Privacy Policy

True or False: Fact Challenge

Effective date: August 18, 2026

This privacy policy applies to the True or False: Fact Challenge app for mobile devices, together with any related services operated by Alona Gora (collectively, the "Application"). Alona Gora is hereinafter referred to as the "Service Provider".

Data Controller information

What information does the Application obtain and how is it used?

The Application does not require an account or registration. The Service Provider does not ask you for your name, email address, postal address, or any other contact details in order to play, and does not collect or store such information on its own servers.

Your game progress, scores, and settings (such as the selected interface language) are stored locally on your device only. If you contact the Service Provider by email, the information you choose to include in your message is used solely to respond to your inquiry.

What information is collected automatically?

The Application itself does not automatically collect personal data for the Service Provider's own use. However, the third-party advertising service integrated into the Application (Google AdMob, described below) may automatically collect certain information from your device, including the type of mobile device you use, your device's advertising identifier (IDFA), the IP address of your device, your mobile operating system version, and information about your interaction with ads.

Advertising (Google AdMob)

The Application displays ads served by Google AdMob, an advertising service provided by Google. Advertising is how the Application is kept free to play. To serve, personalize, and measure ads, Google may collect and process:

• Device identifiers, including the Advertising Identifier (IDFA), where you have given permission;
• Ad interaction data, such as which ads were viewed or tapped;
• General technical information, such as device model, operating system version, IP address, and coarse (approximate) location derived from it.

This data is collected and processed by Google under its own privacy policy:

• Google Privacy Policy
• How Google uses information from AdMob

App Tracking Transparency (iOS)

On iOS, the Application asks for your permission before tracking, using Apple's App Tracking Transparency prompt. If you allow tracking, the Advertising Identifier may be used to deliver personalized ads. If you decline, the Application requests non-personalized ads instead. You can change this choice at any time on your device under Settings → Privacy & Security → Tracking.

Your advertising choices in the EEA and the UK

If you are located in the European Economic Area or the United Kingdom, you will be shown a consent form before personalized ads are served, in line with the GDPR. You can choose whether to consent to personalized advertising, and you can change or withdraw your choice at any time within the Application's consent options. If you do not consent, non-personalized ads are requested instead.

Legal basis for processing your personal data

Where the GDPR applies, processing relies on one or more lawful bases:

• Consent: for personalized advertising and tracking, where you have given explicit consent through the App Tracking Transparency prompt and/or the ad consent form. You may withdraw consent at any time without affecting processing that occurred before withdrawal.
• Legitimate interests: for serving non-personalized (contextual) ads, maintaining security, and preventing fraud and abuse, provided those interests are not overridden by your data protection rights and freedoms.
• Legal obligation: to comply with laws or lawful government requests.

Cookies and similar technologies

The Application's third-party SDKs may use device identifiers, SDK-based storage, and similar technologies to support ad delivery and measurement. Where required by law, consent is obtained before non-essential tracking technologies are used.

Location

The Application does not gather precise, real-time information about the location of your mobile device. Coarse (approximate) location may be inferred by the advertising service from your IP address for ad delivery purposes.

Automated decision-making and profiling

The Application does not make automated decisions producing legal or similarly significant effects concerning you. Ad personalization performed by Google, where you have consented to it, is limited to selecting which ads are shown.

Do third parties see and/or have access to information obtained by the Application?

The Service Provider may share information with third parties as described in this privacy statement, including the advertising partner set out in the Advertising section above. In addition, the Service Provider may disclose information:

• as required by law, such as to comply with a subpoena or similar legal process;
• when the Service Provider believes in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with trusted service providers who work on the Service Provider's behalf, do not have an independent use of the information disclosed to them, and have agreed to adhere to the rules set forth in this privacy statement.

Where the GDPR applies, the Service Provider relies on Data Processing Agreements (DPAs) or equivalent contractual terms with third-party service providers that process personal data, as required by Article 28 of the GDPR.

