PRIVACY POLICY

Sushi Belt — operated by Noctis Tide Studios Private Limited

Last updated: 24 September 2026 · Effective date: 24 September 2026


INTRODUCTION

Please read this Privacy Policy carefully to understand our policies and practices regarding your Personal Data (as defined below) and how we treat it.

This Privacy Policy applies to the mobile game Sushi Belt and any related services we operate (together, the "Services"). It explains how we (Noctis Tide Studios Private Limited, "we", "us", "our") collect, use, secure and disclose end-users' ("you", "your") personal information when you use the Services.

The data controller is Noctis Tide Studios Private Limited, with a registered address at 106-C, Sidco Industrial Estate, Ambattur, Chennai 600098, Tamil Nadu, India.

A note on scope. Sushi Belt is a single-player game. It does not require an account, does not have a login, and does not transmit your game progress to us. The personal data associated with the Services is collected by the advertising and platform providers who make the game free to play and who process your purchases — primarily Google (AdMob, Google Play) and Apple (App Store). We do not operate our own analytics service, our own ad server, or our own user database.

A note on our audience. Sushi Belt is directed to a general audience that includes children, and it is designed to be suitable for young players. Because it is offered to children as well as adults, we apply additional protections: advertising content is restricted to a child-appropriate rating, and personalised advertising is served only to users who have confirmed that they are 18 years of age or older. Every other user receives non-personalised (contextual) advertising. The game is fully playable either way. See Section 7.


1. INFORMATION WE COLLECT AND HOW

While using the Services, we may process certain personal data that can be used to identify you ("Personal Data", "data", "information"). For details specific to this app, you may also refer to the privacy labels in the Apple App Store and the Data Safety section in Google Play.

Basic Identifiers

Mobile device identifiers and advertising identifiers — the iOS Identifier for Advertisers (IDFA) and the Android Advertising ID (AAID) — together with your IP address. These are collected by the Google Mobile Ads SDK when the game requests an advertisement. For users who are under 18, or who have declined personalised advertising, the advertising identifier is not used to personalise advertising.

Commercial Information

Your in-app purchase history: the product purchased and the transaction receipt, processed through Google Play Billing or the Apple App Store. We never receive your name, card number, or full payment details. Payment is handled entirely by the app store; we receive only a confirmation of which product was purchased.

Device Information

Device type and model, operating system and version, screen size and resolution, app version, language and region settings, and time zone, as reported by the advertising SDK. We may also receive approximate demographic signals, such as an age range, from the app distribution platforms. These are aggregated indicators and do not include a specific date of birth.

Usage Information

Information about how you interact with the Services, generated on your device: levels reached, coins collected and spent, and speed-boost usage. This information is stored locally on your device and is not transmitted to us. Please see Section 4 (Retention) for what this means for your data rights.

Age Confirmation

When you first launch the game we ask you to confirm whether you are 18 years of age or older, so that we know whether personalised advertising may be shown to you. We ask for a confirmation, not your date of birth, and we do not ask you to document your age. Your answer is stored locally on your device and is not transmitted to us; it is passed to the advertising SDK only to the extent needed to determine which type of advertising to request. You can change your answer at any time from the game's Privacy Settings menu.

Advertising and Ad Interaction Data

Which ads were shown, whether they were skipped or watched to completion, and whether you engaged with them. Where a rewarded ad is watched in exchange for an in-game reward (an extra life, additional speed-boost uses), the advertising SDK confirms that the ad was viewed so the reward can be granted. This data is collected by the advertising provider, not by us.

Support Correspondence

If you contact us, we will process your email address, your name if you provide it, and the contents of your message.

App Store Reviews

Public reviews and comments you leave on the App Store or Google Play, and the contents of any communication you have with us.

What we do NOT collect

Sushi Belt does not request or collect: your precise location, contacts, calendar, photos, camera, microphone, health data, biometric data, financial account numbers, or any category of data defined as "Sensitive Personal Information" under applicable U.S. state privacy laws. We do not collect your date of birth, and we do not create accounts or user profiles. The game requests no runtime device permissions other than those required by the advertising SDK on Android (network access and the advertising ID).

