Lezzet Kulesi — Privacy Policy
Effective date: October 19, 2026 · App version: 1.3.1 · Package ID: com.lezzetkulesi.abkadirc
1. Data controller
- Name/Entity: AFK Games Studio
- Email: [email protected]
- Play Store developer name: AFK Games Studio
2. Personal data processed and purposes
Lezzet Kulesi has no account system of its own and does not ask for your name, email, phone number or GPS location. Optionally the game links to your Google Play Games account. The data processed:
| Data | Processor | Purpose | How to turn off |
|---|---|---|---|
| Advertising ID, device/ad interaction data, IP address (coarse location), diagnostics | Google AdMob | Rewarded ads, measurement, fraud prevention | Device ad settings; in EU/UK/CH: Settings → Ad Consent |
| Purchase transaction data | Google Play Billing | Processing/delivering purchases | — |
| Play Games player ID, player name/avatar, leaderboard scores, friends list, cloud save | Google Play Games Services | Leaderboards, friends, cross-device progress backup | Do not sign in / sign out of Play Games; the game works fully without it |
| Leaderboard: random device ID, the nickname the player chooses, XP scores (all-time/weekly/daily) | AFK Games Studio leaderboard server (Cloudflare Workers / D1) | Showing rankings and the nickname to other players | The nickname is suggested randomly and can be changed in the leaderboard screen; your real name is never asked. For deletion see §8 |
| Usage (analytics) data: random device/SDK ID, in-game events (tutorial step, quest/achievement completion, tower renovation, store/cosmetic interaction, coin/Balbal flow), session count/length, device model, OS, app version, country inferred from IP | GameAnalytics | Game balance, drop-off and bug analysis | Settings → Analytics switch stops the SDK; no data is sent afterwards. In the EU/UK/CH analytics does not run (the SDK never starts) |
| Notification permission (Android 13+) and notification timing | Your device (local notifications) | Quest/reward/comeback reminders | Settings → Notifications or device settings |
| Tower/progress data, settings | Your device (Google as cloud save if you link Play Games) | Continuing the game | — |
| Shared tower image | Only when you choose to share, the app you pick (e.g. WhatsApp) | Sharing your tower with friends | Sharing is always started by you; nothing is sent to us |
GameAnalytics events contain no player name, Play Games ID, email or friend data; only in-game numeric/label data. Your payment card details never reach us; only Google Play processes them.
3. Collection method and legal basis (KVKK Art. 5/2)
Data is collected automatically through the app and integrated SDKs (Google Mobile Ads, Play Billing, Play Games Services, GameAnalytics).
- Clause (c): purchase transaction data (conclusion/performance of a contract).
- Clause (f), legitimate interest: rewarded-ad delivery/measurement and game analytics. Outside the EU/UK/CH analytics is on by default; you are informed at first launch and can turn it off any time in Settings → Analytics.
- EU/UK/CH: ads depend on your Google UMP choice. In these regions analytics (GameAnalytics) does not run, even if you consent; if enabled later, this policy and the consent text will be updated and you will be informed again.
- GameAnalytics start condition: region not EU/UK/CH per UMP + first-launch notice acknowledged + Settings → Analytics on; all three are required.
- Linking to Play Games is optional and based on the permission you give on Google's sign-in screen.
- Local progress and the event log never leave your device.
Lawyer note: "on by default" analytics relies on legitimate interest rather than explicit consent under KVKK, a risky reading; consult a lawyer before release.
4. Transfers
- Google AdMob, Play Billing, Play Games Services (Google Ireland Limited / Google LLC), processed under Google's own Privacy Policy.
- Leaderboard server (operated by us on Cloudflare, Inc. infrastructure): the device ID, nickname and XP scores are sent over HTTPS; nickname and scores are visible to other players, the device ID is not. Weekly/daily scores of past periods are kept for a few days at most; the all-time score and nickname are kept until a deletion request is made or the data is removed.
