Privacy Policy — CartGamer

1. About the App and This Policy

This Privacy Policy explains what information is processed in connection with our mobile application CartGamer (the “App”), a retro game console emulator published by Hebei Tubo Technology Co., Ltd. The App lets you play game ROM files that you import yourself from your own backups on platforms such as NES, SNES, Genesis/Mega Drive, Game Boy, Game Boy Color, Game Boy Advance, Nintendo 64, PlayStation 1, Nintendo DS and arcade boards. The App contains no games and no ROM files, offers no game downloads, and does not require you to create an account.

We believe privacy is a fundamental right. The App asks for your consent before collecting any data; if you decline, no analytics or crash data is collected, and the App works exactly the same.

2. Information We Collect (Only With Your Consent)

On first launch, the App asks whether you allow anonymous diagnostics. If you decline, nothing is collected — no analytics and no crash reports. You can change this choice at any time in the App’s settings (see Section 9).

We collect only anonymous technical data to keep the App stable and to improve it. This data is not linked to your identity: it contains no name, email address, phone number, postal address, contacts, photos, precise location, or payment information, and we have no way to link it back to you.

• Install identifier. A random string generated on your device when you consent. It is not a device identifier and is not shared with advertisers. It lets us count installs and keep diagnostic sessions apart without knowing who you are.
• Environment data. App version, operating system type and version, and the app-store channel the App was installed from.
• Usage events. Anonymous events that help us understand how the App is used, such as: App launches and first launch, ROM import results (whether an import succeeded, and for which console type — never which game), the start/end and duration of game sessions, screen-casting sessions, gamepad connection events, and sanitized error reports (error type and the feature where it occurred).
• Crash reports. Technical diagnostics — such as device model, operating system version, and error logs — sent automatically when the App crashes, so we can fix bugs. These are processed through a third-party crash-monitoring service (see Section 5).

Error reports are automatically sanitized before being sent: file paths, file names, email-like strings and credentials are stripped, so the contents of your game files are never included.

3. Data That Stays on Your Device

The following data is stored only on your device and is never uploaded to us or anyone else:

• Game ROM files that you import;
• Save data and save states created while playing;
• Screenshots you take in the App (when you choose to save them, they are written to your photo library at your direction);
• App settings, including controller and display preferences.

Separately, the App may download game cover images from our content server to display in your library. Cover images are served through a content delivery network (CDN), so before downloading one, the App requests a time-limited access signature from our signing service and then appends that signature to the image URL. The signature request carries no install identifier, no account information, and nothing else that could identify you.

These cover requests contain only the image path and the access signature: they carry no user data and are not used to identify or track you. We do not enable access logging for the cover CDN or the signing service on Amazon Web Services (AWS), so the source IP address and the request content of these requests are not recorded. The access signature expires automatically.

4. How We Use Information

• To fix bugs and improve the stability and performance of the App;
• To understand how features are used, so we can make the App better;
• To ensure compatibility across the devices and operating systems our users play on.

We do not sell or rent any data, and we do not use data for advertising, marketing, or profiling. For users in the European Union, the legal basis for the processing described above is your consent (GDPR Art. 6(1)(a)), which you may withdraw at any time as described in Section 9.

5. Third-Party Services

Crash reporting. Crash reports are processed for us by Sentry (sentry.io, operated by Functional Software, Inc.), a third-party crash-monitoring service. Sentry receives only the anonymous technical diagnostics described in Section 2 — such as device model, operating system version, and error logs — and acts as our data processor. Sentry’s own handling of that data is governed by its privacy policy and terms of service.

Usage analytics. Usage events are collected and stored on our own infrastructure, as described in Section 2. They are not shared with any third party.

The App does not use third-party advertising networks, analytics SDKs beyond the above, or social login plugins, and we do not sell or rent any data. Like most software, the App also relies on infrastructure providers — such as app stores and cloud hosting — which operate under their own policies and provide their own technical safeguards.

6. Data Storage, Security & International Transfer

All network requests are made over encrypted connections (HTTPS/TLS). Usage analytics are stored on cloud servers operated by Amazon Web Services (United States region); crash reports are processed by Sentry in the United States. Neither is used to identify you, as described above.

Region-specific deployment. For the version of the App distributed in mainland China, all data collected by the App is stored on servers located within mainland China and is not transferred abroad; crash monitoring for that version uses a compliant setup hosted within mainland China, as disclosed in that version of the App.

Because the App collects no personal information, there is nothing that can identify you to protect or lose. We additionally apply reasonable technical and organizational measures to the data we process.

Where data is transferred internationally (for example from the EU/UK to the locations above), it is transferred only under appropriate safeguards, such as the European Commission’s standard contractual clauses.

7. Data Retention

Crash reports are retained for up to 90 days. Usage events are retained for up to 24 months. After that, data is deleted or irreversibly aggregated so it can no longer be traced to an install. You may also ask us to delete the data collected for your install earlier (see Section 10) — provide your install identifier from the App’s About page, and we will delete it.

8. Children’s Privacy

The App is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Your Choices & Consent

You are in control of data collection at every step:

• First launch. The App asks for your consent before collecting anything. If you decline, no analytics or crash data is collected.
• Settings toggle. You can turn data collection on or off at any time in the App’s settings. When you turn it off, no further data is collected or sent.
• Uninstall. Uninstalling the App stops all data collection and removes all locally stored data (game files, saves, screenshots and settings).

Turning off data collection does not affect any app feature — games, save data, and controller settings are stored locally and work exactly the same.

If you have any questions or requests regarding this policy or the data we process — including access, correction or deletion of the data collected for your install — contact us using the details below and we will respond within a reasonable time.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you through the App or our website. Material changes that affect how data is collected will be reflected in the App’s consent dialog as well.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Hebei Tubo Technology Co., Ltd
Email: support@tubo-tech.com
Address: Dong Jian, 2/F, No. 73 Jiangjun Lu, Le’an Jiedao, Laoting Xian, Tangshan Shi, Hebei Sheng, China