Cookies and similar technologies

On mobile, the equivalent of a cookie is the identifier and SDK data used by our advertising partner, Google AdMob, and by the platform stores. These technologies are used to deliver advertisements, measure their performance, cap how often you see a specific ad, and prevent advertising fraud. Our Services do not run any tracking technology of our own beyond what is described in this policy.

We do not use these technologies to track behaviour across apps or websites for users under 18. If you'd like to stop advertisements being personalised, see the "Opt out of targeted advertising" section in Section 12 below.

Please note that while your browser settings may allow you to transmit a "Do Not Track" signal, our Services are not configured to respond to such signals.


2. SOURCES OF DATA

We, and the third parties listed in Appendices A and B, obtain information:

  • Directly from you — when you email us, when you make an in-app purchase, or when you answer the age confirmation prompt.
  • Automatically from your device — when you download, launch and use the game, including when the advertising SDK requests and displays an ad.
  • From the app stores and distribution platforms — the Apple App Store, Google Play, and the platform's billing and cloud services — in accordance with their own terms and privacy policies.
  • From your device's operating system — for example, the advertising-tracking preference you set in iOS Settings or Android Settings, which determines whether personalised advertising is permitted.

3. PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA

We have set out below the ways in which your Personal Data is used, the legal bases relied upon, and where you can opt out of certain practices.

Service Provision and Maintenance

Legal basis: performance of our End User Licence Agreement with you. To provide the game and its functionality on your device, to keep your local game progress (coins, unlocked levels, settings) stored and available on that device, and to process your in-app purchases so that what you paid for is delivered — ad-free access, or a coin pack.

Determining Whether Personalised Advertising May Be Shown to You

Legal basis: compliance with our legal obligations. We ask you to confirm whether you are 18 or older, and we use that answer — together with your consent choice, where consent is required — to decide whether to request personalised or non-personalised advertising from the advertising provider. We ask for a confirmation rather than a date of birth so that we hold as little information about you as possible. Your answer is stored on your device.

Advertising — Delivering and Measuring Ads

Legal basis: your consent where required; otherwise our legitimate interests in funding a free-to-play game. Sushi Belt displays banner, interstitial, app-open and rewarded advertisements supplied by Google AdMob. To do this, the advertising SDK uses your advertising identifier, IP address, device data and interaction data. We receive only aggregated revenue and performance reporting; we do not build profiles of individual players.

Personalised advertising — adults only. Personalised advertising is requested only where you have confirmed that you are 18 years of age or older and, where we are required to ask, you have given your consent through a Google-certified consent management platform (IAB Europe Transparency and Consent Framework). If you have not confirmed that you are 18 or older, or you have not consented, or you have withdrawn consent, you are served non-personalised (contextual) advertising only. The game remains fully playable in either case.

For users in the European Economic Area, the United Kingdom, Norway, Switzerland and Brazil, consent is the legal basis for personalised advertising. Elsewhere, where local law allows, this processing is based on our legitimate interests in delivering content more aligned with your interests, in continuing to offer the Services free of charge, and in sustaining our business.

Children. We do not serve personalised advertising, and do not use advertising identifiers for personalisation, to any user who has not confirmed that they are 18 or older. This applies worldwide, including to users in India (see Section 10) and the United States (see Section 11).

Rewarded Advertisements

Legal basis: your consent, given by choosing to start the ad. If you choose to watch a rewarded advertisement — to continue after a loss, or to refill speed-boost uses — the advertising provider confirms the view so we can grant the reward. Watching is always optional; declining never blocks access to the main game. Rewarded advertisements may be non-personalised and remain available to all users.

In-App Purchases

Legal basis: performance of our contract with you. To deliver a purchase (removing ads, or granting in-game coins) and to restore a non-consumable purchase such as Remove Ads if you reinstall.

Administering and Protecting Our Services

Legal basis: our legitimate interests in running and protecting our business, and legal obligation. To prevent and detect fraud, advertising fraud, and abuse of rewarded-ad and purchase mechanisms; to validate purchase receipts; and to enforce our agreements. This is performed largely by the platform stores and the advertising provider.

