BUDGE STUDIOS PRIVACY POLICY

Last update: June 25, 2026

At Budge Studios, we use the power of technology to thrill, educate, and entertain children around the world through creative and innovative apps. We know you care about your personal information and, if you are a parent or guardian, the privacy and security of your children's personal information. We designed this Privacy Policy to help you understand how we collect, use, process, and disclose personal information and how to exercise your privacy rights. If you'd like to read our full Privacy Policy, feel free to skip ahead to the Table of Contents.

The Privacy Policy outlines the types of information we collect from you directly, such as your contact information, and indirectly, such as information about your game play usage, and State or Province level location data. It also explains the type of information we obtain through cookies and other tracking technologies as well as other sources such as social networks. This Privacy Policy also explains how we use the information we've collected, including to provide you with the apps and optimize our products. It also contains information about the service providers with whom we share information for purposes such as completing purchases, data analytics, marketing and advertising, website hosting, and technical support.

We've also included detailed information on how we protect your children's personal information. We adhere to special protections for children's data such as those established by Quebec Law 25 (the Act to modernize legislative provisions as regards the protection of personal information), the U.S. Children's Online Privacy Protection Act (COPPA), and similar provisions in U.S. state laws, as well as other applicable foreign laws governing children's data. We do not use children's information for behavioral advertising. In summary, we take many precautions designed to protect the online privacy of children, and we encourage parents to take an active role in protecting their children's privacy by discussing this Privacy Policy with them.

PRIVACY AT A GLANCE (Summary for Parents)

Table of Contents

1. INTRODUCTION

2. ESRB PRIVACY CERTIFIED

3. WHAT INFORMATION DOES BUDGE STUDIOS COLLECT?

4. HOW DOES BUDGE STUDIOS USE THE INFORMATION COLLECTED?

5. HOW DOES BUDGE STUDIOS SHARE OR DISCLOSE INFORMATION?

6. HOW DOES BUDGE STUDIOS HANDLE CHILDREN'S INFORMATION?

7. WHAT SHOULD I KNOW ABOUT SOCIAL MEDIA AND TECHNOLOGY INTEGRATIONS?

8. WHAT ARE MY RIGHTS AND CHOICES?

9. HOW DOES BUDGE STUDIOS PROTECT THE SECURITY OF MY INFORMATION?

10. FOR HOW LONG DOES BUDGE STUDIOS STORE MY INFORMATION?

11. DOES BUDGE STUDIOS TRANSFER INFORMATION INTERNATIONALLY?

12. HOW DO I CONTACT BUDGE STUDIOS?

13. WHAT SHOULD I KNOW AS A DATA SUBJECT IN EUROPE?

14. WHAT SHOULD I KNOW AS A CALIFORNIA RESIDENT?

15. ADDITIONAL INFORMATION FOR RESIDENTS OF US STATES WITH CURRENTLY EFFECTIVE COMPREHENSIVE PRIVACY LAWS

16. CHANGES TO THIS PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy (the Privacy Policy) describes how Budge Studios Inc. (Budge Studios, we, our or us) collects, uses and discloses information about you as well as your rights and choices about that use and disclosure. It applies to your use of the Budgestudios.com and Budgestudios.ca websites (the Sites) and the mobile apps published by Budge Studios (the Apps) (in this Privacy Policy, the Sites, and Apps are referred to collectively as the Platforms).

By using the Platforms you acknowledge that you have read our Privacy Policy and understand our collection, use and disclosure practices, and other activities described therein. In case of discrepancies between the English version and any other versions of this Privacy Policy, the English version shall prevail.

For residents of California please see the section titled WHAT SHOULD I KNOW AS A CALIFORNIA RESIDENT?.

For details on how we store, retain, and dispose children's information, see the How Does Budge Studios Handle Children's Information? section below.

2. ESRB PRIVACY CERTIFIED

The ESRB certification seal shown on our Platforms confirms that Budge Studios is a valid licensee, and participating member, of the Entertainment Software Rating Board's Privacy Certified Program (ESRB Privacy Certified). To help protect your privacy, we have voluntarily undertaken this privacy initiative and have had all areas of our Platforms where this Privacy Policy is posted reviewed and certified by ESRB Privacy Certified to meet established online information collection, use, and disclosure practices. As a licensee of this program, we are subject to audits of our Platforms and other enforcement and accountability mechanisms administered independently by the ESRB. For more details about ESRB's certifications and seals see https://www.esrb.org/privacy-certified-seals/.

