HARROWBOUND MOBILE APPLICATION PRIVACY POLICY

Effective Date: Aug 2, 2026

Last Updated: Aug 2, 2026

1. Scope and Overview

This Harrowbound Mobile Application Privacy Policy (the "Privacy Policy") describes how Prairie Digital Studios, LLC, doing business as Prairie Digital Studios ("Prairie Digital Studios," the "Company," "we," "us," or "our"), collects, uses, discloses, retains, and otherwise processes personal data in connection with the Harrowbound mobile application, related game servers, Accounts, support functions, websites or web pages expressly linked to this Privacy Policy, events, promotions, and related services that we operate (collectively, the "Services").

This Privacy Policy applies to users in the United States. Regional sections provide additional information and rights. Where mandatory local law provides stronger protections, that law applies.

This Privacy Policy does not govern third-party products, Marketplaces, websites, or services that operate under their own privacy policies, even when they are accessible through the Services.

The Harrowbound Terms of Service and End User License Agreement govern use of the Services and Application. This Privacy Policy is not intended to waive or limit privacy rights.

2. Company and Controller Information

Prairie Digital Studios, LLC is a Kansas limited liability company with its registered agent Northwest Registered Agent LLC, maintaining its address at 4601 E. Douglas Ave. STE 150, WICHITA, KS 67218.

Privacy & Support email: support@prairiedigitalstudios.com.

3. Summary of Key Practices

• Harrowbound is strictly limited to users who are at least 18.
• We may process Account, device, gameplay, diagnostic, transaction, advertising, anti-cheat, and support data.
• The Services may use Apple, Google, AdMob, PostHog, cloud-hosting providers, and other vendors identified.
• Account deletion, retention periods, and vendor deletion are identified below.
• U.S. state rights apply only where the relevant law covers the Company or processing activity.

4. Strictly 18+ Service

The Services are intended only for persons who are at least eighteen (18) years old. We do not knowingly permit persons under 18 to create an Account, access the Services, make Purchases, or submit personal data.

We may request age or eligibility information and may use reasonable age-assurance measures. If we learn that a person under 18 has used the Services or provided personal data, we may suspend or close the Account and delete or restrict the data, subject to legal, security, fraud-prevention, and recordkeeping requirements.

The Application may perform age checks on-device. We do not receive the date entered and may retain only a limited eligibility or attestation record.

A parent, guardian, or other person who believes that a minor has provided personal data should contact support@prairiedigitalstudios.com.

5. Personal Data We Collect and Sources

We may collect personal data from the following sources:

• Directly from you, including when you create or manage an Account, contact support, make a privacy request, participate in a promotion, or submit content.
• Automatically from the Application, device, servers, SDKs, logs, and gameplay interactions.
• From Apple, Google, authentication providers, Marketplaces, payment and receipt-validation services, advertising providers, analytics providers, and fraud-prevention providers.
• From other users, if social, report, friend, clan, invite, or User Content functions are offered.
• From public sources, law enforcement, security researchers, rights holders, or other parties when necessary to investigate misuse, claims, fraud, or security incidents.

6. Detailed Data Categories

We do not intend to collect highly sensitive data such as government identification numbers, financial-account credentials, health information, biometric identifiers used for identification, precise geolocation, racial or ethnic origin, religion, political opinions, union membership, genetic information, or information about sex life or sexual orientation unless expressly disclosed and lawfully required for a specific feature.

7. Purposes of Processing

8. RESERVED

RESERVED.

9. Advertising, Rewarded Ads, SDKs, and Tracking

Harrowbound may provide optional Rewarded Advertisements through Google AdMob or another approved provider. A stated in-game reward may be delivered after successful completion or verification of an advertisement.

Advertising and related SDKs may process device identifiers, advertising identifiers, IP address, coarse location, app and device information, consent signals, ad impressions, clicks, completion, fraud signals, and reward-delivery information.

Where required, we will request consent before using non-essential tracking or personalized advertising. When available, you may withdraw or change choices through the in-game setting menu device settings, Marketplace or operating-system settings.

