SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
• Do we process any sensitive personal information? We do not process sensitive personal information. Account passwords are never stored in plain text and are hashed using Argon2id.
• Do we collect any information from third parties? When you choose to log in, link an account, or make a purchase through a third-party service (such as Discord, Patreon, Steam, Apple, Google, or our payment processors), we receive profile, authentication, and transaction/entitlement information from those providers. Learn more about third-party logins and payment data.
• How do we process your information? We process your information to provide, improve, and administer our Services, synchronize cloud saves, fulfill in-game purchases and subscriptions, send transactional emails and optional mobile push notifications, moderate community features, prevent fraud and bot abuse, and comply with law. Learn more about how we process your information.
• In what situations and with which parties do we share personal information? We share information in specific situations with service providers and subprocessors that help us operate our Services, process payments, handle payment disputes, deliver emails/notifications, and secure our platform. Learn more about when and with whom we share your personal information.
• How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Learn more about how we keep your information safe.
• What are your rights? Depending on where you are located geographically, applicable privacy law may provide you with certain rights regarding your personal information. Learn more about your privacy rights.
• How do you exercise your rights? The easiest way to exercise your rights is by emailing us at support@synergism.cc. We will consider and act upon any request in accordance with applicable data protection laws.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you voluntarily provide to us and data generated through your use of our game and account features.

We collect personal information that you voluntarily provide to us when you register on the Services, link a third-party account, upload cloud saves, make purchases, participate in community events or translations, or otherwise contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Account and Authentication Data: Your email address, password (which is cryptographically hashed using Argon2id and never stored in plain text), internal Synergism account ID, email verification and password reset records, and a randomly generated account UUID used to associate mobile in-app purchases with your account.
• Cloud Saves and Gameplay Data: Game save data that you upload to our Cloud Save service (including save file contents, save names, and upload timestamps), in-game upgrade inventories, PseudoCoin balances, consumable item usage (such as Happy Hour Bells, TimeSkips, and Lotus of Rejuvenation), promotional code redemption logs, in-game message board read statuses, and participation records in seasonal or multiplayer events (such as pixel placements on the Easter event canvas or progress/leaderboards in the Halloween event).
• Community Contributions: Localization strings and translation suggestions you submit through the Synergism Translator platform (associated with your account ID), as well as commands, giveaway entries, reminders, or moderation reports submitted through our official Discord bots.

Sensitive Information. We do not process sensitive personal information.

Payment and Transaction Data. If you choose to purchase PseudoCoins, subscriptions, or other digital items, your payment is processed by one of our third-party payment processors or platform billing providers. We do not directly collect or store full credit/debit card numbers or card security codes on our servers. Depending on the payment method you choose, payment data is handled and stored by:

• Stripe: https://stripe.com/privacy
• PayPal: https://www.paypal.com/webapps/mpp/ua/privacy-full
• Xsolla: https://xsolla.com/privacypolicy
• Patreon: https://privacy.patreon.com/policies
• Steam (Valve Corporation): https://store.steampowered.com/privacy_agreement/
• Apple App Store: https://www.apple.com/legal/privacy/
• Google Play Billing: https://policies.google.com/privacy
• Discord: https://discord.com/privacy

When you complete or modify a transaction, we receive and store transaction/order identifiers, customer/subscriber identifiers, subscription tier and renewal status, entitlement status, and logs of PseudoCoins granted to and spent by your account.

Third-Party Login Data. We provide you with the option to register and log in using third-party accounts, including Discord, Patreon, Steam, Apple, and Google. If you choose to register or link an account in this way, we collect profile and authentication information from the provider as described in "HOW DO WE HANDLE YOUR SOCIAL AND THIRD-PARTY LOGINS?" below.