3. WHAT INFORMATION DOES BUDGE STUDIOS COLLECT?

A. Information You Provide

Websites: Our Sites are general audience and intended for parents and users over the age of digital consent. When you use our Sites, Budge Studios collects information that you provide, such as when you apply for a job or contact customer support. The categories of information we collect include the following:

• Contact identifiers - including your first and last name, and email address.
• Content - including content within any messages you send to us (such as questions to customer support).

Mobile apps: Our Apps are designed to inspire kids' imaginations and are primarily intended for children. Budge Studios focuses on data minimization, especially with respect to children. We do not affirmatively request information through our Apps, unless otherwise specified herein.

Please do not provide any information that we do not request.

B. Information Collected Automatically

For both our Sites and Apps, Budge Studios automatically collects information when you use the Platforms. We automatically collect the following categories of information:

• Device Identifiers - including your device's IP address
• Internet Activity - including information about your online activity such as feature usage, game play statistics and in-app purchases.
• Device Information - including information about your device hardware, software, browser, internet service provider, and regional and language settings.
• Non-Precise Location Data - location derived from an IP address or data that indicates a country or state / province. We do not collect precise location data such as your GPS location.

This information is automatically collected through cookies and other tracking technologies incorporated into our Platforms, as described below:

• Cookies - which are small data files stored on your device that act as a unique tag to identify your browser. Use of cookies makes web-surfing easier by performing certain functions such as saving language preferences and maintaining your sessions while you are on our Sites. The cookies used on our Sites also contain information used for site navigation and analytics.
• App Technologies - which are technologies included in our Apps that may collect information from your device. For example, our Apps include software development kids (SDKs), which are tools that provide certain functionality, such as allowing us to analyze the performance of our Apps or bring you advertising in our Apps.

The information we collect through tracking technologies within our Platforms is used for a variety of purposes, as further specified in this Privacy Policy.

Service Providers: We use tracking technologies provided by service providers working on our behalf. For example, we use analytics providers, such as Google Analytics and Amplitude to help us analyze your use of the Sites and Apps, compile statistical reports on the Site's and Apps' activity, and provide us with other services relating to Site and App activity and internet usage. This includes game play events, installation and settings properties, general geographic location (limited to country/region), revenue and subscription status and installation source. These analytics help us determine how apps are performing, if users are having difficulty interacting with the apps, and to understand long term trends in usage and revenue that help us improve the apps.

Third Party Advertisers: We work with third-party ad serving services, advertisers, and other technology services to serve advertisements in some of our Apps. We do not collect or use information for behavioral advertising to children. For details on how we handle children's information, see the How Does Budge Studios Handle Children's Information? section below.

For more information on the use of tracking technologies within our Platform and your rights and choices regarding tracking technologies, see the What Are My Rights and Choices? sections below.

C. Information from Other Sources

We also collect information from other sources. To the extent we combine sourced information with information we have collected through our Platforms, we will treat the combined information in accordance with the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the data. The categories of sources from which we collect information include:

• Vendors - which are companies we work with for the purposes of security and fraud prevention.
• Social media platforms - for users old enough to access third party social media platforms (such as Meta or X) under applicable law, we may collect information if you message us through our brand page or post about us.
• Information obtained from app storefronts - via Budge ID for subscription purchases and other game-related purchases.

For details on how we handle children's information, see the How Does Budge Studios Handle Children's Information? section below.

4. HOW DOES BUDGE STUDIOS USE THE INFORMATION COLLECTED?

Budge Studios collects and uses information for business purposes in accordance with the practices described in this Privacy Policy. Our purposes for collecting and using information include:

Managing and optimizing our Platforms, including:

• Enabling your use of our Platforms and access to certain areas of our Sites;
• Delivering non-personalized advertising and customized content to you;
• Monitoring and analyzing trends, usage, and activities;
• Diagnosing problems with and improving our Platforms.

Communicating with you and facilitating your requests, including:

• Responding to your comments, questions and requests, including providing customer support.

Protecting our Platforms and user rights, including:

• Preventing and addressing fraud, breach of policies or terms, and threats of harm.

For details on how we handle children's information, see the How Does Budge Studios Handle Children's Information? section below.