Withdrawing consent may stop personalized advertising or non-essential analytics but may not eliminate all ads or processing necessary for security, fraud prevention, reward delivery, or basic service operation.

Cookies may be used on associated web pages. Mobile applications more commonly use SDKs, local storage, advertising identifiers, device identifiers, and similar technologies.

10. Purchases, Subscriptions, Season Passes, and Virtual Content

Apple, Google, or another Marketplace ordinarily processes payment credentials. We may receive purchase-validation receipts, transaction identifiers, product identifiers, purchase time, refund or chargeback status, country or currency, Subscription status, Season Pass status, and entitlement information.

We use transaction information to verify Purchases, prevent fraud, deliver Virtual Currency or Virtual Items, manage recurring benefits, restore eligible entitlements, resolve disputes, and maintain financial or legal records.

We do not intend to receive or store full payment-card numbers from Marketplace transactions.

Randomized Reward interactions may generate records concerning purchase or currency use, disclosed odds or reward pool, selected reward, duplicate treatment, guarantee or pity mechanics, and fraud or abuse signals.

11. Gameplay, Telemetry, Diagnostics, and Anti-Cheat

We may collect gameplay event telemetry, progress, sessions, combat action logs, game economy activity, settings, rewards, inventory, matchmaking or ranking events, and interactions with game features.

We may collect crash reports, diagnostic logs, error events, latency, server performance, app version, operating system, and device information to identify and correct errors and improve reliability.

We may process Account, device, transaction, gameplay, network, and integrity signals to prevent cheating, exploits, bots, tampering, unauthorized access, fraudulent Purchases, and violations of the Terms of Service.

12. User Content, Chat, Voice, and Moderation

If Harrowbound offers usernames, profiles, friend lists, clans, leaderboards, text chat, voice chat, uploads, custom content, or other social features, we may process the content, sender and recipient identifiers, timestamps, delivery status, reports, blocks, moderation actions, and related context.

Communications may be visible to intended recipients, group members, other users, or the public depending on the feature. Do not submit another person's personal data without lawful authority.

We may review, preserve, restrict, remove, or disclose content and related records as reasonably necessary to operate the feature, investigate reports, protect users, enforce rules, comply with law, or establish legal claims.

13. Customer Support, Security Reports, and Communications

When you contact us, we may collect your contact information, Account or player ID, device and technical details, issue description, communications, attachments, transaction information, and information needed to verify identity, recover an Account, investigate a security report, or respond to a privacy request.

We may send operational communications about Accounts, Purchases, Subscriptions, security, updates, policy changes, support, and service availability. These are not marketing messages.

We will send promotional email, push notifications, or other marketing only where permitted. You may opt out of marketing email through the unsubscribe link and control push notifications through device or in-app settings.

14. How We Disclose Personal Data

We may disclose personal data to the following categories of recipients:

• Service providers and processors that host infrastructure, provide analytics, authenticate users, validate Purchases, deliver communications, provide support, detect fraud or cheating, moderate content, or perform other services for us.
• Apple, Google, Marketplaces, advertising networks, and other independent or joint controllers where their own services and purposes apply.
• Other users or the public when you use social, profile, leaderboard, clan, chat, or User Content features.
• Professional advisers, auditors, insurers, banks, and financing parties subject to appropriate duties.
• Government authorities, regulators, courts, law enforcement, rights holders, or other parties where required or reasonably necessary for law, safety, security, fraud prevention, enforcement, or legal claims.
• A purchaser, successor, investor, lender, or transaction participant in connection with a proposed or completed corporate transaction.
• A recipient at your direction or with your consent.

We do not characterize every third party as a service provider. Apple, Google, and advertising providers may process certain data for their own purposes under their own terms and privacy policies.

15. Service Providers

16. Sale, Sharing, Targeted Advertising, and Profiling

Some U.S. state laws define “sale,” “sharing,” or “targeted advertising” broadly and may treat certain disclosures to advertising or analytics partners as covered activities even when no money changes hands.