Information automatically collected and security signals

• Bot Protection and Device Attestation: When you register, log in, or reset your password, we verify that requests originate from genuine devices and browsers using Cloudflare Turnstile (on the web), Apple App Attest (on iOS), Google Play Integrity API (on Android), or Steam Session Ticket verification (on Steam).
• IP Addresses and Timezone Metadata: Your connecting IP address is processed transiently for rate limiting and bot verification and is not persistently stored in our user account databases. For certain seasonal events, we read request timezone metadata provided by our edge network to determine local event windows.
• Mobile Push Notification Tokens: If you enable push notifications in our iOS or Android mobile app, we collect and store your device push token and platform type (ios or android) so we can deliver game notifications (such as Happy Hour Bell alerts) via Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM).
• Email Delivery Events: When we send transactional emails (such as email verification or password reset messages), our email infrastructure records bounce and spam-complaint notifications so we can stop sending emails to invalid or unreachable addresses.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation, authentication, and cross-platform linking. We process your information so you can create and log in to your account, link third-party accounts (Discord, Patreon, Steam, Apple, Google), and keep your account in working order across web, desktop, and mobile.
• To deliver and facilitate delivery of Services to the user. We process your information to store and synchronize cloud saves, credit PseudoCoins and subscription perks, sync Discord supporter roles, deliver in-game consumables and promotional codes, and run seasonal and multiplayer events.
• To send administrative and transactional communications. We process your email address to send account verification emails, password reset links, and important service updates, and we process mobile push tokens to deliver opt-in mobile notifications.
• To verify game saves, moderate community features, and prevent abuse. Uploaded cloud saves are automatically evaluated in an isolated headless browser environment to detect corrupted or tampered save data; flagged saves may be retained for administrator review. Community translation submissions and reported Discord messages may also be processed using automated AI models (via Cloudflare Workers AI) to grade translation quality and detect spam or abuse.
• To process payments and resolve payment disputes or chargebacks. We maintain records of PseudoCoin grants and in-game consumption. If a payment dispute, inquiry, or refund review is opened with a payment processor (such as Stripe, PayPal, or Google Play), we share relevant transaction metadata, delivery timestamps, and in-game PseudoCoin consumption logs with the processor as evidence of delivery and usage.
• To comply with our legal obligations and protect vital interests. We may process your information when necessary to comply with applicable laws, respond to lawful requests, or prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose (such as optional mobile push notifications or mobile advertising consent). You can withdraw your consent at any time. Learn more about withdrawing your consent.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services, maintaining your account and cloud saves, fulfilling purchases and subscriptions, or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we rely on legitimate interests to secure our Services against bots and unauthorized access, verify cloud saves against tampering, prevent payment fraud and contest chargebacks, moderate community spaces, and measure aggregate service performance.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal, tax, or accounting obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and with third-party service providers that help us operate our Services.

We may share your personal information with the following categories of third parties and in the following situations:

• Cloud Infrastructure, Storage, Security, and AI Providers: Our backend services, databases (D1 and Durable Objects), object storage (R2), bot protection (Turnstile), headless browser save verification, web analytics, and AI-assisted translation/moderation tools are hosted on and powered by Cloudflare, Inc.
• Payment Processors and Platform Billing Providers: When you purchase PseudoCoins or subscriptions, or when we process refunds, subscription renewals, or payment disputes/chargebacks, we share relevant account, order, and PseudoCoin grant/consumption data with the applicable payment provider (Stripe, PayPal, Xsolla, Patreon, Steam / Valve Corporation, Apple App Store, Google Play Billing, or Discord).
• Email Delivery Providers: We use Amazon Web Services (AWS Simple Email Service and Simple Notification Service) and Cloudflare Email Service to deliver account verification and password reset emails.
• Mobile Platform, Attestation, and Push Notification Providers: On mobile devices, we use Apple Inc. (Apple Push Notification service, App Attest, Sign in with Apple) and Google LLC (Firebase Cloud Messaging, Google Play Integrity API, Google Sign-In) to verify device integrity, authenticate accounts, and deliver push notifications.
• Mobile Advertising Partners: Our mobile applications may integrate Google AdMob to display advertisements.
• Public Open-Source Repository (Community Translators): If you submit translations through the Synergism Translator platform, approved translation strings are exported to our public GitHub repository (Pseudo-Corp/SynergismOfficial) and distributed with the game.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Requirements: We may disclose your information where required to do so by law or subpoena or if we reasonably believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Services.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use strictly necessary cookies for authentication and security, privacy-focused web analytics, and mobile advertising technologies in our mobile apps.

We use cookies and similar technologies on our Services as follows:

• Authentication and Session Cookies (Strictly Necessary): When you log in on https://synergism.cc, we set an HttpOnly; Secure session cookie named token (valid for up to one year) containing a signed JSON Web Token (JWT) to keep you authenticated across sessions. During third-party OAuth sign-in or account-linking flows, we also set short-lived state cookies (oauth_state, login_platform, login_state, and link_token, which expire after 15 minutes) to prevent cross-site request forgery (CSRF) and complete the sign-in flow.
• Web Analytics: We use Cloudflare Web Analytics (static.cloudflareinsights.com/beacon.min.js) to understand aggregate website traffic and performance. Cloudflare Web Analytics does not use client-side cookies or track individual users across websites.
• Mobile Advertising (Google AdMob): In our mobile applications, third-party advertising partners such as Google AdMob (authorized via our /app-ads.txt file) may use mobile advertising identifiers (such as Apple's IDFA or Google's Advertising ID) and similar technologies to serve and measure advertisements, subject to your device privacy settings and consent choices.

To the extent any mobile advertising technologies are deemed to be a "sale" or "sharing" (including targeted advertising) under applicable US state laws, you can restrict ad tracking in your mobile device's operating system settings (such as "Allow Apps to Request to Track" on iOS or "Opt out of Ads Personalization" / deleting your Advertising ID on Android) or exercise your rights as described in "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?" below.

6. HOW DO WE HANDLE YOUR SOCIAL AND THIRD-PARTY LOGINS?

In Short: If you choose to register, log in, or link your account using a third-party platform, we receive specific profile and entitlement information from that provider.

