Privacy Policy

Last updated: 22 Jun 2026 · v1

To complete before launch / legal review: data controller’s legal name, address, registration and contact details are marked with [ ]. This is a draft template; have it reviewed by a lawyer before publishing.

This policy explains how Dijital Kıraathane (the “App”) processes your personal data under Türkiye’s Law No. 6698 (KVKK) and, for users in the EU, the General Data Protection Regulation (GDPR).

1. Data Controller

[HD App Studio — full legal name]. Address: [address]. Contact: kvkk@kiraathane.site.

2. Data We Process

Account: display name, profile photo
Contact: email address
Authentication: password (stored only as an irreversible hash), session tokens; provider identity token for Google/Apple sign-in
Security: IP address, login records, device/app info (User-Agent)
Gameplay: match history, moves, scores, reputation/rank
In-app economy: virtual-coin balance and transactions, purchases (if any)
Social: friends/requests, chat messages, reports
Consent records: terms, privacy, marketing consents and timestamps

The App contains no real-money gambling; virtual coins cannot be purchased or cashed out.

3. Purposes & Legal Bases

Providing the game service and account — performance of a contract
Security, anti-cheat / multi-account / collusion detection (IP, device, behaviour) — legitimate interest and legal obligation
Reputation, matchmaking, ranking — contract / legitimate interest
Social features & moderation — contract / consent
Marketing and announcements — consent (withdrawable anytime)
Advertising for non-premium users — consent / legitimate interest

4. International Transfer

Servers are hosted in the European Union (Germany — Hetzner Online GmbH). Sub-processors include Hetzner (hosting), Cloudflare (DNS/network), and Google/Apple (only if you use sign-in or ads). Transfers rely on appropriate safeguards and/or your consent.

5. Retention

Data is kept only as long as needed for the stated purposes and applicable legal periods, then deleted or anonymised. You can delete your account in-app at any time.

6. Your Rights

You may request access, correction, deletion (also via in-app “Delete account”), object to processing, withdraw consent, and (under GDPR) data portability. Contact: kvkk@kiraathane.site.

7. Cookies / Ad Technologies

The mobile app uses no browser cookies; session tokens are stored in the device’s secure storage (Keychain/Keystore). Ad-supported builds use Google AdMob, which may use identifiers for ad measurement/personalisation, subject to your consent and device settings.

8. Age

The App is for users 16 and older.

9. Security & Changes

Data in transit is encrypted with TLS (HTTPS); passwords are stored irreversibly; access is restricted. We may update this policy and will notify you of material changes in-app.