Communication

Legal basis: our legitimate interests, or your consent where required. To respond to your support requests and privacy requests. We do not operate a marketing mailing list and we do not send push notifications.

Compliance and Legal Requirements

Legal basis: legal obligation, and our legitimate interests. To respond to legal process, exercise or defend legal claims, and comply with tax and accounting obligations relating to purchases.

We do not sell your Personal Data. Because we share identifiers with advertising partners and the app stores, some U.S. state laws may characterise this as a "sale" or "sharing" — see Section 11.


4. RETENTION OF PERSONAL DATA

Data on your device. Your game progress — coin balance, unlocked levels, speed-boost uses, your age confirmation and your settings — is stored only in your device's local storage. It is kept until you delete the game or clear its data, and it is removed when you uninstall. We hold no copy of it. This also means it cannot be restored if you lose your device or reinstall the game.

Data held by our service providers. Advertising identifiers, ad interaction data and purchase records are retained by Google and Apple under their own retention policies, which are linked in Appendix A. We do not control those retention periods.

Data we hold ourselves. Our own records are limited to support and privacy correspondence, which we keep for as long as needed to resolve your request and to demonstrate compliance, and in any event no longer than 24 months from the date of last contact.

Purchases. Records of purchase transactions are retained as long as required for tax, accounting and chargeback purposes under applicable law, including Indian tax and company law where applicable, and in any case no longer than the period required by that law.

Once Personal Data has been deleted or anonymised, it can no longer be used to fulfil a request for access, erasure, rectification or portability.


5. PURPOSES FOR WHICH WE SHARE YOUR PERSONAL DATA

We do not sell Personal Data. We share the categories of data described in Section 1 in the following circumstances:

Sharing with Service Providers and Contractors

We use third-party service providers, contractors and freelancers to operate and improve the Services, and they are bound by contractual obligations to keep personal information confidential and to use it only for the purposes for which we disclose it to them. Because we engage contractors in different countries, some of those persons may be located outside India — see Section 6. Our providers are listed in Appendix B.

Advertising Partners

Information is shared with Google AdMob as described in Section 3 and Appendix A. To withdraw consent to personalised advertising at any time, see "Opt out of targeted advertising" in Section 12.

With Platform Stores

Purchase transactions and, where applicable, purchase restoration are processed by Google Play and the Apple App Store under their own terms and privacy policies.

For Corporate Transactions

To transfer information in connection with a merger, sale, acquisition, restructuring, bankruptcy, or other change of ownership or control.

When Required by Law

To comply with legal obligations, or to protect the rights, property or safety of our business, our users or others. Where we are required to disclose data to a government body, we do so only where legally compelled.

To Enforce Legal Rights

We may share information: (i) if disclosure would mitigate our liability in an actual or threatened lawsuit; (ii) as necessary to protect our legal rights and those of our users, partners or other interested parties; (iii) to enforce our agreements with you; and (iv) to investigate, prevent or take action regarding illegal activity, suspected fraud or other wrongdoing.

With Your Consent

Personal Data may be shared with third parties if you give consent or request such sharing. The reason for sharing will be communicated clearly at the time.


6. CROSS-BORDER DATA TRANSFERS

Our service providers process data globally, and we engage contractors located in several countries. This can involve transferring data outside the country in which you live, including outside India and outside the European Economic Area, to jurisdictions that may have different data protection laws — including the United States.

Where data is transferred out of the European Economic Area or the United Kingdom, transfers are made to countries that provide an adequate level of data protection, or to entities providing sufficient guarantees that personal data will be processed in line with this policy and applicable law, under standard contractual clauses approved by the European Commission or another lawful transfer mechanism.

Where data is transferred out of India, we do so in accordance with the Digital Personal Data Protection Act, 2023 and any restrictions on transfer notified under it.


7. AGE LIMITS AND CHILDREN

Sushi Belt is directed to a general audience that includes children. It is designed to be suitable for young players, and because it is offered to children as well as adults we apply the protections below to every user.

