Privacy Policy

Mega Millions - SumLotto (com.win.us_mega_million)
Last updated: September 27, 2026

1. Overview

The Mega Millions - SumLotto app ("the app") is a number-generation and statistics utility. It has no sign-up and no login, and it never asks for your name, e-mail address, or phone number.

Almost everything the app creates stays on your device (section 2). The one exception is the optional Contact us screen: opening it creates an anonymous ID on a server, and a message you choose to send there is stored so the operator can reply (section 3).

The app also sends usage statistics — which screens are opened and which in-app actions are taken — and crash and error reports to the analytics services named in section 4. These are keyed to device identifiers rather than to you: they carry no name, e-mail address, or phone number, and none of the numbers you generate or play are included.

This collection is a required part of using the app: it is what tells the operator which features are worth keeping and where the app is breaking, so there is no in-app switch to turn it off. If you would rather not send them at all, uninstalling the app stops them completely.

2. Data stored on your device only

The following data is created by the app and stays on your device. It is never transmitted to the operator or to any server:

• Number Challenge playslips, run history (games played, virtual prizes, timestamps).
• Images generated when you share a set of numbers.
• Simulator run history, as a summary only: how many games each run held, the drawn combination, how many lines fell into each prize category, and the experience points gained. The individual generated lines are not kept once the result screen is closed.
• Your level and experience points, the daily check-in streak (current and best), which prize tiers you have ever hit and when you first hit each, your lifetime records (biggest single prize, best net result on one run, largest run, games played, experience points earned, jackpots), and which achievements you have unlocked together with the counters they track (app opens, runs played, lines generated, ads watched, reminder taps).
• A weekly reminder the app schedules on your device. It is a local alarm: no push token is created and nothing is sent to any server. Turning notifications off in system settings stops it, and nothing else in the app changes.

You can remove this data at any time with the in-app "Clear" actions or by uninstalling the app.

3. 1:1 inquiries ("Contact us")

The app includes an optional 1:1 inquiry screen. Nothing is sent unless you open it. Opening the screen signs this installation in anonymously with Firebase Authentication (creating the anonymous user ID described below) and records when you last viewed the conversation, so that the operator's replies can be shown as read. The text of a message is stored only when you send one.

What is stored

• the text of each message you send, and the time you sent it;
• the operator's replies;
• the time you last opened the conversation;
• an anonymous user ID issued by Firebase Authentication. This is a random string tied to this installation of the app. It is not your Google account and carries no name, e-mail address, or phone number.

Where it is stored — Google Cloud Firestore, in Google's asia-northeast3 region (Seoul, South Korea). If you use the app from another country, your message is transferred there and stored under that country's Google Cloud infrastructure.

Who can read it — only you and the operator. Each conversation is bound to the anonymous identifier that created it, and the server's security rules reject every read and write coming from a different identifier. No other user can see your messages, and each app in the family keeps its inquiries in a separate collection.

Please do not put personal details, payment information, or passwords into a message — the operator does not need them in order to help.

How long it is kept — until one year after the last message in the conversation, then deleted. You can have it removed sooner by asking inside the conversation itself, or by e-mailing the address in section 7.

Uninstalling the app removes the anonymous identifier from your device, so a reinstall starts a new, empty conversation. Messages already sent remain on the server until the retention period above ends or you ask for deletion.

4. Third-party services

The app uses the following services, each governed by its own policy:

