play.maswahyu.eu.org
This website and the applications published on it are operated by Qawwa Technology Indonesia ("we", "us", "our"), based in Indonesia. For the purposes of the EU/UK General Data Protection Regulation, the Swiss Federal Act on Data Protection and comparable laws, we are the data controller for the limited processing described in this policy.
Contact: kangmaswahyu@gmail.com
Website: play.maswahyu.eu.org
We have not appointed a statutory Data Protection Officer, because our processing does not meet the thresholds that require one. Privacy questions and rights requests go to the address above and are handled by the publisher directly.
This policy covers:
play.maswahyu.eu.org itself;It does not cover third-party platforms. If you reach one of our apps through a game portal such as CrazyGames or Poki, that portal runs its own account, save-sync and advertising systems under its own privacy policy, and that policy governs what the portal collects. Please read it.
Some of our apps ask for a label — for example a player name or a farm name in a game, or a project title in a tool. These are free text you choose. They are stored only on your own device (see section 6) and are never transmitted to us. We operate no server that receives them. If you type your real name, it stays as local text in your browser's storage, and you can clear it at any time.
We do not ask for, and our apps provide no way to submit, your email address, phone number, postal address, payment details, contacts, photos, files or precise location.
We run no analytics, telemetry or crash reporting of our own. However, when advertising is enabled, Google and its advertising partners may collect the following when an ad is requested or shown:
This data is collected by Google and its partners under their own policies. We do not receive your advertising identifier or your individual ad history. We may receive aggregated reporting — total impressions, total revenue, country-level breakdowns — which does not identify you.
Where the GDPR, UK GDPR or Swiss FADP apply, we rely on the legal bases below.
| Purpose | What is involved | Legal basis |
|---|---|---|
| Running the app and keeping your progress | Local labels and app state stored on your device | Performance of a contract / legitimate interest in providing the app you asked for |
| Showing non-personalised ads | IP address, device type, coarse location; no profiling | Legitimate interest in funding free apps; consent where required |
| Showing personalised ads | Advertising identifier, ad interaction data, inferred interests | Consent (Art. 6(1)(a) GDPR / UK GDPR) — required in the EEA, UK and Switzerland |
| Measuring ad performance | Aggregated impression and revenue reporting | Consent where it relies on storing or reading information on your device; otherwise legitimate interest |
| Fraud prevention and invalid-traffic detection | IP address, device signals, interaction patterns | Legitimate interest; legal obligation |
| Complying with law and enforcing our rights | Whatever is strictly necessary for the specific request | Legal obligation; legitimate interest |
We never use your information for automated decision-making that produces legal or similarly significant effects, and we do not build profiles for purposes unrelated to advertising.
Our apps are free and funded by advertising served through Google (Google AdMob, Google AdSense and/or Google Ad Manager). Google and the advertising partners it works with may use the information in section 3.2 to select and measure ads.
Depending on where you live, you can limit or disable personalised advertising by:
Opting out of personalised advertising does not remove ads — it makes them less relevant and typically lowers the revenue that keeps the apps free.
Some apps offer optional rewarded ads (for example, watching a short ad to restore energy or unlock a boost). These are always opt-in: nothing plays unless you tap the button. If you never tap it, no rewarded ad is requested.
Two different things are stored on your device, and they behave differently.
Our apps store your data in your browser's localStorage. It is not sent to us, and
the exact keys differ per app (typically a save file, a settings blob and an ad-usage counter).
Clearing your browser's site data for this origin deletes all of it.
There is no cloud backup. We operate no user database, so we cannot restore your progress. Clearing site data, using private browsing, switching device or browser, or a browser fault will erase it permanently. Keep your own device backed up if it matters to you.
When ads are served, Google and its partners may set cookies or read device identifiers to personalise ads, cap frequency, measure performance and detect fraud. These are controlled by those partners and are only used for personalised advertising where you have consented. Where consent is required, the consent message blocks those partners until you make a choice.
A current list of Google's advertising technology providers — with links to each one's own privacy policy — is published by Google at Google's ad technology providers page. Google's own practices are described in the Google Privacy & Terms and Google Business Data Responsibility pages.
Builds of our apps prepared for a game portal may load that portal's SDK (for example the CrazyGames SDK). When present, the SDK is used for save syncing and for the portal's own advertising. The portal is an independent controller for that processing; see the portal's privacy policy.
We do not sell your personal information. We share the limited data described above only with:
We do not share data with data brokers, and we do not permit third parties to use data we control for their own independent marketing.
EEA, UK and Switzerland. Google requires publishers to use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework when serving personalised ads in these regions. We use Google's own Privacy & messaging consent solution (operated by Google LLC, CMP ID 300), which is certified for this purpose.
You are asked for your choice before personalised advertising is enabled. All purposes default to "do not consent" until you actively choose otherwise, and refusing is as easy as accepting.
You can change your mind at any time, with no penalty and without losing access to any app:
That button reopens the consent message so you can review and change each purpose, or withdraw consent entirely. Withdrawing consent stops future personalised advertising. It does not affect the lawfulness of processing that already happened before you withdrew.
