we share data with
We do not sell your personal data. We share it only with the service providers that help us run the Game, and only as needed:
- Alibaba Cloud – game servers and database (hosted in the United Kingdom)
- Cloudflare – content delivery network and file storage for game assets and this website
- Google (AdMob) – rewarded ads
- Apple and Google – app distribution, in-app purchases and, when available, sign-in
We may also disclose data if required by law, to protect the rights and safety of our players or others, or in connection with a transfer of the Game to a new operator (in which case this policy will continue to apply or you will be notified).
Other players can see your nickname, avatar and in-match actions (such as bids) while playing with you.
6. International transfers
Our servers are located in the United Kingdom, and our service providers may process data in other countries, including the United States. When personal data from the EEA is transferred to the UK, it is covered by the European Commission’s adequacy decision for the UK. For other transfers, we rely on appropriate safeguards such as the Standard Contractual Clauses offered by our providers.
7. How long we keep data
- Account and gameplay data: for as long as your account exists.
- When you delete your account: your login identifiers, nickname, avatar and third-party account information are deleted immediately. Purchase and transaction records are kept in a form no longer linked to your identity, for as long as needed for accounting, tax, refund and fraud-prevention purposes (generally up to 7 years).
- Server logs: kept for a limited period for security and troubleshooting, then deleted.
- Support emails: kept for up to 2 years after the conversation ends.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy of it;
- correct inaccurate data;
- delete your data (see Delete Account);
- restrict or object to certain processing, including processing based on legitimate interests;
- data portability;
- withdraw consent at any time, without affecting processing done before;
- lodge a complaint with your local data protection authority.
To exercise these rights, email support@zenflowing.com with your Player ID (shown in the Game under your profile). We may ask you to verify that the account is yours. We will respond within one month (or the period required by your local law).
EEA and UK residents
You have the rights listed above under the GDPR and UK GDPR. You can contact your local supervisory authority; in the UK this is the Information Commissioner’s Office (ico.org.uk).
United States residents
If you live in California or another U.S. state with a comprehensive privacy law, you have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell personal information for money. Showing personalized ads through AdMob may be considered “sharing” or “targeted advertising” under some state laws; you can opt out using the device settings described in Section 4, or by emailing us. We will not discriminate against you for exercising your rights.
Southeast Asia and Africa
If you live in a country with a data protection law — for example Singapore, Malaysia, Thailand, the Philippines, Indonesia, Vietnam, Nigeria, Kenya or South Africa — you have the rights provided by that law, which generally include access, correction, deletion and withdrawal of consent. Contact us using the details above.
9. Children
The Game is not directed to children under 13, and we do not knowingly collect personal data from children under 13. In some countries the minimum age to consent to data processing is higher (up to 16 in parts of the EEA); if you are below that age, you may use the Game only with the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections, access controls and limited access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the effective date. If the changes are significant, we will notify you in the Game.
12. Contact
Alex Wong
Email: support@zenflowing.com