- GameAnalytics (data processor; we are the controller). Company: GameAnalytics ApS (Denmark) and its affiliate GameAnalytics Limited (UK). Servers are in the USA (AWS us-east-1; sub-processors AWS, Google Cloud, Imply); data is transferred abroad under Standard Contractual Clauses (SCC). Retention: under GameAnalytics' retention policy and Data Processing Addendum, event data is kept, with decreasing detail, for at most 12 months; some records used to count unique players/retention may be kept for at most 18 months. GameAnalytics may also use aggregated/de-identified data that cannot reasonably identify you to improve its own services. On Android GameAnalytics may collect the advertising ID (GAID); we could not verify that it can be disabled, so we say "may collect". Crash reports are not collected automatically. Contact: [email protected].
- No other third party receives data; data is never sold.
- Basis for transfer abroad (KVKK Art. 9): (i) explicit consent; (ii) first-launch notice + off switch in Settings; (iii) contractual commitment/SCC with the recipient. Because Art. 9 was amended in 2024, whether the basis fits "on by default" analytics must be confirmed by a lawyer.
- EU/UK/CH: the UMP consent form is shown; change it in Settings → Ad Consent. Analytics is off in these regions regardless of the UMP choice.
5. App permissions
| Permission | Why |
|---|---|
INTERNET, ACCESS_NETWORK_STATE | Ads, purchases, Play Games and analytics requests |
VIBRATE | Haptic feedback (can be turned off in Settings) |
POST_NOTIFICATIONS (Android 13+) | Show notifications; the game works if denied |
com.google.android.gms.permission.AD_ID (Android 13+) | Advertising ID access (AdMob; possibly GameAnalytics) |
Location, camera, microphone, contacts and storage permissions are not requested.
6. Children
Lezzet Kulesi is rated for general/teen audiences, is aimed at the general public aged 13 and over (it is NOT part of Google Play's Designed for Families program) and is not designed for children under 13; we do not knowingly collect personal data from them. Analytics and leaderboards are not aimed at under-13s. Your Play Games player name is visible to other players on the leaderboard. If a parent believes a child under 13 has given us personal data, contact the address in §9 and the data will be deleted.
7. Data security and retention
Your game progress is stored locally on your device with atomic writes and a backup copy (.bak). If you link Play Games, a copy of your progress is kept as a cloud save in your Google account, which you can manage/delete in Google Play Games settings. Analytics data sits on GameAnalytics servers (§4); leaderboard data sits on the leaderboard server (§4). Deleting the app deletes the data on your device. Data is encrypted in transit (HTTPS). Data processed via AdMob/Play Billing/Play Games is subject to Google's own security and retention policies.
8. Your rights under KVKK Article 11
Under Article 11 of the KVKK everyone may apply to the controller to: (1) learn whether personal data is processed; (2) request information about it; (3) learn its purpose and whether it is used accordingly; (4) know the third parties it is transferred to at home or abroad; (5) request correction of incomplete or wrong data; (6) request deletion/destruction when the conditions of Art. 7 are met; (7) request that corrections/deletions be notified to transferees; (8) object to an adverse result arising from automated analysis; (9) claim compensation for loss caused by unlawful processing. Contact the address in §9 to exercise these rights.
Deletion of leaderboard data: write to [email protected] with your nickname (and roughly your XP, if possible); your nickname and scores will be removed from the leaderboard server. Changing the nickname in the leaderboard screen also hides the old name.
Access/deletion for analytics data: the analytics ID is not shown to you and cannot be linked to you. Your request is met by: (1) the analytics ID is reset when app data is deleted and the app reinstalled; (2) you can stop future data flow via Settings → Analytics; (3) write to [email protected]; in that case we will state that we cannot identify you. You can manage/delete Play Games data in Google Play Games settings. You can manage ad personalisation in your device's Google ad settings and stop new ads with the in-app "Remove Ads" purchase.
9. Contact
Questions about this policy or your data: [email protected]
10. Changes to this policy
We may update this policy from time to time; the effective date at the top will be updated for material changes. Continued use of the app after a change means you accept the updated policy.