Lumen: Dark Maze — Privacy Policy
Last updated: November 2, 2026 · Package ID: com.afkgamesstudio.lumen
This policy explains what data Lumen: Dark Maze (the “App”), published by AFK Games Studio, processes and how, under Turkey's Personal Data Protection Law (KVKK, Law No. 6698). This is an English translation of the authoritative Turkish policy at gizlilik.gamesstudioafk.com/lumen-dark-maze; in case of any discrepancy, the Turkish version governs.
1. Data controller
Name/Entity: AFK Games Studio
Email: [email protected]
Play Store developer name: AFK Games Studio
2. What data we process
Lumen: Dark Maze has no account or login system. We don't ask for your name, email, phone number, or location.
| Data | Processed by | Purpose |
|---|---|---|
| Advertising ID, device/ad interaction data, IP address (for coarse location estimation), diagnostic data | Google AdMob (Google Mobile Ads SDK) | Serving and measuring banner ads on menu screens and at the bottom of the game screen, interstitial ads between levels and rewarded ads you choose to watch; fraud prevention |
| A random player ID generated on the device (not the advertising ID), device model, operating system and game version, session length, game events (level start/finish/quit, steps and stars, helper use, ad results, tutorial steps), IP address (for coarse location estimation) | GameAnalytics (analytics service) | Understanding how the game is played; improving level difficulty and game balance. Can be turned off in Settings → Analytics |
| Purchase transaction data (product ID, order number, purchase confirmation) | Google Play Billing | Processing, delivering and restoring the “Remove Ads” purchase |
| Level progress, stars, high scores, Challenge scores, daily streak and rewards, resume point, “Remove Ads” status | Your device only | Continuing your game progress |
| Settings (sound, music, vibration, swipe sensitivity, language) | Your device only | Remembering your preferences |
What we don't collect: Name, email, phone number, address, location, contacts, photos, or audio recordings. There is no chat, messaging, friend-adding, or file-sharing in the app. Your payment card details never reach us — only Google Play processes them.
Note: The app has no notifications, cloud save (cross-device sync) or crash-reporting tools; your progress lives only on this device. We run no servers of our own; analytics data is sent only to GameAnalytics and contains nothing that directly identifies you.
3. Legal basis and method of collection
Data is collected automatically, electronically, through the app itself, integrated third-party SDKs (Google Mobile Ads SDK, Google Play Billing Library) and submissions to GameAnalytics.
- Contract performance: purchase transaction data, necessary to complete an in-app purchase you requested.
- Legitimate interest: serving and measuring ads, necessary for the app's ad-supported free model, and improving the game (analytics).
- Consent: for users in the European Economic Area, the United Kingdom and Switzerland, ads are personalised only with the consent given in Google's consent form; analytics starts off in these regions and runs only if the player turns it on in Settings.
- Local progress data and settings never leave the device; they are listed here for transparency.
4. Data transfers
- Google AdMob (Google Ireland Limited / Google LLC) — advertising ID and interaction data, subject to Google's own Privacy Policy and processed on Google's servers outside Turkey. More information: How Google uses information from apps that use its services.
- Google Play Billing (Google LLC) — purchase transaction data, processed via Google Play's own infrastructure.
- GameAnalytics (GameAnalytics ApS, Denmark) — analytics data, processed on our behalf as a data processor on servers outside Turkey. The IP address is used for approximate location and kept in shortened form for up to 30 days; event-level data is kept for up to 12 months. More information: GameAnalytics Privacy Notice.
- No other third party receives your data; we do not sell or rent it.
- EEA/UK/Switzerland users: on first launch the app shows a consent form via Google's User Messaging Platform (UMP). No ads are requested until the form is answered; if you do not consent to personalisation, ads are served in non-personalised form. You can change your choice at any time in the game's Settings → Privacy Options or in your device's ad settings.
5. App permissions
| Permission | Reason |
|---|---|
INTERNET | Sending/receiving ad, purchase and analytics requests |
ACCESS_NETWORK_STATE | Checking connectivity before an ad/purchase request |
VIBRATE | Haptic feedback (can be disabled in Settings) |
AD_ID | Access to the advertising ID (serving and measuring ads); can be reset or deleted in device settings |
com.android.vending.BILLING | The “Remove Ads” purchase through Google Play |
WAKE_LOCK, FOREGROUND_SERVICE, READ_BASIC_PHONE_STATE | Added by Google's ad and billing libraries for their own background tasks and basic connectivity information such as network type; no prompt is shown. Phone number, call log and device serial number are not read. |
We do not request location, camera, microphone, contacts, or storage permissions.
6. Children's privacy
Lumen: Dark Maze targets a general audience aged 13+, is not part of Google Play's Designed for Families program, and is not designed for children under 13. We do not knowingly collect personal data from children under 13. If a parent believes a child under 13's data has been processed through the app, please contact us via §9 and we will take the necessary steps.
7. Data security and retention
Your game progress and settings are stored in the app's private storage on your device, which other apps cannot read; this data never reaches our servers. Deleting the app deletes this data from your device — no separate retention period applies. The “Remove Ads” purchase stays on your Google Play account and is restored when you reinstall. Data processed via AdMob/Play Billing is subject to Google's own security and retention policies. Analytics data is sent over an encrypted connection and kept for the periods stated in §4.
8. Your rights
You may contact us at any time (§9) to ask whether we process data about you, request information about it, request correction or deletion, object to automated processing, or seek redress for unlawful processing — consistent with the rights listed under KVKK Art. 11 (broadly equivalent to GDPR Art. 15–21 for EEA/UK users). We keep no data about you on servers of our own; you can delete the data on your device yourself by uninstalling the app. When you turn off Settings → Analytics, sending stops and the random player ID and pending events are deleted from your device. You can manage ad personalisation and your advertising ID from your device's Google ad settings, and turn off banner and interstitial ads entirely by purchasing “Remove Ads” in the app (rewarded ads only play when you ask for them).
9. Contact
Questions about this policy or your data: [email protected]
10. Changes to this policy
We may update this policy from time to time; the “last updated” date at the top of this page will be updated for material changes. If we add a feature that processes data, the policy will be updated before that version is released. Continued use of the app after a change means you accept the updated policy.