We do not knowingly collect personal data from children below the applicable minimum age, and we do not create accounts or profiles of any user. We do not ask a child — or any other user — for a name, an email address, a date of birth, a phone number or any other identifier.

Advertising shown in the game is restricted to a child-appropriate content rating. No advertisement shown to a user who has not confirmed that they are 18 or older is personalised, interest-based or behavioural, and we do not use advertising identifiers to build profiles of younger users.

Personalised advertising is available only to users aged 18 or over. Every user is asked on first launch to confirm whether they are 18 years of age or older. Users who do not confirm this — and users who decline or withdraw consent — receive non-personalised (contextual) advertising only. We do not use advertising identifiers for personalisation, and we do not use any tracking technology to profile behaviour across apps or websites, for any user under 18.

If you are a child in India. Under the Digital Personal Data Protection Act, 2023, a "child" is any person who has not completed 18 years of age. We do not process the personal data of a child in India for the purposes of tracking, behavioural monitoring or targeted advertising, and we do not undertake processing that is likely to cause a detrimental effect on the well-being of a child. See Section 10.

If you are in the European Economic Area or the United Kingdom. Where you are below the age at which you can consent to information society services under your national law, personalised advertising is not available to you.

If you are in the United States. We do not serve personalised advertising to users under 18, and we do not knowingly collect personal information from children under 13. See Section 11.

Age confirmation is a self-declaration and is not a substitute for parental supervision. Parents and guardians: we do not knowingly collect personal information from children, and if you believe a child has provided us with personal data, contact us at creatives@noctistidestudios.com and we will delete it. Parents can also limit tracking and advertising through the device settings described in Section 12.


8. LINKS TO OTHER SITES

The Services may contain links to other sites that we do not operate, including the app stores and the advertising provider's privacy pages. If you follow such a link, you will be directed to that third party's site. We strongly advise you to review the privacy terms of every site you visit. We have no control over, and assume no responsibility for, the content, privacy terms or practices of any third-party site or service.


9. YOUR RIGHTS AND OPTIONS — EUROPEAN ECONOMIC AREA AND UNITED KINGDOM

Under the General Data Protection Regulation (GDPR) and the UK GDPR, you have certain rights regarding your personal data:

  • Right to access — to request access to the personal data we hold about you.
  • Right to rectification — to request that we correct inaccuracies in your personal data.
  • Right to erasure — to request that we delete your personal data in certain situations.
  • Right to restrict processing — to require us to restrict processing of your personal data in certain circumstances, for example if you contest the accuracy of the data.
  • Right to data portability — to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller.
  • Right to object — to object to processing in certain circumstances, including processing carried out for direct marketing or on the basis of our legitimate interests.
  • Right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. We do not carry out such processing.
  • Right to withdraw consent at any time, where processing is based on your consent.

To exercise any of these rights, see Section 12 and follow the steps there. Please note that exercising some of these rights may affect our ability to provide the Services — for instance, we cannot restore local game progress we never held. We will tell you about any such impact when you make your request.

You may also lodge a complaint with your local data protection authority, or with the supervisory authority in the EEA or UK where you live or work.


10. NOTICE AND RIGHTS FOR USERS IN INDIA

This section applies if you are a user in India, and supplements the rest of this policy. We process your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it.

Consent and notice

We process your personal data on the basis of your consent, given by a clear affirmative action, or on another lawful basis permitted by the DPDP Act. Before or at the time of seeking consent, we provide this notice describing the personal data we seek to process and the purpose for which it is processed, and how you may exercise your rights and make a complaint to the Data Protection Board of India.

You may withdraw your consent at any time. Withdrawing consent for personalised advertising means you will receive non-personalised advertising instead, and the game remains fully playable. To withdraw, follow the steps in Section 12.

