Data controller
The data controller is Yadasoft (yadasoft.io). Contact: info@yadasoft.io.
Personal data processed
| Category | Data |
|---|---|
| Identity | Player name, avatar, friend code, Apple or Google account ID |
| Contact | E-mail address |
| Customer transactions | Purchase and subscription records, support messages |
| Transaction security | Installation ID, device and session data, sign-in records, Sign in with Apple token, IP address (briefly, not stored) |
| Game and usage | Matches, words, scores, trophies, skill rating, inventory, friends, private leagues, reports, settings, in-app events, crash reports, country you connect from (first and latest) |
| Marketing | Advertising ID and ad interactions (if you allow them) |
We do not process special categories of personal data.
Purposes
- Creating your account, verifying sign-in and providing the game
- Running matchmaking, rankings, rewards and friend features
- Verifying and delivering purchases
- Sending notifications and sign-in codes
- Preventing cheating and abuse, reviewing reports, keeping information secure
- Fixing bugs and improving the service
- Showing ads; personalised ads if you allow them
- Answering support requests and meeting legal obligations
Legal grounds
- Establishing and performing the contract (Art. 5/2-c): account, game, purchase and notification data.
- Legal obligation (Art. 5/2-ç): keeping purchase records, requests from authorities.
- Legitimate interest (Art. 5/2-f): security, anti-cheat, debugging, statistics and general ads.
- Explicit consent (Art. 5/1): personalised ads and app tracking. You can withdraw consent at any time; withdrawal applies from then on.
How data is collected
Data is collected electronically while you use the app, by automatic or partly automatic means: from what you enter, from your device, and from the Apple or Google account you choose for sign-in.
Transfers
Data is transferred, limited to the purposes above, to our service providers: game server hosting, an e-mail delivery service (sign-in codes), Google (Firebase Analytics, Crashlytics, Cloud Messaging, AdMob including rewarded ad verification, Google Sign-In, Google Play), Apple (Sign in with Apple, App Store, push notifications) and Meta Platforms (Meta App Events, to measure our Instagram and Facebook ads). Because Google’s, Apple’s and Meta’s servers may be abroad, these transfers follow the conditions in Article 9 of the Law. Data may be transferred to authorised public bodies on request.
Retention
Data is kept for as long as the purpose requires and for the retention periods set by law. After an account deletion request, once the 30-day grace period ends, account and game data are deleted, destroyed or anonymised. Purchase records are kept for the period that tax and commercial law requires; reports are kept for moderation.
Your rights (Art. 11)
By applying to the data controller you can:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used for that purpose,
- Know the third parties in Turkey or abroad that it is transferred to,
- Ask for it to be corrected if it is incomplete or wrong,
- Ask for it to be deleted or destroyed under the conditions in Article 7,
- Ask for corrections, deletions and destructions to be notified to the third parties it was transferred to,
- Object to a result against you that comes solely from automated analysis,
- Claim compensation for damage caused by unlawful processing.
How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request from the e-mail address linked to your account to info@yadasoft.io with the subject “KVKK request”. Add your player name and friend code so we can verify your identity. Requests are answered free of charge within 30 days; if the request involves an additional cost, the fee set by the Board may apply.
More details: Privacy policy.