US State Privacy Notice
Effective Date: February 10, 2026
This US State Privacy Notice supplements the BizSim Game Studios Privacy Policy and applies to residents of US states with comprehensive privacy legislation, including California (California Consumer Privacy Act / California Privacy Rights Act, "CCPA/CPRA"), Virginia (Virginia Consumer Data Protection Act, "VCDPA"), Colorado (Colorado Privacy Act, "CPA"), Connecticut (Connecticut Data Privacy Act, "CTDPA"), Montana (Montana Consumer Data Privacy Act, "MCDPA"), Oregon (Oregon Consumer Privacy Act, "OCPA"), Texas (Texas Data Privacy and Security Act, "TDPSA"), and any other US state privacy laws that may become applicable.
This notice applies when BizSim Game Studios ("we," "us," or "our"), a company based in Istanbul, Turkey, collects personal information as defined by these laws from residents of the above states through our mobile games, websites, and related services (collectively, the "Services").
If you have questions about this notice or wish to exercise your privacy rights, contact us at privacy@bizsim.com.
In the preceding 12 months, we may have collected the following categories of personal information as defined under the CCPA and other applicable state privacy laws:
We collect, use, and disclose personal information for the following business and commercial purposes:
We may disclose personal information to the following categories of third parties for business purposes:
We may also disclose personal information when required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property.
We do not "sell" personal information in the traditional sense of exchanging it for monetary consideration. However, under the CCPA/CPRA and certain other state privacy laws, the sharing of identifiers (such as device identifiers and advertising IDs) and internet activity data with advertising partners for targeted advertising purposes may constitute a "sale" or "sharing" of personal information.
Specifically, we may share the following categories of personal information with advertising partners in ways that could be considered a "sale" or "sharing" under applicable law:
We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
Your Right to Opt Out: You have the right to opt out of the sale or sharing of your personal information. To exercise this right, email privacy@bizsim.com or use device-level privacy controls as described in Section 10 below.
We do not use or disclose sensitive personal information for purposes beyond what is necessary to provide the Services, and we do not use sensitive personal information for profiling purposes.
Depending on your state of residence, you may have some or all of the following rights regarding your personal information:
We will not discriminate against you for exercising any of these rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised a privacy right.
To exercise any of your privacy rights, email us at privacy@bizsim.com. In your request, please specify which right you wish to exercise and provide sufficient detail about the scope of your request so that we can respond appropriately.
Response Time: We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 days of receiving your verifiable request. If we need additional time, we may extend the response period by an additional 45 days, and we will notify you of the extension and the reason for it.
Identity Verification: To protect your privacy and security, we may need to verify your identity before fulfilling your request. We may ask you to provide information that matches information we already have on file. If we cannot verify your identity, we may deny the request.
Frequency: You may make a verifiable consumer request for access or data portability up to twice within any 12-month period.
No Fee: We will not charge a fee for processing or responding to your verifiable consumer request unless the request is manifestly unfounded, excessive, or repetitive. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
If we deny your privacy request in whole or in part, you have the right to appeal our decision. To submit an appeal:
We will respond to your appeal within 60 days of receipt. Our response will include a written explanation of any action taken or not taken in response to your appeal, including an explanation of the reasons for the decision.
If you are still unsatisfied after the appeal process, you may have the right to contact your state attorney general to file a complaint. Contact information for relevant state attorneys general:
You may opt out of the sale or sharing of your personal information by contacting us at privacy@bizsim.com. We will process your opt-out request and use information provided in the request solely for the purpose of reviewing and complying with it.
You may also use the following device-level privacy controls to limit data sharing with advertising partners:
If you wish to opt back in to the sale or sharing of personal information at any time, you may contact us at privacy@bizsim.com.
We also honor Global Privacy Control (GPC) signals. If your browser or device sends a GPC signal, we will treat it as a valid opt-out of sale/sharing request for that browser or device.
You may designate an authorized agent to submit privacy requests on your behalf, in accordance with applicable law. To do so, provide written proof of your agent's permission to act on your behalf, such as a signed authorization letter or a valid power of attorney. We may also require you to verify your own identity directly with us.
Requests from authorized agents may be denied if adequate written proof of authorization is not provided or if the agent's identity cannot be verified.
We do not intentionally collect Sensitive Personal Information (SPI). Our Services are designed to function without requiring any sensitive personal information from you.
Specifically, we do not collect:
If you believe we have collected sensitive personal information, please contact us at privacy@bizsim.com.