• Google AdMob (rewarded ads only — the app shows no banner or interstitial ads, and an ad plays only when you choose to watch one for an experience-point boost): processes the advertising identifier (IDFA) — only if you allow tracking in the App Tracking Transparency prompt; otherwise ads are non-personalised and no IDFA is read, device/OS information, and IP address; records how you interact with ads (whether an ad loaded, played, was tapped, or failed); and collects app and SDK performance diagnostics such as app launch time, hang rate, and energy use. Google uses this data to serve and measure ads, for analytics, and to prevent fraud and abuse. The IP address also tells it roughly where you are — at the level of a city or region, never a street address. Google Ads policy
• Google Analytics for Firebase: collects an app-instance ID, the advertising identifier (IDFA) if you allowed tracking, screen views, and in-app events to understand feature usage, along with user properties such as the store the app was installed from and the result of the ad-consent step. Google uses the IP address to estimate a coarse location (such as the country or city) and does not store the IP address itself. Analytics event data is retained for up to 14 months. Firebase privacy
• PostHog (product analytics and error reports, US region): collects a randomly generated device identifier, screen views, and in-app events such as a run being played, a level being reached, or an ad being watched (including the revenue the ad earned), together with the app version and build channel, the platform, the store the app was installed from (the installer's package name), and the result of the ad-consent step. The PostHog SDK adds the device model and manufacturer, operating-system version, screen size, language, time zone, and network type. It also receives the crash and error reports described below. Your IP address reaches it as part of sending those events, and it is used to work out roughly where you are — at the level of a city or region, never a street address. It receives no name, e-mail address, or phone number, and none of the numbers you generate or play. This identifier is never joined with the anonymous sign-in used by Contact us (section 3), so the two cannot be matched up. PostHog privacy
• Firebase Authentication (anonymous sign-in only): issues the random identifier described in section 3 when you open Contact us. No name, e-mail address, or password is involved. When it issues the identifier it also receives your IP address and the device's user agent, which Google uses to prevent abuse.
• Cloud Firestore: stores the 1:1 inquiry messages described in section 3.

These services operate independently. Apart from your own inquiry thread, the operator sees only analytics data keyed to device identifiers, never your name or contact details.

Crash and error reports — when the app runs into an error, it sends a report to PostHog: the type of error, its message, the stack trace (the place in the app's code where it happened), and whether the error stopped the app, along with the app version and device details listed above. The same error is reported only once, and at most 15 reports are sent per launch. If an ad fails to load or play, the error code and message returned by the ad SDK are sent to the analytics above as well. These reports are used only to find and fix faults, and there is no in-app switch to turn them off.

Your choice about personalized ads — before the app requests any ad, it asks Google's User Messaging Platform whether consent is needed where you are. In the EEA, the UK, Switzerland, and other places where the law requires it, Google's consent form appears first and records your choice; elsewhere no form is shown. Where the form appears, AdMob uses the advertising ID to personalize ads only if you agree, and serves non-personalized ads if you do not. Elsewhere, ads may be personalized unless you have turned off ads personalization on your device. On iOS, the system "Allow tracking?" prompt follows, and the advertising identifier (IDFA) is read only if you allow it. Whatever you choose, the app works the same and an ad gives the same reward, and the app never rewards you for agreeing. The outcome of this step (for example "obtained" or "not required") is recorded with the analytics described above. To see the consent form again, reinstall the app; the tracking permission can be changed at any time in Settings → Privacy & Security → Tracking.

Analytics collection is required — the analytics described above starts automatically with the app, to improve quality and diagnose faults, and the app provides no in-app opt-out. If you do not want it, please stop using the app and delete it.

Transfers outside your country — the PostHog project this app reports to runs in the United States, so the usage statistics and error reports described above are transferred to and stored in the US. Google (AdMob, Firebase) may likewise process data on servers outside the European Economic Area. These transfers rely on the recipients' own safeguards, published in the privacy policies linked above. No name, e-mail address or telephone number is involved, and none of the numbers you generate or play leave your device through them.

5. Purchases, cancellation, and refunds

The app has no in-app purchases and no subscriptions. The Number Challenge is free to play, with no limit and no in-app currency. Watching a rewarded ad is optional and grants only a temporary experience-point multiplier, which has no cash value and cannot be bought, sold, transferred, or exchanged for money.

6. Children

The app is not directed at children and provides no real-money gambling. Simulated draws are free, use no in-app currency, and pay out nothing.

7. Contact

Questions about this policy, or a request to delete an inquiry: seohcz1@gmail.com

This policy may be updated when app features change; the latest version is always available at this address.