Your rights as a Data Principal

  • Right to access — to obtain a summary of the personal data we process about you, and information about the identity of any other Data Fiduciary or Data Processor with whom we have shared it, and the purpose of that sharing.
  • Right to correction and erasure — to request correction of inaccurate or misleading personal data, completion of incomplete data, and erasure of personal data that is no longer necessary for the purpose for which it was processed.
  • Right to grievance redressal — to have your grievance redressed promptly. See the grievance contact below.
  • Right to nominate — to nominate another individual who may exercise your rights in the event of your death or incapacity.

Children in India

A "child" under the DPDP Act is an individual who has not completed 18 years of age. We do not process the personal data of a child in a manner that is likely to cause a detrimental effect on the well-being of the child. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children, and we therefore serve contextual advertising only to users who have not confirmed that they are 18 or older. We do not knowingly seek consent from, or process the personal data of, a child in India without the verifiable consent of a parent or lawful guardian.

Grievance contact

Grievances and requests relating to your personal data may be sent to:

creatives@noctistidestudios.com Noctis Tide Studios Private Limited, 106-C, Sidco Industrial Estate, Ambattur, Chennai 600098, Tamil Nadu, India.

You may also contact the Data Protection Board of India if you are not satisfied with our response.


11. SUPPLEMENTAL PRIVACY NOTICE AND RIGHTS FOR USA RESIDENTS

Certain U.S. states — including California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia — give residents rights including the right to know what categories of personal information are collected about them, and how it is used, disclosed, and sold or shared.

Categories collected and purposes

The categories of personal information we collect, the sources, and the business purposes are described in Sections 1, 2, 3 and 5 of this policy:

Category Collected Disclosed to Purpose
Identifiers (advertising ID, IP address) Yes, by the ad SDK — for personalisation only for users 18+ Advertising partner Advertising, fraud prevention
Commercial information (purchase history) Yes Platform store Delivering purchases
Device and internet information Yes, by the ad SDK Advertising partner Advertising, compatibility
Usage / gameplay data Stored on your device only; not transmitted to us — Game functionality
Age confirmation (18+ yes/no) Stored on your device only; not transmitted to us — Determining ad type
Geolocation (precise) No — —
Sensitive personal information No — —

We do not sell personal information, and we do not knowingly collect, sell or share the personal information of consumers under 16 years of age. We do not serve personalised advertising to users under 18.

Your rights

Depending on your state of residence, you may exercise the following rights:

  • Right to Know and Access — to request that we disclose what personal information we collect, use and disclose; to confirm whether we process your data; and to request a copy of the specific information collected about you. Note that we do not hold a profile of you: identifiers are held by the advertising provider, and gameplay data is on your device.
  • Right to Delete — to request deletion of your personal information, subject to legal exceptions (security, legal compliance, completing a transaction).
  • Right to Correct — to request that we fix inaccurate personal information.
  • Right to Opt Out of Sale, Sharing and Targeted Advertising — to direct us not to "sell" your personal information or "share" it for cross-context behavioural advertising. You may also opt out of personalised advertising entirely by using the steps in Section 12.
  • Right to Data Portability — to receive your data in a portable, readily usable format.
  • Right to a List of Specific Third Parties — if you reside in Oregon, Delaware or Minnesota, you may request a list of the specific third parties to whom we have disclosed personal data. The complete list is in Appendix A.
  • Right to Appeal — if we decline your request, residents of all states listed above except California may appeal our decision.
  • Non-Discrimination — we will not discriminate against you for exercising your privacy rights.

Mandatory disclosures

  • Notice at Collection — see Sections 1, 3 and 5 of this policy.
  • No Sensitive Data — we do not collect or process "Sensitive Personal Information" as defined by U.S. state laws.
  • Retention — see Section 4.
  • No sale of data relating to minors — we do not have actual knowledge of selling or sharing the personal information of consumers under 16, and we do not serve personalised advertising to users under 18.
  • COPPA — Sushi Belt is directed to a general audience that includes children. We do not knowingly collect personal information from children under 13; we do not serve personalised or interest-based advertising to users under 18; and we do not condition participation in any activity on the disclosure of more information than is reasonably necessary. If you believe we have collected personal information from a child under 13, contact us at creatives@noctistidestudios.com and we will delete it.

