Privacy Policy
This policy explains what personal data is processed when you use Sanayi Krallığı (the “Game”), a mobile game developed by ARV Web Teknoloji (“we”, “us”), why it is processed and what your rights are. It is written to comply with the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
1. Data controller
Hasan Gündoğdu — ARV Web Teknoloji (sole proprietorship), Sarıyer / Istanbul, Türkiye.
Email: iletisim@arvwebteknoloji.com
2. Data we process
| Category | Data | Source |
|---|---|---|
| Account | Email address; for email sign-up, your password (stored only in hashed form by Firebase; we cannot see it); for Google or Apple sign-in, the account ID, name and email shared by those services (including Apple's “Hide My Email” address) | You |
| Player profile | The player name you choose, language preference | You |
| Game save | Your game progress (shop, money, mechanics, quests, etc.) | The Game |
| Leaderboards | Player name and scores (wealth, region, weekly points, mastery). These are visible to other players. | The Game |
| Purchases | Purchased product, date, platform and store transaction ID. Card and payment details are processed by Apple or Google; we never see them. | Apple / Google |
| Advertising | Advertising ID (IDFA/AAID, if permitted), IP address, device model, OS, language, ad interactions | Google AdMob |
| Analytics | App usage statistics (session length, screens viewed, app version), approximate location (country/city level), device information | Google Analytics for Firebase |
In this version the Game cannot be played without an account; the account keeps your progress across devices and enables the leaderboards. We do not access your contacts, photos, microphone or precise location.
3. Purposes and legal bases
- Account, sign-in and cloud saves: necessary to provide the Game (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Leaderboards: part of the game service (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Delivering and restoring purchases: performance of contract and legal obligations (GDPR Art. 6(1)(b),(c); KVKK Art. 5(2)(c),(ç)).
- Rewarded ads: only rewarded ads that you choose to watch are shown. Personalised ads and tracking happen only with your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)); otherwise non-personalised ads are shown.
- Analytics, troubleshooting and improving the Game: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Security and cheat prevention: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
4. Service providers and international transfers
Your data is processed on our behalf by the following providers. We do not sell your data.
- Google Firebase (Authentication, Cloud Firestore, Analytics) — Google Ireland Ltd. / Google LLC. Game data is stored on servers in Europe (eur3). Firebase privacy
- Google AdMob — ad serving. How Google uses data for ads
- Apple (Sign in with Apple, App Store) and Google (Google Sign-In, Google Play) — sign-in and payments.
Because these providers are located outside Türkiye (in the EU and the US), your data may be transferred abroad. Transfers rely on appropriate safeguards such as Standard Contractual Clauses (GDPR) and KVKK Art. 9.
5. Ads and consent
- The Game only contains rewarded ads: you choose to watch one by tapping a button and receive an in-game reward.
- Users in the European Economic Area, the UK and Switzerland are asked for consent through Google's consent form (UMP).
- On iOS, your advertising identifier is used only if you allow it in the App Tracking Transparency prompt. You can change this in iOS Settings › Privacy › Tracking.
- On Android, you can reset or delete your advertising ID in Settings › Google › Ads.
6. Retention and deletion
Account, game save and leaderboard data are kept for as long as your account exists. You can permanently delete your account and this data in the Game via Settings › Delete my account; see Delete Account for details. Purchase records may be kept as long as legal retention obligations (e.g. tax law) require. Analytics data is kept for up to 14 months. Advertising data is retained according to Google's policies.
7. Your rights
Under GDPR and KVKK Art. 11 you have the right to access your data, receive a copy, have it corrected or erased, object to or restrict processing, withdraw consent, and to data portability. Send requests to iletisim@arvwebteknoloji.com; we respond within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority or your local data protection authority.
8. Children
The Game is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
9. Security
Data is encrypted in transit with HTTPS. Database access rules ensure each player can only access their own save. Passwords are never stored in plain text on our side.
10. Changes and contact
We may update this policy and will announce significant changes in the Game. Questions: iletisim@arvwebteknoloji.com