KNITTENS PRIVACY POLICY

Effective Date: October 19, 2026

Last Updated: October 19, 2026

1. Introduction

Timecode DS Ltd. ("Timecode", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose and protect information when you use Knittens, our mobile game available on iOS and Android, or access our related websites and support services (collectively, the "Services").

It also explains your rights regarding your personal information and how you can contact us to exercise those rights.

Our Services are available internationally. We process personal information in accordance with applicable data protection legislation, including the European Union General Data Protection Regulation ("EU GDPR"), the United Kingdom General Data Protection Regulation ("UK GDPR"), and other applicable privacy laws.

Data Controller

The company responsible for the processing of personal information described in this Privacy Policy is:

Timecode DS Ltd.
77 Strovolos Ave.
Strovolos Center Office 301
2018 Strovolos, Nicosia, Cyprus

Email: support@timecode.com

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the details above or through the Help & Support section of Knittens.

2. Information We Collect

We collect and process information necessary to provide Knittens, maintain player progress, support game functionality, process purchases, improve our Services and provide advertising.

Some information is collected by us directly, while other information is processed by third-party services integrated into the game.

2.1 Player Identifiers and Game Profiles

When you first launch Knittens, the game generates a randomly created unique identifier (GUID) associated with your game profile.

This identifier is used to recognize your game profile and associate relevant information with it.

We may collect and store:

• Your unique Knittens player identifier.
• Your internal account identifier.
• Game progress, completed levels and achievements.
• Virtual currency balances and virtual items.
• Purchased and earned in-game content.
• Game settings and preferences.
• Participation in game events and activities.
• Your player name, cat name and styled cats, where these are shown to other players in leaderboards or voting events.
• Information necessary to restore or maintain your game progress.

Although your game identifier is randomly generated and does not directly identify you by name, it may constitute personal data because it can be associated with your gameplay activity and other information.

Player accounts and progress from Knittens editions distributed by other publishers are not imported into this version.

2.2 Gameplay and Analytics Information

We collect information about how players interact with Knittens to understand gameplay activity, maintain game functionality, investigate problems and improve the player experience.

This may include:

• Game sessions and gameplay events.
• Levels started and completed.
• Progression and achievement information.
• Interactions with game features and menus.
• Virtual item usage and in-game transactions.
• Participation in time-limited events.
• Technical performance information.
• Application errors, crashes and diagnostic information.

This information may be associated with your Knittens player identifier or identifiers used by our analytics providers.

2.3 Device and Technical Information

Depending on your device, operating system, application permissions and third-party SDK configurations, we and our technology providers may process:

• Device type and model.
• Operating system and version.
• Application version.
• Device language and regional settings.
• IP address.
• Approximate geographical location inferred from an IP address.
• Application instance identifiers.
• Advertising identifiers, where permitted.
• Technical identifiers used for analytics and attribution.
• Crash logs and performance diagnostics.
• Information about network connectivity and application performance.

Certain identifiers may be collected directly by our analytics, advertising or attribution providers without being stored on our own game servers.

Knittens does not require access to your precise GPS location for its normal gameplay functionality.

2.4 Optional Social Account Connections

Knittens allows you to play without connecting an external social or platform account.

You may choose to connect your game profile to supported authentication services, including:

• Sign in with Apple.
• Apple Game Center.
• Google Sign-In.
• Google Play Games Services.
• Facebook Login.

The availability of individual login methods depends on your device and operating system.

On supported devices, Apple Game Center or Google Play Games Services may also restore game progress automatically.

When you connect an external account, we may receive a provider-specific account identifier and other authentication information necessary to associate that account with your Knittens game profile.

This functionality helps players maintain or restore game progress when reinstalling Knittens or changing devices.

We do not receive your passwords for Apple, Google or Facebook accounts.

Your use of an external authentication service is also subject to that provider's own terms and privacy policy.

2.5 In-App Purchases

Knittens offers optional purchases of virtual currency, virtual items and other digital game content.

Payments are processed through the relevant app marketplace, including Apple App Store and Google Play.

We receive and store certain purchase-related information, which may include:

• Transaction and purchase identifiers.
• Purchased product identifiers.
• Purchase dates and transaction status.
• Purchase receipts and verification data.
• Information required to validate or restore purchases.
• Records associated with purchased in-game content.

We use this information to deliver purchases, maintain account entitlements, investigate transaction problems, prevent fraud and support customers.

We do not receive or store your full payment card number or payment card security code through ordinary purchases processed by Apple or Google.

2.6 Advertising Information

Knittens displays optional rewarded advertisements using third-party advertising technology.

Advertising services may process:

• Advertising identifiers, where available and permitted.
• IP addresses and device information.
• Advertising impressions and interactions.
• Advertising performance information.
• Application and gameplay events relevant to advertising.
• Information used for advertising attribution, measurement and fraud prevention.

