Privacy Policy

1. Scope and Data Controller

MillionHaul is provided and operated by Shenzhen Xunzhi Technology Co., Ltd. (“MillionHaul,” “we,” “us,” or “our”), a limited liability company registered in Shenzhen, China. For information processed specifically for operating the Game, Shenzhen Xunzhi Technology Co., Ltd. is the data controller or equivalent responsible party under applicable law.

TikTok separately processes information under its own privacy policy and may act as an independent controller. This Policy does not govern TikTok’s own data practices. You can review TikTok’s Privacy Policy for more information.

2. Information We Process

Legal-page hosting

These Terms and Privacy pages do not use first-party analytics, advertising cookies, or contact forms. They are hosted by Vercel, which may process basic request information such as IP address, user agent, requested URL, and security logs to deliver and protect the pages.

3. Device Features and Permissions

• Motion input: if you use a shake interaction, accelerometer readings are used temporarily during the active game session to recognize the gesture. We do not use those raw readings to track your physical activity or location.
• Vibration: the Game may activate device vibration to provide gameplay feedback. Vibration is an output and does not itself collect information.
• Photos or storage: if you choose to save a generated share image, the Game may ask for permission to write that image to your device. The Game does not need to read your photo library for this feature.

The current core gameplay does not require access to your contacts, microphone, camera, or precise geolocation. If a future feature needs additional permission, we will request it through TikTok or your device and update this Policy when required.

4. How We Use Information

We process information to:

• operate the Game, authenticate sessions, and maintain local or cloud-synchronized progress;
• deliver gameplay, optional rewarded ads, sharing features, and requested support;
• understand feature use, balance the game economy, and improve usability and performance;
• diagnose crashes, errors, failed saves, and network problems;
• protect the Game, players, and services against cheating, abuse, fraud, and security threats;
• comply with legal obligations, enforce our Terms of Service, and resolve disputes; and
• create aggregated or de-identified statistics that no longer identify an individual.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on:

• Contract: to provide the Game and save progress under our Terms;
• Legitimate interests: to secure, maintain, analyze, and improve the Game, balanced against your rights;
• Consent: for permissions, personalized advertising, or similar processing where consent is legally required; and
• Legal obligation: to respond to lawful requests and meet regulatory, tax, accounting, or safety requirements.

You may withdraw consent through the available TikTok, device, or game controls. Withdrawal does not affect processing already carried out lawfully.

6. How We Share Information

We may disclose information only as reasonably necessary to:

• TikTok: to run the Game within TikTok, authenticate access, deliver platform capabilities, and meet platform safety or reporting requirements;
• Service providers: cloud hosting, database, content delivery, analytics, diagnostics, security, customer support, and legal-page hosting providers acting on our instructions;
• Advertising providers: to request, display, measure, and reward advertisements, subject to consent and regional requirements;
• Authorities or affected parties: when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, and service integrity; or
• A successor: in connection with a merger, acquisition, reorganization, financing, or transfer of the Game, subject to appropriate safeguards and notice where required.

We do not publish your game save or sell your personal information for money. If applicable law treats certain personalized-advertising disclosures as a “sale,” “sharing,” or targeted advertising, you may use the consent or opt-out controls provided through TikTok, your device, or the Game, or contact us.

7. Advertising

Optional rewarded ads may be made available through TikTok or its advertising partners. Those providers may process device or advertising identifiers, IP address, approximate location derived from IP, ad interactions, and consent signals under their own policies. Whether ads are personalized depends on your region, age, account settings, and choices. You can decline an optional rewarded ad, although you will not receive the associated in-game reward.

8. Data Retention

We retain information only for as long as reasonably necessary for the purposes described above:

• cloud game-save data is generally retained while you actively use the Game and for up to 24 months after the last recorded activity;
• pseudonymous analytics and diagnostic events are generally retained for up to 24 months;
• local game data remains on your device until the TikTok client, device settings, or the Game clears it;
• support and privacy-request records are generally retained for up to 24 months after the request is closed; and
• security, dispute, or legally required records may be kept longer when reasonably necessary.

At the end of the relevant period, information is deleted or de-identified, subject to backup cycles and legal requirements. You may request deletion sooner as described below. Deleting cloud data does not automatically remove local data still stored on a device, and clearing local data does not automatically delete cloud records.

9. International Data Transfers

TikTok, MillionHaul, and service providers may process information in countries other than the one where you live. Privacy laws in those countries may differ. Where required, we use recognized safeguards for international transfers, such as contractual protections, adequacy decisions, or another lawful transfer mechanism.

10. Data Security

We use reasonable technical and organizational measures intended to protect information, including access controls, pseudonymous analytics identifiers, validation of data sent to servers, and restricted administrative access. No system is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights and Choices

Depending on your location, you may have the right to request access, correction, deletion, restriction, portability, or an explanation of information processing; object to certain processing; withdraw consent; opt out of targeted advertising or legally defined sale/sharing; and appeal a denied request. You may also complain to your local data-protection authority.

To make a request, email xflare@yeah.net with the subject “MillionHaul Data Request.” Describe the right you wish to exercise and provide enough information for us to locate the relevant game account. Do not send your TikTok password or government identification unless we specifically explain why verification is legally necessary.

We may need to verify that you control the relevant account. We will respond within the period required by applicable law. Authorized agents may submit requests where legally permitted, subject to verification of their authority. We will not discriminate against you for exercising a privacy right.

12. Children’s Privacy

The Game is not directed to children below the minimum age required to use TikTok in their country or region. We do not knowingly request personal information directly from such children. If you believe a child has provided information contrary to applicable requirements, contact us so we can investigate and delete it where required. TikTok may apply additional age-based safeguards to accounts and advertising.

13. Changes to this Policy

We may update this Policy as the Game, service providers, or legal requirements change. We will update the effective date and provide additional notice through the Game or TikTok when required. Material changes will apply prospectively unless law permits otherwise.