5. HOW DOES BUDGE STUDIOS DISCLOSE INFORMATION?

Budge Studios discloses the information we collect in accordance with the practices described in this Privacy Policy for the limited purposes described below. The types of entities to whom we disclose information include the following:

• Service Providers and Third Parties - We transfer information to service providers that perform services on our behalf or otherwise collect, use, disclose, store or process information on our behalf for the purposes described in this Privacy Policy (such as for completing purchases, data analytics, marketing and advertising, website hosting, and technical support). Some of these service providers may be located in a country other than where you reside, including in Canada or the United States, and your information may be stored or processed in those countries. We implement reasonable contractual measures, as required by applicable law, designed to ensure that our service providers provide appropriate protection for your information and use your information only for the purpose of providing the services to us. Your information may be subject to the legal requirements of the country in which it is located, including lawful requirements to disclose information to government authorities in those countries only. Our employees and those of our agents and service providers who require it in order to fulfill their job requirements will have access to your information.

To see what information we share with the entities with whom we work Click here to view our SDK Privacy Disclosure.

• Business Transactions - We reserve the right to transfer any information we have about you in connection with the sale or transfer of all or a portion of our business or assets or rights relating thereto.
• Legal Rights and Obligations - We may use and/or disclose your information to enforce legal rights and comply with the law, or to comply with an order from a government entity or other competent authority, or when we have reason to believe that a disclosure is necessary to address potential or actual injury or interference with our rights, property, operations, users or others who may be harmed or may suffer loss or damage. When necessary, we may also disclose information to law enforcement, or to the appropriate civil authorities.
• Consent - We may disclose information for additional purposes with your consent (or, to the extent required by law, consent from your parent or legal guardian).

Notwithstanding the above, Budge Studios may share or disclose information that does not identify you (including information that has been aggregated and de-identified) with other parties except as prohibited by applicable law. For more information on your rights and choices regarding how we share information about you, please see the What Are My Rights and Choices? section. For details on how we handle children's information, see the How Does Budge Studios Handle Children's Information? section below.

6. HOW DOES BUDGE STUDIOS HANDLE CHILDREN'S INFORMATION?

Budge Studios has developed its Platforms to be an enjoyable experience for users of all ages. Some parts of the Platforms are primarily intended for children, such as our Apps, while others are intended for parents, such as our Sites. Whenever we refer to children in this Privacy Policy, we mean children under the age of 13 (or, if outside the U.S., under the age of digital majority).

Budge Studios complies with the Children's Online Privacy Protection Act (COPPA), a U.S. law designed to protect the online privacy of children. If you are a data subject in Europe or a California resident and have a child under the age of 16, please see the What Should I Know as a Data Subject in Europe? and What Should I Know as a California Resident? sections.

Budge Studios is a member of the ESRB Privacy Certified Program. We have designed our Apps to be "Privacy-First," meaning we minimize data collection from children as required by COPPA. Because we do not collect personal information for advertising, marketing or profiling, we do not require or implement Verifiable Parental Consent (VPC) within our Apps.

If you have any questions or comments about how we treat children's information or our compliance with COPPA, please contact us as set out in the How Do I Contact Budge Studios? section. If you would like to learn more about COPPA and ESRB Privacy Certified's Kids Privacy Seal, which signals our compliance with COPPA, you can refer to the Children's Privacy section of the Federal Trade Commission's website.

A. We Minimize Children's Data Collection and Use

No Accounts: We do not require children to create accounts, provide names, or submit email addresses to play our games.

No Targeted Advertising: Our Apps may display advertisements, but these are strictly contextual. This means ads are selected based on the content of the App you are currently using, not on the individual user's behavior, history, or identity. We do not allow behavioral or targeted advertising to children. Some of our Apps incorporate advertising serving technology offered by our service providers (through SDKs), which enable advertising to be temporarily uploaded into the game and displayed while the user plays. The data collected for this purpose, often through "persistent identifiers," may be used for ad attribution and related internal operations purposes such as allowing our service providers to calculate the number of user views, cap the frequency of ads, and serve ads in a format that fits the device.

No Third Party Sharing or Server Uploads from Device Sensors: Features that use the device's camera or microphone (e.g., to blow out digital candles) are processed entirely on the local device. This data is never uploaded to our servers or shared with any third party. Budge Studios does not store or share any photos, videos, or audio files that contain children's images or voices through our Apps. All photos, videos, and audio files are stored locally on the device only. We do not prompt, encourage, or enable children to make such information publicly available online.