Because we use Google AdMob to monetize our app and deliver personalized advertisements, Prairie Digital Studios sells personal data, shares personal data for cross-context behavioral advertising, and processes personal data for targeted advertising as defined under applicable U.S. state privacy laws. The data processed for these purposes typically includes device advertising identifiers, general location data, and app interaction metrics.

If an opt-out right applies, users may exercise it through the Marketplace or operating-system settings.

We recognize and process universally recognized opt-out preference signals, such as the Global Privacy Control (GPC), as required by applicable state laws for associated web traffic. For mobile application users, we respect your device-level privacy settings; you can limit targeted advertising at the operating system level by utilizing the "Opt out of Ads Personalization" setting on Android or disabling "Allow Apps to Request to Track" on iOS.

We may use analytics or advertising information to create segments or inferences about engagement, likely interests, or fraud risk. We do not intend to use profiling to make decisions that produce legal or similarly significant effects unless expressly disclosed.

17. International Transfers

We are based in the United States, and personal data may be processed in the United States and other countries where we or our providers operate. These countries may have data-protection laws different from those in your country.

18. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining security, preventing fraud and cheating, complying with law, resolving disputes, enforcing agreements, and maintaining appropriate records.

19. Security

We use administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, acquisition, loss, misuse, alteration, disclosure, or destruction. Measures may include access controls, authentication, encryption in transit, logging, monitoring, backups, vulnerability management, and vendor controls, as appropriate to risk.

No method of transmission, storage, or security is completely secure. We cannot guarantee absolute security.

If a personal-data breach occurs, we will investigate and provide notices to affected individuals, regulators, or others where required by applicable law.

20. Automated Decision-Making

We may use automated systems to assist with security, fraud detection, anti-cheat, advertising, analytics, moderation prioritization, or game operation.

Unless expressly disclosed, we do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects.

21. Your Choices and Controls

• Account information: Update available information through the in-game setting menu device settings, Marketplace, operating-system settings, or contact support.
• Advertising and tracking: When available use the in-game setting menu device settings, Marketplace or operating-system settings, device settings, consent interface, or applicable opt-out link.
• App tracking on Apple devices: Control tracking permission through iOS settings where applicable.
• Advertising identifiers: Reset or limit device advertising identifiers through operating-system settings where available.
• Marketing email: Use the unsubscribe link or contact us.
• Push notifications: Change permissions through device or in-app settings.
• Location: Control any location permission through device settings; coarse IP location may still be inferred where necessary.
• Uninstalling: Stops future Application-based collection from that device but does not delete an Account, cancel a Subscription, or delete data already collected.

22. Account and Data Deletion

You may request deletion of your Account through your account profile portal within the Application, through or by contacting support@prairiedigitalstudios.com, subject to identity verification.

Deleting the Application from your device does not delete your Account, cancel a Subscription, or necessarily delete data previously transmitted to us or our service providers.

Account deletion is generally permanent. It may result in loss of game progress, settings, Virtual Currency, Virtual Items, active Season Pass benefits, and access to other digital entitlements associated with the Account. Before deletion, you are responsible for cancelling recurring Subscriptions through the applicable Marketplace.

We will delete or de-identify personal data associated with a verified deletion request in accordance with our Privacy Policy, except where retention is permitted or required for security, fraud prevention, payment records, chargebacks, legal compliance, dispute resolution, enforcement, protection of users, backup-cycle completion, or other legitimate purposes.

23. General U.S. Privacy Rights

Depending on your state of residence, the nature of our activities, and applicable thresholds or exemptions, you may have rights to:

• confirm whether we process personal data and access or obtain a copy;
• correct inaccurate personal data;
• delete personal data, subject to exceptions;
• obtain data portability;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• limit certain uses or disclosures of sensitive personal information;
• appeal a denied request; and
• receive equal service and not be discriminated against for exercising rights.

These rights are not absolute and may not apply if the Company or processing activity is outside the scope of a particular law. Unless otherwise expressly provided herein or required by applicable law, we extend no additional privacy rights or ownership in any data other than those rights and interests prescribed by law. We will explain a denial where required.

24. California Privacy Notice

This section applies only to the extent the California Consumer Privacy Act, as amended (CCPA), applies to the Company and the relevant processing.

