Regional Privacy Addendum
This Addendum has been reviewed to remain consistent with the updated legal pages and with the discontinuation of the former European ODR/RLL platform.
The PDF available below was generated from this version.
This Addendum supplements the Privacy Policy and the Cookie and Similar Technologies Policy. It explains additional rights and measures for users located in the European Union, Portugal, Brazil, the United States, the United Kingdom, Australia and New Zealand.
1. European Union, EEA and Portugal
If you are located in the European Union or the European Economic Area, the GDPR, national data protection laws and ePrivacy rules may apply. BAD DUCK STUDIO, LDA is established in Portugal. The Portuguese supervisory authority is the Portuguese Data Protection Authority (CNPD).
In Portugal, where processing is based on consent for the direct offer of information society services to children, minors aged 13 or over may consent. Below 13, consent must be given by the legal representative where required. Other EU/EEA countries may apply thresholds between 13 and 16 years.
Cookies, SDKs, device access/storage, advertising identifiers, personalised advertising, behavioural tracking and non-essential analytics require prior consent where required by law. Users must be able to reject non-essential technologies without blocking core gameplay, except where the technology is strictly necessary for the requested feature.
EU/EEA users may have rights of access, rectification, erasure, portability, restriction, objection, withdrawal of consent and complaint to the CNPD or another competent authority.
In Portugal, for consumer disputes, users may contact CNIACC - National Centre for Information and Arbitration of Consumer Conflicts (www.cniacc.pt) and the Electronic Complaints Book (www.livrodereclamacoes.pt).
The former European Online Dispute Resolution Platform (ODR/RLL) was discontinued by the European Commission on 20 July 2025. For cross-border disputes, consumers should use the competent alternative dispute resolution entities or the official consumer support channels available in their country.
2. Brazil
If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) may apply. The controller is BAD DUCK STUDIO, LDA. The channel for privacy requests is contact@badduckstudio.com. If a formal representative/data protection officer is appointed for Brazil, the details will be published.
We process data for legitimate purposes connected with the application: gameplay, accounts, cloud, rankings, purchases, security, fraud prevention, support, analytics and advertising. Legal bases may include contract performance, consent, legitimate interest, legal obligation, regular exercise of rights and protection of the user or third parties.
Data subjects in Brazil may request confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary/excessive/unlawful data, portability where regulated, information about sharing, withdrawal of consent, deletion of data processed with consent, review of automated decisions where applicable and petition to the ANPD.
The ECA Digital applies to digital products and services directed to, likely to be accessed by or capable of attracting children and adolescents, including electronic games and apps. Therefore, we aim to apply greater protection for children and adolescents in Brazil: data minimisation, transparency, age-appropriate settings, parental involvement where required, restrictions on personalised advertising for children and channels for safety or privacy concerns.
3. United States
Privacy law in the United States varies by state. Depending on the state, age, data and legal thresholds, the user may have rights to know, access, delete, correct, port data, opt out of targeted advertising, sale or sharing, limit sensitive data and appeal a decision.
We do not sell data for money. Some advertising/analytics practices may be considered sale, sharing or targeted advertising under certain state laws. Where required, we provide privacy choice mechanisms in the application, on the website or through another appropriate method.
The application may be suitable for children. If COPPA applies, we will provide notices, request verifiable parental consent where required, provide rights to parents and avoid targeted advertising to known children without the required consent.
4. United Kingdom
In the United Kingdom, UK GDPR and PECR may apply. We request consent before non-essential cookies/SDKs, personalised advertising, behavioural tracking, non-essential analytics and advertising measurement where required. Users may have rights of access, correction, erasure, restriction, objection, withdrawal of consent, portability and complaint to the ICO.
The Age Appropriate Design Code may apply to online services likely to be accessed by minors under 18. Where relevant, we aim to apply high privacy settings, data minimisation, profiling restrictions and age-appropriate transparency.
5. Australia
In Australia, the Privacy Act 1988 and Australian Privacy Principles may apply if we are covered or if we apply equivalent protections. We aim to provide transparent notice, collect only reasonably necessary information, protect information, allow access/correction and explain international disclosures.
Australia is developing a Children's Online Privacy Code for online services such as apps, games and websites likely to be accessed by children. We will review the final code when applicable and update practices if necessary.
6. New Zealand
In New Zealand, the Privacy Act 2020 and privacy principles may apply, including purpose, source, notice, indirect collection notice, fairness, security, access, correction, accuracy, retention, use, disclosure, international disclosure and unique identifiers.
WordWildWest may collect data directly and indirectly through stores, platforms, advertising SDKs, authentication and backend. Where indirect collection rules apply, we provide information about source, purpose and use in the Privacy Policy and Partners and SDKs Notice.
7. How to exercise rights
To exercise rights or ask questions, contact contact@badduckstudio.com or use the Support Request page. Include country/region, the right requested and enough information to locate the account or data. We may need to verify identity before responding.