Depending on the device, applicable permissions and advertising configuration, advertising may be personalized.

For example, advertising technology may use permitted identifiers and information about advertising interactions to measure advertising performance or determine which advertisements to display.

Our use of advertising and attribution technologies is further explained in Sections 4 and 5.

2.7 Customer Support and Communications

If you contact us for assistance, we may collect:

• Your email address.
• Your Knittens player identifier.
• The contents of your support request.
• Screenshots or files you choose to provide.
• Device and application information relevant to your request.
• Records of our correspondence with you.

We use this information to investigate problems, respond to inquiries, provide technical assistance and improve our support services.

Please avoid sending sensitive personal information unless it is necessary for your request.

3. How We Use Your Information and Our Legal Bases

We use personal information for the purposes described below.

Where the GDPR applies, our processing must be supported by an appropriate legal basis.

3.1 Providing and Operating Knittens

We process information to:

• Create and maintain game profiles.
• Save and synchronize game progress.
• Provide levels, rewards and game features.
• Maintain virtual currency and item balances.
• Process and restore purchases.
• Support optional account connections.
• Provide essential account functionality.

Legal basis: Performance of our contract with you, where processing is necessary to provide the Services.

3.2 Security and Fraud Prevention

We process relevant information to:

• Protect game accounts.
• Detect and investigate fraudulent transactions.
• Prevent unauthorized access.
• Identify abuse or technical vulnerabilities.
• Maintain the security and integrity of our systems.

Legal basis: Our legitimate interests in protecting the Services and their users, or compliance with applicable legal obligations.

3.3 Analytics and Service Improvement

We use gameplay, analytics and technical information to:

• Understand how Knittens is used.
• Identify errors and performance problems.
• Evaluate gameplay features.
• Improve game balancing and progression.
• Analyze game performance and reliability.
• Make decisions about future improvements.

Legal basis: Our legitimate interests in maintaining and improving the Services where this is permitted, or consent where required by applicable privacy or electronic communications law.

3.4 Advertising and Attribution

We and our advertising and attribution providers process relevant information to:

• Deliver rewarded advertisements.
• Measure advertising impressions and interactions.
• Understand the performance of advertising campaigns.
• Attribute application installations to advertising campaigns.
• Detect advertising fraud.
• Support advertising personalization where permitted.

Legal basis: Our legitimate interests in funding a free-to-play game through advertising. Where applicable law requires consent for personalized advertising, we rely on it only where that consent has been obtained.

3.5 Customer Support

We use information supplied through support inquiries to respond to requests and resolve problems.

Legal basis: Performance of our contract with you or our legitimate interests in providing customer support, depending on the nature of the request.

3.6 Legal Compliance

We may process and retain information where necessary to comply with legal obligations, respond to lawful requests or establish, exercise or defend legal claims.

Legal basis: Compliance with a legal obligation or legitimate interests, as applicable.

Where we rely on legitimate interests, we consider the nature of the processing and its impact on individuals' rights and freedoms.

4. Third-Party Technology Providers

Knittens integrates third-party software development kits ("SDKs") and services.

These providers help us operate the game, authenticate accounts, collect analytics, investigate crashes, deliver advertisements and measure advertising performance.

The principal services used in Knittens include:

Google Firebase Analytics

We use Firebase Analytics to measure application activity, understand gameplay behavior and analyze how players interact with the game.

Firebase may process application instance identifiers, gameplay events, technical information and identifiers associated with your game profile.

Google Firebase Crashlytics

We use Firebase Crashlytics to identify application crashes, diagnose technical problems and improve stability.

Crashlytics may process crash reports, device and software information, technical diagnostics and associated application identifiers.

Singular

We use Singular for mobile marketing attribution and measurement.

Singular may process installation attribution information, advertising and device identifiers where permitted, application events, advertising interactions and related technical information.

Unity Gaming Services Analytics

We use Unity Gaming Services Analytics to analyze game events, player activity and gameplay performance.

Information processed may include gameplay events and identifiers associated with your Knittens game profile.

Unity LevelPlay and ironSource Ads

We use Unity LevelPlay for advertising mediation and ironSource Ads for displaying rewarded advertisements.

These services may process device information, permitted advertising identifiers, advertising interactions and other information required for advertising delivery, measurement and fraud prevention.

Authentication Providers

We use supported Apple, Google and Facebook services to provide optional account authentication and game progress restoration.

These services may process information required to authenticate users and associate external accounts with Knittens profiles.

App Marketplaces

Apple and Google process in-app payments according to their own terms and privacy policies.

We receive relevant transaction information needed to deliver and verify purchases.

