Kürşad and the 40 Warriors

Privacy Policy

Last updated

[DOLDUR: politikanın yayın tarihi, YYYY-AA-GG biçiminde]

Data controller

Muhammet Ayan, [DOLDUR: veri sorumlusunun açık adresi]

Contact

destek@muhammetayan.com

App

Kürşad and the 40 Warriors (Android, com.madmin.kursad)

1. In short

Kürşad and the 40 Warriors is a game for everyone; children can play it too. It does not ask you to create an account, and it does not ask for your name, e-mail, phone number, photos or location. On first launch it asks for your year of birth and keeps only your age group. To improve the game we collect in-game usage data without knowing who you are.

The game shows ads served by Google AdMob. A rewarded ad is shown only when the player taps a button; in addition, after the first three levels and at most once every two levels, a short interstitial ad may be shown when a level ends and the game returns to the map. Players under 13, and players whose age is unknown, are shown only non-personalized ads suitable for children. Anyone who wishes can make the game ad-free with a one-time purchase (the “Khagan Edition”); payment is handled by Google Play.

2. Data we collect (game usage data)

The game sends the following to our server:

• Random installation ID: a random number generated the first time the app is opened. It is not your phone's advertising ID, Android ID, IMEI or serial number. It disappears when you uninstall the app.
• Age group: under 13, 13–15, 16–17, or 18 and over. Your year of birth is neither stored nor sent (see section 3).
• Game events: session start and end time and duration, level and wave start and end, duration, remaining lives, how the level was lost, how many times buttons were tapped, weapon and horse use, and whether an ad offer was shown and whether it was watched.
• Purchase status: the status of the Khagan Edition (seen, started, completed, cancelled, refunded, restored) and the product name. Payment details, card, name or e-mail never reach us; Google Play processes the payment under its own privacy policy.
• Use of the grown-ups section: whether the adult question was opened, passed or answered incorrectly (to see that children do not get into the section). The answer itself is not sent.
• Technical information: device model, operating system version, graphics chip name, screen resolution, language, game version, frames per second (performance).

What we do not collect: name, e-mail, phone number, address, precise location, photos, audio, contacts. Our own server does not collect or store the advertising ID; section 4 explains when Google, which serves the ads, may use it. We do not save the IP address of requests to our server in our database; however, the infrastructure logs of our hosting provider (Supabase) may keep the IP address for a short time for technical reasons.

Purpose: to understand which levels are too hard, whether the buttons are easy for small hands, and whether the game runs smoothly on devices; and to fix bugs. The data we receive is not used for advertising, profiling or sale and is not shared with third parties. (The data Google itself processes for ads is described in section 4.)

Legal basis: our legitimate interest in developing the game and keeping it working (Article 5/2-f of the Turkish Personal Data Protection Law No. 6698, “KVKK”; where the GDPR applies, Article 6(1)(f)). This data collection is part of the game and cannot be switched off in the game; if you do not agree, you may choose not to use the game, or ask for deletion as described in section 7.

Retention: raw events are kept for 30 days, then turned into anonymous daily totals (for example “how many levels were completed that day”) and deleted.

Where: the data is stored on the infrastructure of Supabase (Supabase Inc.), in the [DOLDUR: Supabase veri merkezi bölgesi] data centre. For users in Türkiye this is a transfer of data abroad; the basis for the transfer under Article 9 of the KVKK is: [DOLDUR: KVKK Art. 9 cross-border transfer basis — hukukçu doldurur]

3. Age screen and age groups

• The game is for everyone. On first launch you are asked for your year of birth; only the age group (under 13, 13–15, 16–17, 18 and over) is stored on the device and sent, without a name, together with the game data. The year of birth is neither stored nor sent.
• If the age is unknown, the player is treated as under 13.
• The age group determines which ads are shown (section 4), where a purchase can be made (section 5), and the default blood setting: for players under 13 the blood effect is off by default.
• You can change the age group in the grown-ups section (after the adult question).

4. Ads (Google AdMob)

• Rewarded ads: the player watches a short video only after tapping an ad button, in order to continue from where they fell, get a spare life for a level, double the gold at the end of a level or receive the freed warrior's gift, get Charge power or an extra horn between waves, double the daily gift, or earn gold in the outfit corner. The game can always be played without watching ads.
• Interstitial ads: only when a level ends and the game returns to the map; never in the first three levels, and after that at most once every two levels. They never appear when the game opens, when it closes, or during gameplay, and can be closed after a few seconds.
• If the Khagan Edition is purchased, all ads are removed (section 5).

Ads are served by Google AdMob. The settings we attach to ad requests depend on the age group:

You can withdraw the consent you gave in the consent form under “Ad privacy options” in the game's settings. You can reset or delete the advertising ID in your phone's settings.

To show and measure ads and to prevent fraud, Google processes data such as IP address (and the general location derived from it), device information and interaction with ads under its own privacy policy: policies.google.com/technologies/partner-sites and policies.google.com/privacy.

5. Purchase (Khagan Edition)

• A one-time, optional purchase: it removes all ads (including interstitials) and gives the rewards of rewarded offers without ads. It adds no levels, items or gold; the whole game is free to play. There are no purchase prompts during gameplay.
• For players under 18 and players whose age is unknown, the purchase can be made only in the grown-ups section, after the adult question (a multiplication question and a 3-second press and hold). For players aged 18 and over it can also be made from the settings.
• Payment is taken by Google Play, which asks for its own confirmation (parental approval through Family Link also applies if it is turned on). Payment and card details never reach us.
• Refunds: we do not issue refunds ourselves; refunds follow Google Play's own rules. If Google Play refunds a purchase, only the ad-free status is removed; progress, gold and items are not deleted.
• When you move to a new phone, “Restore purchase” in the grown-ups section brings back the purchase made with the same Google account.

6. Children's privacy

The game is not directed only at children, but children can play it too, and we take extra care for them. We do not ask children for personal information; there is no chat, sharing or account in the game. Players under 13, and players whose age is unknown, are shown only non-personalized ads suitable for children, and the advertising ID is not sent. For players under 18, purchases are available only in the grown-ups section. The installation ID is used only to improve the game (within “support for the internal operations” under the US COPPA rule).

If you are a parent and have questions or requests: destek@muhammetayan.com

7. Your rights (KVKK Article 11, GDPR)

To learn whether your data is processed, to request information, correction or deletion, to object, or to exercise your other rights, write to destek@muhammetayan.com. Because we do not know who you are, we can find which records belong to you only through the installation ID on your device; uninstalling the app destroys this ID, and a new installation generates a new one. Raw records are deleted after 30 days in any case. We answer requests within 30 days at the latest. You also have the right to lodge a complaint with the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) or, where the GDPR applies, with your local data protection authority.

8. Security

Data is sent over an encrypted connection (HTTPS). The database cannot be accessed directly from the app; only our server function, which enforces size and rate limits, can write to it. Only the developer can read the data.

9. Changes

If we change this text we update its date; important changes are announced together with a game update.

10. Contact

Muhammet Ayan — destek@muhammetayan.com — [DOLDUR: veri sorumlusunun açık adresi]