If the button does not open a dialog — for example because no advertising is currently configured for your region — you can also clear this site's data in your browser settings, which removes all stored consent signals and local app data.
You have the right to:
Because we hold no server-side copy of your data, most access and erasure requests are satisfied simply by clearing your browser's site data. Where a request concerns advertising data held by Google, we will point you to Google's own controls and, where we can act, assist you.
If you are a resident of a state with a comprehensive privacy law — including California (CCPA/CPRA), Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia — you may have the right to:
Do Not Sell or Share My Personal Information. We do not sell personal information for money. However, when personalised advertising is active, the disclosure of identifiers to advertising partners can be treated as "sharing" for cross-context behavioural advertising, or as a "sale" under some state laws. To opt out, use the Privacy and cookie settings link and choose the opt-out option, or turn off personalised advertising as described in section 5.2. Your choice is signalled to advertising partners through the IAB Global Privacy Platform and Restricted Data Processing.
We honour opt-out preference signals, including the Global Privacy Control (GPC) browser signal, as a valid request to opt out of sale/sharing and targeted advertising where the law requires it (for example under the CPRA).
To exercise a right, email kangmaswahyu@gmail.com. We will respond within the timeframe required by your state (generally 45 days, extendable once). You may use an authorised agent, subject to verification. Because we hold almost no personal information ourselves, many requests will be resolved by directing you to the advertising partner's controls.
You may request confirmation of processing, access, correction, anonymisation, portability, deletion and information about sharing, and you may withdraw consent. Contact kangmaswahyu@gmail.com. You may also petition the ANPD.
You may request access to and correction of personal information, and withdraw consent to its use. Quebec residents may request that information be de-indexed or that a technological medium be provided. Contact us at the address in section 1. You may also complain to the Office of the Privacy Commissioner of Canada or the Quebec Commission d'accès à l'information.
Sebagai subjek data, Anda berhak memperoleh informasi tentang identitas kami, dasar kepentingan hukum, dan tujuan pemrosesan data pribadi Anda; mengakses dan memperoleh salinan data pribadi Anda; meminta pembaruan atau perbaikan data yang tidak akurat; mengakhiri pemrosesan serta menghapus data pribadi Anda; menarik kembali persetujuan; menolak pengambilan keputusan otomatis; dan mengajukan gugatan serta menerima ganti rugi atas pelanggaran. Permintaan dapat dikirim ke kangmaswahyu@gmail.com.
We apply the same core standards — transparency, a lawful basis for processing, and a way to object — to users everywhere. Depending on your location you may also have specific rights under Japan's APPI, South Korea's PIPA, India's DPDP Act, Australia's Privacy Act, Singapore's PDPA or China's PIPL. Contact us and we will handle your request in line with the applicable law.
We are based in Indonesia. When advertising is served, your data may be transferred to and processed in countries outside your own — in particular the United States, where Google and many advertising partners are established.
Where personal data protected by the GDPR, UK GDPR or Swiss FADP is transferred outside those territories, the transfer relies on appropriate safeguards, principally the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and the EU–US Data Privacy Framework where the recipient is certified. Google states that it relies on these mechanisms for its advertising services. Where a transfer relies on your consent (for example in the EEA, UK or Switzerland), you may withdraw it at any time as described in section 8.
This site is served over HTTPS with TLS. Because our apps keep your data locally and we operate no user database, there is no store of player accounts to breach. The main security consideration is the confidentiality of your own device: anyone with access to your browser profile can read your local app data. Keep your device locked and your browser profile protected.
No method of transmission or storage is completely secure. We cannot guarantee absolute security of data held by third-party advertising partners.
Our apps are family-friendly, but they are not directed to children under 13 (or under the applicable age of digital consent in your country, which may be up to 16 in parts of the EEA). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe a child has provided personal information — for example by typing their real name into a name field — note that this text stays on your own device and is not transmitted to us; you can remove it by clearing the site's data in the browser. If you believe a child's data has reached an advertising partner, contact us and we will help you exercise the available controls.
Where an app is distributed in a context directed to children, we do not serve personalised advertising in that build, and ad requests are tagged for child-directed treatment in line with Google Play's Families policy and COPPA.
"Do Not Track" is a browser setting that no common industry standard defines how to honour. We do honour the Global Privacy Control (GPC) signal as an opt-out of sale/sharing and targeted advertising where applicable law requires it. You can also use the consent controls in section 8 at any time.
We may update this policy to reflect changes in our apps, in the advertising we use, or in the law. When we do, we will revise the "Last updated" date at the top. If the change is material — for example a new category of data or a new purpose — we will ask for your consent again where the law requires it, rather than relying on your previous choice.
Previous versions are available on request.
For any question, request or complaint about privacy: kangmaswahyu@gmail.com
We aim to acknowledge requests promptly and to respond within the period required by your local law (for example 30 days under the GDPR, 45 days under most US state laws).
If you are not satisfied with our response, you have the right to complain to your local supervisory authority — the ICO in the UK, the FDPIC in Switzerland, your EEA national authority, or the relevant authority in your state or country.