We may use automated processes for the following purposes:
These automated processes do not produce decisions with legal or similarly significant effects on you. We do not use automated decision-making for employment, credit, insurance, housing, or other decisions that have a legal or similarly significant effect.
Under the CCPA/CPRA and other applicable state laws, you have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. If you believe any automated processing affects you in such a manner, contact us at privacy@bizsim.com.
We do not knowingly direct our Services to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete that information.
We do not sell or share the personal information of consumers we know to be under 16 years of age without affirmative authorization. For minors between 13 and 16 years of age, the minor must provide opt-in consent. For children under 13, a parent or guardian must provide opt-in consent.
In accordance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws, we do not serve targeted or behavioral advertising to users known to be under 13 years of age.
Parental Rights: Parents or legal guardians may request access to, review, or deletion of their child's personal information by contacting us at privacy@bizsim.com. We will verify the identity of the requesting parent or guardian before fulfilling the request.
We may offer programs that could be considered "financial incentives" under applicable privacy laws:
The value of these incentives is reasonably related to the value of the data provided. We estimate the value based on the expense related to offering the incentive and the revenue generated from the use of the data collected. You may withdraw from any financial incentive program at any time by ceasing participation.
We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our general retention periods are:
When personal information is no longer needed for any purpose and retention is not required by law, we will securely delete or de-identify it.
Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. It excludes de-identified or aggregated consumer information, publicly available information, health or medical information covered by HIPAA or the California Confidentiality of Medical Information Act, and information covered by specific sector privacy laws such as the Gramm-Leach-Bliley Act or the Fair Credit Reporting Act.
Information that cannot reasonably identify, relate to, describe, be capable of being associated with, or be linked, directly or indirectly, to a particular consumer, provided that a business maintaining such information has implemented technical safeguards, business processes, and contractual obligations that prohibit reidentification of the consumer.
Information that relates to a group or category of consumers, from which individual consumer identities have been removed, and that is not linked or reasonably linkable to any consumer or household, including via a device.
Includes personal information that reveals Social Security, driver's license, state identification card, or passport numbers; account log-in credentials with required security or access codes; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; contents of consumer's mail, email, or text messages (unless the business is the intended recipient); genetic data; biometric information processed for identification purposes; health information; and information concerning a consumer's sex life or sexual orientation.
Displaying advertisements to a consumer where the advertisement is selected based on personal data obtained or inferred from that consumer's activities over time and across nonaffiliated websites or online applications to predict such consumer's preferences or interests. Targeted advertising does not include: (a) advertisements based on activities within the controller's own websites or applications; (b) advertisements based on the context of a consumer's current search query or visit to a website; or (c) advertisements directed to a consumer in response to the consumer's request for information or feedback.
The following state-specific provisions supplement this notice:
California residents have all rights described in this notice under the California Consumer Privacy Act as amended by the California Privacy Rights Act. The California Attorney General and the California Privacy Protection Agency (CPPA) have enforcement authority. You may also submit complaints directly to the CPPA at cppa.ca.gov.
Virginia residents have the right to access, correct, delete, obtain a copy of, and opt out of the processing of personal data for targeted advertising, sale, or profiling. The Virginia Attorney General has enforcement authority.
Colorado residents have rights to access, correct, delete, obtain a portable copy of, and opt out of the processing of personal data for targeted advertising, sale, or profiling. The Colorado Attorney General has enforcement authority. We honor universal opt-out mechanisms as required by the CPA.
Connecticut residents have rights to access, correct, delete, obtain a portable copy of, and opt out of the processing of personal data for targeted advertising, sale, or profiling. The Connecticut Attorney General has enforcement authority.
The Montana Consumer Data Privacy Act has been effective since October 1, 2024. Montana residents have rights similar to those described above, including rights to access, correct, delete, and opt out of the sale of personal data and targeted advertising.
The Oregon Consumer Privacy Act has been effective since July 1, 2024. Oregon residents have rights to access, correct, delete, obtain a list of third parties to whom data has been disclosed, and opt out of the processing of personal data for targeted advertising, sale, or profiling.
The Texas Data Privacy and Security Act has been effective since July 1, 2024. Texas residents have rights to access, correct, delete, obtain a portable copy of, and opt out of the processing of personal data for targeted advertising, sale, or profiling. The Texas Attorney General has enforcement authority.
As additional US states enact comprehensive privacy legislation, we will extend the rights and protections described in this notice to residents of those states in accordance with applicable law. This may include but is not limited to Delaware, Iowa, Indiana, Tennessee, New Hampshire, New Jersey, Nebraska, Maryland, Minnesota, and Kentucky.