B. We Use Persistent Identifiers and Data Processors Solely to Support Our Internal Operations

No Persistent Identifiers for Targeted Advertising: We do not collect or store persistent identifiers (such as IDFA or unique device IDs) that track users across different websites or apps for targeted advertising or profiling.

We do not collect children's personal information for targeted advertising and profiling. We do use persistent identifiers to deliver the games and support the functioning of our Apps as follows:

• Budge ID: We use a randomly generated ID, known as the Budge ID, to collect data reporting analytics (e.g., which Budge applications a user has installed on their device) and to keep track of subscriptions and other game-related purchases.
• Appsflyer ID: For apps with the AppsFlyer SDK, we use a randomly generated ID to collect data about ad campaign effectiveness and revenue events tied to ad campaigns.
• Unity Installation ID: a randomly generated ID, used to prevent data duplication when collecting analytics data about the platform, operating system, general usage of the application.
• IP Address: The IP Address of your device is a necessary part of communicating with our servers and service providers. We also use your IP address to determine the country and region where you are located in order to provide appropriate advertising and Application configurations. Once your IP address is used for these purposes it is not stored or shared with any third party.

This is done through our service providers (who function as data processors such as analytics and crash reporting providers). They are contractually bound to:

• Use data only to provide services to Budge Studios (e.g., fixing bugs or measuring app performance).
• Never use the data for their own purposes, such as building profiles or targeted advertising.
• Adhere to strict data destruction schedules.

C. Security - We take reasonable measures to maintain the confidentiality, security, and integrity of the information collected through our Apps as explained in Section 9, below. This includes taking reasonable steps to release such information only to entities capable of maintaining confidentiality and security.

D. Retention: We retain children's personal information only as long as necessary to fulfill the purpose for which it was collected, i.e., our internal operations described above, and delete such information using reasonable measures to protect against its unauthorized access or use. We collect analytics data associated with the randomly generated IDs to support the internal operations of our Apps (such as crash reporting, performance analytics, revenue analytics). We retain analytics data for a period of 48 months to ensure our games run smoothly, resolve technical issues, improve your overall experience over time, and facilitate accurate financial reporting and long-term product lifecycle tracking and forecasting. After this 48-month period, the data is permanently deleted.

E. Parental Rights and Choices - We strive to be transparent with parents. If you are a parent or guardian and have questions about our collection and use of your child's personal information or would like to exercise your right to have your child's information deleted, please contact us as set out in the How Do I Contact Budge Studios? Section.

7. WHAT SHOULD I KNOW ABOUT THIRD PARTIES?

If you click on a link to a website, platform, or service not controlled by us, including on an advertisement or an ad provider link, you will leave the Budge Studios Platform you are visiting and go to the site you selected. Also, if you visit our brand page on a social media platform, you will also be interacting with that platform. These other entities may use tracking technologies to independently collect information about you and may solicit information from you. We encourage you to review the privacy policies of these other entities from whom you request services. If you visit a website, platform, or service that is linked to on a Budge Studios Platform, you should consult that site's privacy policy before providing any information on that site.

8. WHAT ARE MY RIGHTS AND CHOICES?

A. Reviewing, Correcting and Deleting Your Information.

If you wish to request access to certain information you have voluntarily submitted to Budge Studios or request that such information be corrected or deleted, or if you have any questions, comments, or concerns about this Privacy Policy or the information practices of Budge Studios, please contact Budge Studios as set out in the How Do I Contact Budge Studios? section. Your right to access, correct, or delete your information is subject to applicable legal restrictions. We may take reasonable steps to verify your identity before granting access or making corrections. Please note that we will retain and use information about you as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you believe we have collected and stored any personal information from children under 13 or the age of digital consent in other jurisdictions, parents or legal guardians can request access to review such information, have it deleted, or stop our further collection or use of such information. To make any of these requests (when applicable), please contact us as set out in the How Do I Contact Budge Studios? section below.

B. Tracking Technology Choices.

• Cookies - Most browsers accept cookies by default. If you would prefer not to receive cookies, you can alter the configuration of your browser to refuse or delete cookies. If you use multiple browsers on your device, you will need to instruct each browser separately. Your ability to limit cookies is subject to your browser settings and limitations. If you choose to have your browser refuse cookies, some areas of our Sites may not function properly.
• Do Not Track/Global Privacy Control - We do not respond to or honor "Do Not Track" (DNT) signals transmitted by web browsers; however, we do recognize the "Global Privacy Control" ("GPC"), which allows you to opt out of certain data processing. (You can learn more about the GPC at https://globalprivacycontrol.org/.) If our site detects a GPC signal from your device, we will interpret it as either a Do Not Sell request or a request to limit the sale or sharing of personal information for targeted advertising depending on the law applicable to your jurisdiction. Note that we do not engage in any behavioral advertising to children.
• App Technologies - You can stop all collection of information via an App by uninstalling the App.