Provider Privacy Information

You can learn more about these providers through their privacy information:

• Google: https://policies.google.com/privacy
• Firebase: https://firebase.google.com/support/privacy
• Singular: https://www.singular.net/privacy-policy/
• Unity: https://unity.com/legal/privacy-policy
• Meta: https://www.facebook.com/privacy/policy/
• Apple: https://www.apple.com/legal/privacy/

Some providers process information on our behalf, while others may independently determine how certain information is processed.

Their responsibilities depend on the particular service and processing activity.

5. Advertising, Tracking and Your Choices

Knittens uses third-party advertising technology to display rewarded advertisements and measure advertising performance.

5.1 Advertising Identifiers

Mobile operating systems provide controls relating to advertising identifiers and tracking.

On iOS, Apple's App Tracking Transparency framework allows you to grant or refuse permission for tracking covered by that framework.

You can review applicable tracking permissions through your device settings.

On Android, available controls depend on the device and operating system version.

5.2 Your Advertising Choices

Advertising in Knittens may be personalized where permitted by applicable law and your device settings. You can limit personalized advertising through the advertising and tracking settings on your device, and you may object to processing based on our legitimate interests by contacting us (see Section 5.3).

Accepting the Terms of Use or acknowledging this Privacy Policy does not constitute consent to optional tracking.

5.3 Advertising and Data Protection Requests

Depending on your location, applicable privacy laws may provide rights concerning personalized advertising, tracking and the processing or disclosure of personal information.

You may contact us at support@timecode.com to submit a privacy request, including a request to object to applicable processing or withdraw consent where relevant.

We will assess and handle requests according to applicable law.

Device-level tracking controls do not necessarily prevent all forms of advertising or analytics data processing.

6. Sharing and Disclosure of Information

We may disclose personal information to third parties where necessary for the purposes explained in this Privacy Policy.

Recipients may include:

• Cloud hosting and infrastructure providers.
• Analytics and application diagnostics providers.
• Advertising mediation and advertising service providers.
• Marketing attribution and measurement providers.
• Authentication and account connection providers.
• App marketplaces and payment verification services.
• Customer support and technical service providers.
• Professional advisers, where necessary.
• A buyer, investor, publishing partner or successor, in connection with a merger, acquisition, financing, publishing arrangement or sale of all or part of our business, subject to appropriate confidentiality and data protection safeguards.
• Regulatory authorities, courts or law enforcement where legally required.

We may also disclose relevant information where reasonably necessary to protect our rights, investigate fraud or comply with legal obligations.

We use appropriate contractual and organizational safeguards where required by law.

Certain disclosures to advertising or attribution providers may constitute sharing, targeted advertising or other regulated activity under applicable privacy legislation, even where personal information is not exchanged for monetary payment.

Where applicable, users may have additional rights regarding those activities.

7. International Data Transfers

Knittens is available worldwide, and our technology providers may process information in countries other than the country in which you live.

This may include processing outside the European Economic Area or the United Kingdom.

Where applicable data protection laws restrict international transfers, we use appropriate transfer mechanisms and safeguards.

Depending on the destination and processing arrangement, these may include applicable adequacy decisions, Standard Contractual Clauses, or other legally recognized safeguards, together with supplementary measures where required.

You may contact us for further information about the safeguards applicable to your personal information.

8. Data Retention

We retain personal information according to the purposes for which it is processed, our operational requirements, applicable legal obligations and the retention practices of relevant service providers.

8.1 Knittens Game Data

Game profiles, gameplay progress, virtual item balances, purchase records and associated game data are generally retained on our servers for as long as the corresponding game account exists.

We may delete game profiles that have been inactive for at least two years, together with the associated personal information, as described in the Terms of Use.

8.2 Account Deletion

When a player deletes their Knittens account (see Section 9), server backups are retained for a limited period and are subsequently replaced or deleted according to our backup retention procedure.

8.3 Analytics and Third-Party Services

Personal information processed by Firebase, Singular, Unity and other integrated providers may be subject to their respective retention periods and configurations.

For example, certain analytics and attribution data may be retained for limited periods, while other aggregated or account-associated information may be retained for longer.

8.4 Support and Legal Records

Customer support correspondence and other information may be retained for as long as necessary to resolve requests, maintain appropriate records, comply with legal obligations or establish, exercise or defend legal claims.

Where information is no longer required, we take appropriate steps to delete or anonymize it.

9. Account Deletion and Personal Data Erasure

You can delete your Knittens game account using the account deletion functionality available within the application.

9.1 Deleting Your Knittens Account

When you initiate account deletion, the process removes associated game information from our active systems, including:

• Game profile and saved progress.
• Account-linked virtual items and balances.
• Linked external account references.
• Purchase history stored in our game systems.
• Associated gameplay and event data.

Account deletion may permanently remove access to game progress, virtual items and other account-linked content.

Certain information may be retained where legally required or otherwise permitted under applicable law.

9.2 Third-Party Data Deletion

Deleting your Knittens account does not automatically erase all historical information previously transmitted to third-party analytics, attribution or advertising providers.