Our Services offer you the ability to register, log in, or link your Synergism account with third-party accounts. Depending on the provider you choose to connect, we receive and store the following information:

• Discord: Your Discord user ID, username, global display name, avatar/banner hashes, locale, email address, OAuth tokens, and your membership/role details within the official Synergism Discord server (via the email, identify, guilds, and guilds.members.read OAuth scopes) so we can authenticate your account and automatically synchronize supporter roles.
• Patreon: Your Patreon user ID, full name, email address, OAuth tokens, and pledge/membership status for the Synergism campaign (via the identity, identity[email], identity.memberships, and campaigns scopes) so we can verify and grant supporter benefits.
• Steam: Your Steam ID, owner Steam ID, persona name, profile URL, and avatar URL (verified via Steamworks Web API session tickets) so you can log in and make purchases from the Steam desktop version of Synergism.
• Apple and Google Sign-In: Your unique provider subject identifier and email address (from your signed Apple or Google identity token) to authenticate your account on mobile and web.

We do not request or collect your third-party friends lists or private messages. We use the information we receive only for the purposes described in this privacy notice. You can unlink third-party accounts through your account settings or by contacting us. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party account provider. We recommend that you review their privacy notices to understand how they collect, use, and share your personal information.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own, including the United States.

Our primary databases are located in the United States, and our edge services run on Cloudflare's global network. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us and by the third-party service providers with whom we share your personal information (see "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" above) in the United States and other countries.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, fraud/chargeback prevention, or other legal requirements). In general, we retain your account profile, linked accounts, and cloud saves for as long as you maintain an active account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in automated database backup archives, which are rotated regularly), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process, including Argon2id password hashing, encrypted HTTPS/TLS connections, RS256-signed authentication tokens, and strict access controls on administrative tools. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 13 years of age (or the applicable age of digital consent in your jurisdiction), and users under 18 may only use the Services with parental or guardian consent.

We do not knowingly collect, solicit data from, or market to children under 13 years of age (or under 16 in the EEA/UK where applicable without parental consent), nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 years of age, or that you are at least 13 years of age and have the permission and supervision of a parent or legal guardian who agrees to be bound by our Terms of Service. If we learn that personal information from a child under the applicable minimum age has been collected without required parental consent, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected improperly from a minor, please contact us at support@synergism.cc.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making that produces legal or similarly significant effects. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the contact details provided in "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or the UK Information Commissioner's Office (ICO). If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time by contacting us using the contact details provided in "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings to manage linked third-party accounts, cloud saves, or passwords; or
• Contact us at support@synergism.cc to request account termination and deletion.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain limited information in our files to prevent fraud or chargeback abuse, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.

Cookies and similar technologies: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove or reject our authentication cookies, you will not be able to stay logged in to your Synergism account on the web.

If you have questions or comments about your privacy rights, you may email us at support@synergism.cc.

12. CONTROLS FOR DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Because no uniform technology standard for recognizing and implementing DNT browser signals has been finalized, we do not currently respond to DNT browser signals.

On our websites, we do not sell or share personal information for cross-context behavioral advertising and use only cookie-free Cloudflare Web Analytics. In our mobile applications, you may limit ad tracking and personalized advertising at any time using your mobile operating system's built-in privacy controls (iOS App Tracking Transparency or Android Advertising ID controls).

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia (or another US state with applicable consumer privacy laws), you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

We may also collect other personal information outside of these categories through instances where you interact with us online or by email in the context of:

• Receiving help through our customer support channels;
• Participating in community events, giveaways, or localization efforts; and
• Facilitating the delivery of our Services and responding to your inquiries.

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A: As long as the user has an account with us (or until a mobile push token is unregistered).
• Category D: As long as the user has an account with us, plus any period required for tax, accounting, or payment dispute/chargeback records.
• Category F: Transiently for rate-limiting/security checks, or for as long as the user maintains an account with us for gameplay and cloud save records.

Sources of Personal Information

Learn more about the sources of personal information we collect in "WHAT INFORMATION DO WE COLLECT?" and "HOW DO WE HANDLE YOUR SOCIAL AND THIRD-PARTY LOGINS?"

How We Use and Share Personal Information

Learn about how we use your personal information in "HOW DO WE PROCESS YOUR INFORMATION?"

Will your information be shared with anyone else? We disclose personal information to our service providers and subprocessors (such as Cloudflare, AWS, and our payment processors) for operational business purposes pursuant to written agreements. Learn more in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"

We do not sell your personal information for monetary consideration. On our websites, we do not share personal information for cross-context behavioral advertising. In our mobile applications, third-party advertising SDKs (Google AdMob) may process device identifiers to serve ads subject to your device-level tracking permissions.

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California's privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

Depending upon the state where you live, you may also have the following rights:

• Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California's, Delaware's, and Maryland's privacy laws)
• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including Oregon's and Minnesota's privacy laws)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California's privacy law)

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing us at support@synergism.cc.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system (for example, by confirming control of the email address or linked third-party account associated with your Synergism account). We will only use personal information provided in your request to verify your identity or authority to make the request.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at support@synergism.cc. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact details provided in "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws and reflect changes to our Services.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this privacy notice. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by email at:

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at support@synergism.cc.