24.1 Categories Collected

During the preceding 12 months, we may have collected the following CCPA categories, as further described in Sections 5 and 6:

• Identifiers, such as email address, Account or player ID, IP address, device identifiers, and authentication identifiers.
• Customer-record information, such as contact information or Account details.
• Commercial information, such as Purchases, Subscriptions, Season Passes, Virtual Currency, Virtual Items, and transaction history.
• Internet or other electronic network activity, such as gameplay, interactions, diagnostics, advertising events, and server logs.
• Geolocation data, generally coarse location inferred from IP address;
• Audio, electronic, or similar information, if voice, uploads, or support attachments are offered.
• Inferences derived from gameplay, engagement, advertising, security, or fraud signals.
• Sensitive personal information, potentially including Account credentials or precise geolocation only if actually processed.

24.2 Sources, Purposes, and Recipients

Sources are described in Section 5, purposes in Sections 7 through 13, and recipient categories in Sections 14 and 15.

24.3 Sale and Sharing

We use Google AdMob and third-party advertising networks to monetize our app and deliver personalized advertisements, Prairie Digital Studios sells personal data, shares personal data for cross-context behavioral advertising, and processes personal data for targeted advertising as defined under applicable U.S. state privacy laws. The data processed for these purposes typically includes device advertising identifiers, general location data, and app interaction metrics.

If an opt-out right applies, users may exercise it through the Marketplace or operating-system settings.

We recognize and process universally recognized opt-out preference signals, such as the Global Privacy Control (GPC), as required by applicable state laws for associated web traffic. For mobile application users, we respect your device-level privacy settings; you can limit targeted advertising at the operating system level by utilizing the "Opt out of Ads Personalization" setting on Android or disabling "Allow Apps to Request to Track" on iOS.

We may use analytics or advertising information to create segments or inferences about engagement, likely interests, or fraud risk. We do not intend to use profiling to make decisions that produce legal or similarly significant effects unless expressly disclosed.

24.4 California Rights

Subject to applicability and exceptions, California residents may request to know or access, correct, delete, opt out of sale or sharing, limit qualifying use of sensitive personal information, and receive non-discriminatory treatment.

24.5 Request Methods

Submit a request through the in-game setting menu device settings, Marketplace or operating-system settings or by contacting us at support@prairiedigitalstudios.com.

25. EEA and UK Privacy Rights

RESERVED. SERVICES ARE NOT AVAILABLE IN EEA or UK.

26. Identity Verification, Authorized Agents, and Appeals

We may take reasonable steps to verify your identity and authority before fulfilling a request. Verification may depend on the request's sensitivity and may include Account authentication, confirmation through a registered email address, or additional information that we already maintain.

Do not send unnecessary identity documents. If additional verification is required, we will explain what is needed and use the information only for verification, security, fraud prevention, and compliance.

Where permitted, an authorized agent may submit a request. We may require proof of authorization and direct identity confirmation unless the agent has legally sufficient authority.

27. Business Transfers and Legal Disclosures

We may disclose or transfer personal data in connection with a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or transfer of the Services, subject to appropriate confidentiality, notice, and legal requirements.

We may preserve, access, or disclose personal data where we reasonably believe it is necessary to comply with law or legal process; respond to authorities; investigate fraud, cheating, security events, or violations; protect rights, property, safety, users, or the public; establish or defend legal claims; or enforce agreements.

We assess legal requests and may challenge or narrow requests where appropriate and legally permitted.

28. Third-Party Services and Links

The Services may link to or integrate with Apple, Google, advertisers, websites, social services, or other third parties. Those parties may collect personal data under their own privacy policies and may act as independent controllers.

We encourage you to review third-party privacy policies. We do not control their practices.

29. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, data practices, vendors, law, security, or platform requirements. We will post the revised policy with an updated date and provide additional notice of material changes where required or reasonably appropriate.

Where law requires consent to a new or materially different processing activity, we will request consent before that processing begins.

Prior versions will be available at https://www.prairiedigitalstudios.com/harrowbound/legal/privacy/versions.