Privacy Policy

Last updated: May 27, 2025

Welcome to TON 2048 Master: Mega Drop ("we", "us", or "our"), operated at www.tonmaster.cc. This Privacy Policy explains how we collect, use, and protect your information when you play our game, whether through our website or as a Telegram Mini App.

By using TON 2048 Master, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the service.

1. Information We Collect

We collect the following categories of information:

a) Telegram User Data

When you access TON 2048 Master via Telegram, Telegram's WebApp SDK provides us with your public Telegram profile data, including:

• Telegram user ID (numeric)
• First name and username (if publicly set)
• Telegram language preference

We use your Telegram user ID as your account identifier. We do not receive your phone number, email address, or private messages.

b) Game Activity Data

• Game scores, moves, and session duration
• In-game actions: Shard claims, Refine events, Withdraw requests, Undo usage
• Virtual currency balances (Shards, TON balance within our system)

c) Technical & Analytics Data

• Browser type, device type, operating system, screen resolution
• Approximate time zone and language settings
• Pages viewed and time spent on our website
• Referring URL or Telegram deep link
• IP address (used for fraud prevention; not stored long-term)

d) Blockchain Data

When you initiate a TON withdrawal, you provide a TON wallet address. This address is recorded to process the transfer. Blockchain transactions are public by nature; anyone can view on-chain transfers via TON blockchain explorers.

2. How We Use Your Information

• To authenticate your identity via Telegram's secure initData mechanism
• To maintain your game progress, Shard balance, and TON balance
• To process Shard Refine operations and TON withdrawals
• To track and reward valid referrals
• To detect and prevent fraud, cheating, and abuse
• To analyze gameplay patterns and improve the game experience
• To display relevant advertising (see Section 4)
• To communicate service updates (via Telegram Bot, if you interact with our bot)

3. Cookies and Local Storage

We use browser localStorage and cookies to store your game state, language preference, theme preference, and best score locally on your device. This data never leaves your device unless you explicitly trigger a sync action.

Telegram's CloudStorage API may also be used to sync your best score and theme across Telegram clients. This data is governed by Telegram's Privacy Policy.

4. Third-Party Advertising

Google AdSense: We may display advertisements served by Google AdSense. Google uses the DoubleClick DART cookie to serve ads to users based on their visits to our site and other sites. Users may opt out of the DART cookie by visiting the Google Privacy Policy for Advertising.

Adsgram: We display rewarded advertisements served by Adsgram within the Telegram Mini App environment. Adsgram's ad delivery is subject to Adsgram's Privacy Policy.

Third-party ad vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to our site and/or other sites on the Internet.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Service providers: Vercel (hosting), Upstash (database), TonCenter (TON blockchain API) — under data processing agreements.
• Advertising partners: Google AdSense, Adsgram — as described in Section 4.
• Legal requirements: If required by law, court order, or to protect the rights and safety of our users or the public.

6. Data Retention

We retain your account data (Telegram user ID, Shard balance, TON balance, referral relationships) for as long as your account is active. Game analytics data is retained for up to 90 days. You may request deletion of your data by contacting us (see Section 10).

7. Security

We use industry-standard security measures including:

• HMAC-SHA256 signature validation of all Telegram identity claims
• HTTPS (TLS) encryption for all data in transit
• Encrypted storage of environment secrets (API keys, wallet mnemonics)
• Rate limiting to prevent abuse of reward mechanisms

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children's Privacy

TON 2048 Master is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. International Transfers

Our servers are operated by Vercel (United States) and Upstash (United States/EU). By using our service, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.

10. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability
• Opt out of the sale of personal data (we do not sell data)

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Telegram: @TON2048Master_bot
• Website: www.tonmaster.cc

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance of the updated policy.