C. Analytics.

Some service providers we work with offer their own opt-out tools for tracking technologies.

For Google Analytics, you can find their opt-out by visiting: https://tools.google.com/dlpage/gaoptout?hl=en-GB and downloading the Google Analytics Opt-Out Browser Add-on, or visiting Google Analytics for Display Advertising of the Google Display Network at https://www.google.com/settings/ads/onweb/.

Please note that any opt-outs only apply to the specific browser or device from which you opt-out. We are not responsible for the effectiveness of, or compliance with, any entity's opt-out options or programs or the accuracy of their statements regarding their practices or programs.

9. HOW DOES BUDGE STUDIOS PROTECT THE SECURITY OF MY INFORMATION?

Budge Studios is committed to informing, raising awareness and training its employees yearly on best practices for protecting personal information. We implement and maintain reasonable and appropriate administrative, physical, and technical security safeguards designed to help protect the security, integrity, accuracy and privacy of the information you have provided from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you.

10. FOR HOW LONG DOES BUDGE STUDIOS STORE MY INFORMATION?

Budge Studios adheres to a strict data minimization and "delete-by-default" philosophy. We do not retain personal information longer than is necessary to fulfill the specific purpose for which it was collected.

Analytics Data: To support the internal operations of our Apps (such as crash reporting, performance analytics, revenue analytics), we retain analytics data for a period of 48 months. After this 48-month period the data is permanently deleted.

App-Specific Customizations (e.g., Barbie Dream House): Data regarding user-created customizations (e.g., house layouts) is stored to enable features like "Visit a Friend." This specific data is purged from our servers if it has not been updated or accessed for 11 months.

Legal Requirements: We may retain certain records for longer periods only when strictly necessary to comply with mandatory financial audits, legal obligations, or to resolve active disputes.

When a retention period expires, we utilize secure deletion protocols to ensure that the data is unrecoverable, protecting against unauthorized access or use during the disposal process.

11. DOES BUDGE STUDIOS TRANSFER INFORMATION INTERNATIONALLY?

Our Platforms are operated in Canada, and the information we collect is governed by Canadian law. If you are accessing the Platforms from outside of Canada, please be aware that information collected through the Platforms will be transferred to, processed, stored, and used in Canada, the United States, and other jurisdictions. Data protection laws in Canada may be different from those of your country of residence. Your use of the Platforms or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of information about you in Canada, the United States, and other jurisdictions as set out in this Privacy Policy. If your data is collected in Europe, we will transfer your personal data subject to appropriate safeguards, including standard contractual clauses.

12. HOW DO I CONTACT BUDGE STUDIOS?

For any comments, questions, or complaints regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us!

By mail: Budge Studios Attention: Data Protection Officer 5455, De Gaspé Avenue, Suite 540 Montreal, QC, H2T 3B3, Canada

By email: privacy@budgestudios.com

ESRB: For complaints, you can also contact ESRB Privacy Certified through https://www.esrb.org/privacy/contact/ or by email at privacy@esrb.org.

Data Subjects Located in the EU: For European specific requests, you can use any of the methods above or as further specified in the What Should I Know as a Data Subject in Europe? section below.

13. WHAT SHOULD I KNOW AS A DATA SUBJECT IN EUROPE?

A. Budge Studios is a Data Controller.

Data protection laws in Europe make a distinction between organizations that process personal data for their own purposes (known as controllers) and organizations that process personal data on behalf of other organizations (known as processors). Budge Studios acts as a controller with respect to personal data collected as you interact with our apps, websites, emails, and advertisements.

B. Budge Studios has a Lawful Basis for Processing.

Data protection laws in Europe require a lawful basis for processing personal data. Our lawful bases include where: (a) you have given consent to the processing for one or more specific purposes, either to us or to our service providers or partners; (b) processing is necessary for the performance of a contract with you; (c) processing is necessary for compliance with a legal obligation; or (d) processing is necessary for the purposes of the legitimate interests pursued by us or a third party, and your interests and fundamental rights and freedoms do not override those interests. We retain personal data for as long as necessary to fulfill the purpose for which it was collected, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.