Where information remains personal data processed on our behalf by service providers, we will arrange for its deletion when required by applicable law.

To request deletion of personal information associated with third-party services, contact:

support@timecode.com

Please provide sufficient information to help us locate the relevant records, such as your Knittens player identifier, where available.

We may need to verify your identity or association with the game profile before processing a request.

We will handle applicable erasure requests within the time limits required by relevant privacy legislation.

10. Your Privacy Rights

Depending on your location and applicable legislation, you may have the following rights:

Right of Access

You may request confirmation of whether we process your personal information and obtain access to eligible information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information, subject to applicable legal exceptions.

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your personal information.

Right to Object

You may have the right to object to processing based on legitimate interests, including applicable profiling or direct marketing activities.

Right to Data Portability

Where legally applicable, you may request certain personal information in a structured, commonly used and machine-readable format.

Right to Withdraw Consent

Where we rely on valid consent as the legal basis for processing, you have the right to withdraw that consent.

Withdrawal does not affect the lawfulness of processing carried out on the basis of valid consent before withdrawal.

Other Regional Rights

Depending on the privacy laws applicable to you, additional rights may include:

• Opting out of certain targeted advertising.
• Opting out of certain sales or sharing of personal information.
• Requesting information about categories of disclosed personal information.
• Requesting a review or appeal of certain privacy-rights decisions.

To exercise your rights, please contact:

support@timecode.com

We may request information reasonably necessary to verify your identity.

We respond to requests within the periods required by applicable law.

Where provided by law, you may also lodge a complaint with the relevant data protection authority.

For individuals in Cyprus, the relevant supervisory authority is the Office of the Commissioner for Personal Data Protection.

Individuals in other countries may have the right to complain to their competent local authority.

11. Children's Privacy

Knittens is primarily intended for an adult audience, although its game content may also be suitable for younger players.

The game is not marketed by us as a service specifically designed for children.

Its content age ratings may vary by platform and jurisdiction and do not necessarily indicate the intended target audience.

We recognize that children may access the Services and that applicable privacy laws may require additional protection of children's personal information.

If we learn that we have processed a child's personal information without a legally required consent or other lawful basis, we will take appropriate steps to delete or otherwise lawfully handle that information.

Parents or guardians who believe that a child's personal information has been processed inappropriately may contact us to request information or deletion.

Email: support@timecode.com

We will investigate such requests and take appropriate action in accordance with applicable law.

12. Website Privacy and Google Fonts

Our related website at timecode.com and associated Knittens webpages provide information about our games and services.

Google Fonts

Our website uses Google Fonts to display certain text and visual elements.

When you visit a webpage using these fonts, your browser may connect directly to Google's servers to download the font files.

As part of this technical request, Google may receive:

• Your IP address.
• Information ordinarily transmitted through your browser's HTTP requests.
• Technical information necessary to deliver the requested font files.

These requests are made directly between your browser and Google's infrastructure.

According to Google's published information, the Google Fonts API does not set or log cookies for the purpose of serving fonts.

You can find further information at:

https://developers.google.com/fonts/faq/privacy

We use these fonts for website presentation and readability.

Cookies

Our website does not currently use analytics or advertising cookies.

If we introduce technologies requiring consent under applicable law, we will implement appropriate notices and consent mechanisms.

13. Data Security

We take appropriate technical and organizational measures designed to protect personal information from unauthorized access, accidental loss, destruction, alteration or disclosure.

These measures may include:

• Access controls for internal systems.
• Appropriate authentication and authorization.
• Secure communication between applications and backend services.
• Restrictions on access to personal information.
• System monitoring and technical safeguards.
• Data backup and recovery procedures.

We periodically review our data handling and security practices.

However, no internet-based service or electronic storage system can be guaranteed to be completely secure.

14. Third-Party Websites and Services

Knittens may provide access to external websites or services, including app marketplaces, authentication providers and advertising content.

These services are operated by third parties and may be subject to their own terms and privacy policies.

We encourage you to review the privacy policies of third-party services before providing personal information to them.

This Privacy Policy does not govern information processed independently by third parties outside our responsibility or control.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to Knittens and its functionality.
• Changes to third-party technology providers.
• Changes in our information processing practices.
• Legal or regulatory developments.
• Security or operational requirements.

When we update this Privacy Policy, we will revise the Last Updated date.

The current version will be made available through our website and, where applicable, within the game.

If changes materially affect your rights or involve processing that requires additional notice or consent, we will take the steps required by applicable law.

16. Contact Us

If you have questions about this Privacy Policy, how we process your personal information, or wish to exercise your privacy rights, please contact us:

Timecode DS Ltd.

Email: support@timecode.com

You may also contact us through the Support section of Knittens.

We will respond to privacy-related requests in accordance with applicable data protection laws.