We aim to respond to an access or deletion request within 45 days of receipt. If we need more time, we will tell you the reason and the extension period in writing. If we cannot satisfy your request, we will respond with our justification. If you wish to appeal, use the contact method in Section 14.


12. EXERCISE YOUR PRIVACY RIGHTS

Send any request to exercise your rights to creatives@noctistidestudios.com. Please include the right you wish to exercise and enough information for us to identify what your request relates to. We may ask for additional information in order to action your request. Requests are free of charge and will be addressed as early as possible and in any event within one month.

Because we do not operate user accounts or a server-side profile, the practical scope of a request is: (a) any support correspondence you have had with us; and (b) assisting you in exercising your rights directly with our advertising partner, whose details are in Appendix A.

If you are in the European Economic Area or the UK, you may also complain to your local data protection authority. If you are in India, you may contact the Data Protection Board of India (see Section 10).

Change your personalised advertising choice

You may change your choice at any time from the game's Privacy Settings menu, where you can withdraw consent to personalised advertising and change your age confirmation. Withdrawing consent means the advertising network will treat it as a withdrawal of consent to a personalised advertising experience and will serve contextual, non-personalised advertisements instead. The game remains fully playable.

Opt out of targeted advertising through your device

You can also limit access to your advertising identifier through your device settings. This means third parties will not be able to link your data across different apps and websites.

For iOS: 1. Open Settings on your iOS device. 2. Navigate down and select Privacy & Security. 3. Select Tracking. 4. Enable or disable "Allow Apps to Request to Track", and/or disable tracking for Sushi Belt in the list of apps.

If your iOS version shows Advertising instead of Tracking: enable "Limit Ad Tracking".

For Android: 1. Open Settings on your Android device. 2. Navigate down and select either Privacy or Google, depending on your device. 3. If you selected Privacy, choose Ads. If you selected Google, select Ads under the All Services section. 4. Tap Reset advertising ID or Delete advertising ID as appropriate.

Note: irrespective of your choice or your device settings, you may continue to see non-customised (contextual) advertising.


13. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may change from time to time, and we encourage you to review it periodically. Your continued use of the Services signifies your acceptance of changes to this Privacy Policy.

In some cases we may notify you of changes with a prominent notice in the Services — for example a pop-up — before the changes take effect, and we will update the "effective date" at the top of this page.


14. CONTACT US

If you have any questions about this Privacy Policy, or wish to exercise your privacy rights, contact us at:

creatives@noctistidestudios.com

or by post:

Noctis Tide Studios Private Limited 106-C, Sidco Industrial Estate Ambattur Chennai 600098 Tamil Nadu India


APPENDIX A — Advertising networks and their partners

Google AdMob (Google Ireland Limited / Google LLC) — our only advertising network. We do not use any additional advertising network or mediation partner.

Ad content rating: restricted to a child-appropriate rating. Interest-based advertising is disabled for every user who has not confirmed that they are 18 years of age or older.

Formats used in Sushi Belt: banner, interstitial, app-open, rewarded. Data processed: advertising identifier (AAID / IDFA), IP address, device and app information, ad interaction data, approximate location derived from IP address. Privacy policy: https://policies.google.com/privacy How Google uses information from sites or apps that use our services: https://policies.google.com/technologies/partner-sites Advertising technology partners: available in the consent dialogue at first launch.

Apple Inc. (App Store, StoreKit, Apple Search Ads) Privacy policy: https://www.apple.com/legal/privacy/


APPENDIX B — Service providers

Unity Technologies — game engine, in-app purchase library. Unity IAP communicates directly with Google Play and the Apple App Store on your device; where Unity Technologies processes data as part of a service we use, it does so as our service provider. Privacy policy: https://unity.com/legal/privacy-policy

Google LLC — Google Play services, Google Play Billing, and the Google Play distribution platform. Privacy policy: https://policies.google.com/privacy

Apple Inc. — App Store distribution and StoreKit billing. Privacy policy: https://www.apple.com/legal/privacy/

---