C. Your European Privacy Rights.

If you are a data subject in Europe, you have the right to access, rectify, or erase any personal data we have collected about you. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us.

You may exercise your rights by submitting a written request to us at the address set out in the How Do I Contact Budge Studios? section above. We will respond to your request within 30 days. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

D. Children in Europe.

Where the basis for our processing of personal data from children under 16 in Europe is consent, we will make appropriate efforts to verify that consent is given or authorized by the holder of parental responsibility over those children, and, if we learn or have reason to suspect that we have collected personal data from those children without parental consent, we will promptly delete it. If you are a child under 16 in Europe, please speak with your parent or guardian about this Privacy Policy so you can better understand how we use your personal data.

E. Complaints

If you have a complaint about our use of your personal data or response to your requests regarding your personal data, you may submit a complaint to the data protection regulator in your jurisdiction. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator, and would welcome you directing an inquiry first to us.

In addition to the contact information above, please contact our Data Protection Officer at privacy@budgestudios.com

14. WHAT SHOULD I KNOW AS A CALIFORNIA RESIDENT?

These additional disclosures for California residents apply only to individuals who reside in California. The California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (CCPA) provides additional rights, and requires businesses collecting or disclosing personal information to provide notices and means to exercise those rights.

A. Notice at Collection.

In the past 12 months, we have collected the following categories of personal information listed in the CCPA:

• Contact Identifiers, including your email address or name if you have provided these to us.
• Characteristics or demographics, including country.
• Commercial or transaction information, including records of products or services you purchased, obtained, or considered.
• Device identifiers, including IP address.
• Internet activity, including information about your browsing history and interactions, such as the features you use, pages you visit, content you view, time of day you browse, and referring and exiting pages.
• Non-precise location data, such as location derived from an IP address
• Inferences drawn from the above
• Employment and education data that you provide when you apply for a job with us.

For more information on personal information we collect, including the sources we receive personal information from, review the WHAT INFORMATION DOES BUDGE STUDIOS COLLECT? section. We collect and use these categories of personal information for the business purposes described in the How Does Budge Studios Use the Information Collected? section. The categories of persons to whom personal information is disclosed, including service providers for business purposes, are set out in the How Does Budge Studios Share or Disclose Information? section. We disclose the categories of personal information listed in the What Information does Budge Studios Collect? section above to service providers for business purposes.

Budge Studios does not "sell" or "share" personal information to third parties as those terms are defined under the CCPA.

Some of the personal information we collect may be considered sensitive personal information under California law. We collect, use, and disclose sensitive personal information only for the permissible business purposes for sensitive personal information under the CCPA or without the purpose of inferring characteristics about consumers. We do not sell or share sensitive personal information.

The criteria used to determine the period of time we retain your personal information is set out in the For How Long Does Budge Studios Store My Information? section.

B. Right to Know, Correct, and Delete.

If you are a California resident, you have the right to correct and delete the personal information we have collected from you and the right to know certain information about our data practices. You have the right to request the following from us:

• The categories of personal information we have collected about you.
• The categories of sources from which the personal information was collected.
• The categories of personal information about you we disclosed for a business purpose, sold, or shared.
• The categories of third parties to whom the personal information was disclosed for a business purpose, sold, or shared.
• The business or commercial purpose for collecting, selling. or sharing the personal information.
• The specific pieces of personal information we have collected about you.

To exercise any of these rights, please email us at privacy@budgestudios.com. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days. We may require additional information from you to help us verify your identity and process your request. If we cannot verify your identity, we may deny your request in accordance with applicable law.

C. Authorized Agent.

You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent's permission to do so and verify your identity directly. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above.

D. Right to Non-Discrimination.

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights. Your rights are subject to exceptions and our retention practices.

E. Children.

We do not knowingly sell or share personal information of minors under 16 years old, as those terms are defined under the CCPA. For details on how we handle children's information, see the How Does Budge Studios Handle Children's Information? section below.

F. Shine the Light.

California's Shine the Light law permits customers in California to request certain details about how certain types of their information are shared with third parties and, in some cases, affiliates, for those third parties' and affiliates' own direct marketing purposes. Under the law, a business should either provide California customers certain information upon request or permit California customers to opt in to, or opt out of, this type of sharing.