International data transfers

Third-party service providers, including Google, may transfer personal data outside the European Economic Area (EEA). Where such transfers occur, an appropriate transfer mechanism required by GDPR Chapter V is used, such as:

• adequacy decisions by the European Commission;
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• other safeguards or derogations recognized under GDPR Chapter V, including consent where legally permitted.

Countries outside the EEA may not provide the same level of data protection as the EEA. Where required by law, appropriate safeguards are applied.

What are my opt-out rights?

You can withdraw your tracking permission at any time in your device settings (Settings → Privacy & Security → Tracking) and change your ad consent choice within the Application where the consent form is available. You can stop all collection of information by uninstalling the Application. Uninstalling stops future collection, but it does not automatically delete information that has already been processed by third parties; for that data, please refer to Google's privacy policy and your Google ad settings.

Data retention and deletion

Because the Service Provider does not collect personal data on its own servers, there is generally nothing for the Service Provider to retain or delete. Locally stored game data is removed when you delete the Application.

• Email correspondence: retained for up to 12 months after the inquiry is resolved, unless longer retention is required by law.
• Data processed by Google (advertising): retained according to Google's own retention policies; see the links in the Advertising section.
• Aggregated and anonymized data: may be retained indefinitely, as it no longer identifies you.

To request deletion of any personal data held by the Service Provider (for example, email correspondence), or to exercise any of your rights, contact goragamestudio@gmail.com. The Service Provider will respond within the timeframes required by applicable law. Upon verification of your identity, your personal data will be deleted, except where retention is required for legal compliance.

How does the Application address children's privacy?

The Application is a general-audience trivia game and is not directed at children under 16 years of age, or a higher age of digital consent where established under applicable law. The Service Provider does not knowingly collect personally identifiable information from children and does not market the Application to them. In the event the Service Provider discovers that a child has provided personal information, it will be deleted promptly. If you are a parent or guardian and you are aware that your child has provided personal information, please contact the Service Provider at goragamestudio@gmail.com so that the necessary actions can be taken.

How is your information kept secure?

The Service Provider is committed to safeguarding the confidentiality of information. Physical, electronic, and procedural safeguards are applied to information the Service Provider processes and maintains. However, no security system can prevent all potential security breaches.

Data breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, the Service Provider will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by applicable law. Where the breach is likely to result in a high risk to your rights and freedoms, you will also be notified without undue delay.

What are your GDPR data protection rights?

Under the GDPR, you have the following rights:

• Right of access: you can request access to your personal data.
• Right to rectification: you can request correction of inaccurate data.
• Right to erasure: you can request deletion of your personal data (the "right to be forgotten").
• Right to restrict processing: you can request that the Data Controller limits how your data is used.
• Right to data portability: you can request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: you can object to processing based on legitimate interests, and you have an absolute right to object to direct marketing at any time.
• Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority: EU Data Protection Authorities. If you are located in the United Kingdom, you may contact the Information Commissioner's Office.

What are your California privacy rights (CCPA/CPRA)?

If you are a resident of California, the CCPA and CPRA provide you with additional rights regarding your personal information:

• Right to know what categories and specific pieces of personal information have been collected;
• Right to delete personal information, subject to certain exceptions;
• Right to correct inaccurate personal information;
• Right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising — you can do this by declining tracking in the App Tracking Transparency prompt and in your device settings;
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, contact goragamestudio@gmail.com. Your request will be verified and answered within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

How do you give your consent?

Where processing is based on consent, you provide that consent by affirmatively opting in — for example, by allowing tracking in the App Tracking Transparency prompt or accepting personalized ads in the consent form. You may withdraw consent at any time without affecting processing carried out before withdrawal.

Changes to this Privacy Policy

The Service Provider may update this Privacy Policy from time to time. Material changes will be announced by posting the updated Privacy Policy on this page with a new effective date. Previous versions are available upon request.

Contact & support

If you have any questions about privacy, this policy, or the Application itself — including bug reports and support requests — please contact the Service Provider at goragamestudio@gmail.com. The Service Provider will respond within one month of receiving a rights request, extendable by up to two months where necessary due to complexity or volume, as permitted by applicable law.