If you are a California resident and wish to obtain information about our compliance with this law, please contact us as set out in the How Do I Contact Budge Studios? section above. Requests must include California Privacy Rights Request in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that Budge Studios is not required to respond to requests made by means other than through the provided email address or mail address.

15. ADDITIONAL INFORMATION FOR RESIDENTS OF US STATES WITH CURRENTLY EFFECTIVE COMPREHENSIVE PRIVACY LAWS

For residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Jersey, New Hampshire, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy, above.

We do not "sell" or share personal data, as those terms are generally defined under applicable laws. We do not process personal data for purposes of targeted advertising or for profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Some of the personal data we collect may be considered sensitive personal data under applicable law. We only use sensitive personal data with your consent.

A. REQUESTS

You have the right to exercise choice over your personal data as follows:

• Verifiable Requests: You have the right to: (i) confirm whether or not we are processing your personal data, and in some regions, confirm the categories of personal data we have processed; (ii) access your personal data; (iii) correct inaccuracies in your personal data; (iv) delete your personal data; (v) obtain a copy of your personal data that you previously provided to us in a portable and readily usable format.
• Oregon: If you are an Oregon resident, you also have the right to receive a list of the specific third parties to which we have disclosed personal data.

These rights are verifiable rights, meaning that we need to verify your identity before fulfilling them. To exercise any of these rights email us at privacy@budgestudios.com We will confirm receipt of and respond to your request consistent with applicable law. To verify your identity, we may require additional information from you. If we cannot verify your identity, we may deny your request in accordance with applicable law.

• Consent. You have the right to revoke consent previously given for the collection, use, disclosure, and retention of your personal data. To revoke consent, write us at the email or postal address set out in the How Do I Contact Budge Studios? section above.

Your rights are subject to exceptions and our retention practices. You have the right not to be discriminated against for exercising any of your rights. To the extent permitted by law, rights requests must be exercised through the applicable designated method listed above. You may make a rights request using an authorized agent. We will require written and signed proof of the agent's permission to do so and we may verify your identity directly with you.

You have the right to appeal our decision in response to your request. To appeal, please write us at the email or postal address set out in the How Do I Contact Budge Studios? section above and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint to your Attorney General as follows:

• For Colorado residents: https://coag.gov/file-complaint/
• For Connecticut residents: https://www.dir.ct.gov/ag/complaint/
• For Delaware residents: https://attorneygeneral.delaware.gov/fraud/cmu/complaint/
• For Indiana residents: https://www.in.gov/attorneygeneral/consumer-protection-division/file-a-complaint/
• For Iowa residents: https://www.iowaattorneygeneral.gov/for-consumers/file-a-consumer-complaint/complaint-form
• For Kentucky residents: https://www.ag.ky.gov/Resources/Consumer-Resources/Consumers/Pages/Consumer-Complaints.aspx
• For Maryland residents: https://www.marylandattorneygeneral.gov/Pages/CPD/Complaint.aspx
• For Minnesota residents: https://www.ag.state.mn.us/Office/Forms/ConsumerAssistanceRequestForm.pdf
• For Montana residents: https://dojmt.gov/consumer/
• For Nebraska residents: https://www.nebraska.gov/apps-ago-complaints/
• For New Hampshire residents: https://www.doj.nh.gov/citizens/consumer-protection-antitrust-bureau/consumer-complaints
• For New Jersey residents: https://www.njconsumeraffairs.gov/Pages/Consumer-Complaints.aspx
• For Oregon residents: https://justice.oregon.gov/consumercomplaints/
• For Rhode Island residents: https://riag.ri.gov/
• For Tennessee residents: https://www.tn.gov/attorneygeneral/working-for-tennessee/consumer/file-a-complaint.html
• For Texas residents: https://oag.my.salesforce-sites.com/CPDOnlineForm
• For Utah residents: https://attorneygeneral.utah.gov/contact/complaint-form/
• For Virginia residents: https://www.oag.state.va.us/consumercomplaintform

16. CHANGES TO THIS PRIVACY POLICY

We reserve the right to make changes to this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Please check the Privacy Policy each time you use our Platforms to ensure you are aware of any changes in our privacy practices. Our Privacy Policy will indicate the date it was last updated. If there is a material change in the way that we use your information under this Privacy Policy, we will notify you via email to the extent feasible of the relevant changes or provide other prominent notice on our Sites and/or Apps.