The privacy policy of our other game, Sushi Belt, is on a separate page: Sushi Belt privacy policy.
In short#
- No account, no login. We never ask for your e-mail, real name, phone number or a password.
- Your progress is saved on your phone. Levels, stars, coins, boosters and settings are stored on your device; a copy is kept in the cloud backup.
- Ads are served by Google AdMob and are non-personalised for everyone. On iPhone and iPad we never show the tracking (ATT) prompt and never use the advertising identifier (IDFA).
- Apple (and later Google) handle payments. We use RevenueCat to verify purchases; your card details never reach us or RevenueCat.
- Anonymous gameplay statistics. The game creates a random, anonymous player id in Google Firebase and stores only game numbers there (level, stars, coins, boosters, number of ads watched and similar); it also sends game events to Google Analytics for Firebase without any advertising identifier. No name, e-mail or advertising id. You can delete them at once in the game: Settings > Delete my cloud data.
- Cloud backup: a copy of your progress (levels, stars, coins, boosters, settings) is stored in Google Firebase under the same anonymous player id. On a new phone you restore it with the backup code in Settings > Cloud backup. Anyone who knows the code can move the backup to their phone, so keep it to yourself.
- Reminders (optional): if you allow them, the game sets at most one reminder a day on your phone itself (never between 9 pm and 9 am). No data leaves your phone for this; turn them off in Settings > Reminders.
- Crash reports (Sentry, European Union / Germany) help us fix the game; they contain no name, contact details or screenshots.
- We don't sell your data. We never ask for location, camera, microphone, contacts or photo permissions.
Who we are (data controller)#
This policy covers Katlı Otopark, a mobile game by Zexus Games (it may appear in stores under its English name "Parking Tower: Car Jam Puzzle"; package id com.zexusgames.katliotopark).
Data controller under the GDPR and Türkiye's KVKK (Law No. 6698): Zexus Games, Ahmet Budak (sole proprietorship), Akşehir / Konya, Türkiye. Contact: [email protected].
What data we process#
| Data | Where | Purpose | Legal basis |
|---|---|---|---|
| Game progress, coins, boosters, settings (sound, music, vibration, language), tutorials seen, purchase status | On your device (some numbers also go into the cloud gameplay statistics, see below) | To let you continue where you left off and remember your settings | Performance of a contract |
| Ad data: IP address, approximate location derived from it (country/city), device and OS details, device/SDK identifiers, the advertising ID on Android, ads shown and interactions, diagnostics | Google AdMob | To serve ads, cap frequency, prevent fraud and measure ads | Legitimate interests; consent where the law requires it |
| Purchase data: store receipt, product, price, currency, date, a random anonymous app user id | Apple / Google, RevenueCat | To verify and deliver purchases, restore them, manage the subscription and prevent fraud | Performance of a contract; legal obligation; legitimate interests |
| Cloud gameplay statistics: a random anonymous player id (Firebase Anonymous Authentication), highest level, total stars, coins, boosters held, storeys reached, wins / losses, VIP and No Ads status, number of sessions, number of purchases and total spend at store prices (USD; test purchases excluded), ads watched (rewarded / interstitial), game language, the phone's region setting (e.g. TR), platform (iOS / Android), app version, first and last open time. Plus totals linked to no one: daily counts, per-level started / won / lost (with the reason) / continue counts, and product, booster and ad placement totals | Google Firebase: Anonymous Authentication and Cloud Firestore (servers in Europe) | To balance the game, find levels that are too hard, notice cheating, support (sending you gifts and messages), news and remote game settings | Legitimate interests |
| Game events: level started / won / lost, ad watched, purchase, daily reward and the basic device and app information Firebase collects with them (device model, OS, app version, language, country, app instance id). No advertising identifier (IDFA / Android advertising ID) is used and ad personalisation signals are off | Google Analytics for Firebase | To understand gameplay and balance the game | Legitimate interests; consent where the law requires it |
| Cloud backup: a copy of the game save (level progress and stars, coins, boosters, piggy bank, win streak, daily reward counters, settings, language, tutorials seen; purchase status for information only), a summary (level, stars, coins), platform, app version, the backup code, backup time; if the backup was moved to another phone, that phone's anonymous player id and the time of the move | Google Firebase (Cloud Firestore, servers in Europe) | Restoring your progress on a new phone | Performance of a contract |
| Mailbox: gifts / messages the studio sends you and whether you claimed them; public news | Google Firebase (Cloud Firestore) | Support and news | Performance of a contract; legitimate interests |
| Crash and error reports: error type and error trace, device model, OS and app version / build number, the last steps before the crash (game events such as "level 12 started", and buttons tapped), time, a random installation id. No name, e-mail, screenshot or screen recording; the IP address is not attached to reports and not stored | Sentry (EU, servers in Germany) | To find and fix crashes | Legitimate interests |
| Store statistics: aggregated figures such as downloads, sales and crash counts (crash and usage data if "share with app developers" is on in your device settings) | Apple App Store Connect, Google Play Console | To see how the game is doing | Legitimate interests; your choice at Apple/Google |
| E-mails you send us | To reply to you | Performance of a contract; legitimate interests |
The game never asks for location, camera, microphone, contacts or photo permissions. The notification permission is asked only if you turn reminders on, after the game first explains what they are for. There is no chat, no messaging between players and no sharing of user content. Mailbox messages come only from the studio (Zexus Games).
Ads (Google AdMob)#
- Rewarded ads are always optional: you choose to watch one for a reward. Skip them and you lose nothing.
- Interstitial ads are rare: never in the first five levels, only between levels, and at most one every three levels. Banners appear only on the menu and map screens, never during play. The "Remove Ads" purchase and the VIP Driver subscription turn interstitials and banners off.
- Because the game does not ask your age, every player gets non-personalised ads, ad requests are tagged as under the age of consent, and ad content is limited to "PG" (family-friendly).
- iPhone and iPad: Apple's App Tracking Transparency (ATT) prompt is never shown, and your advertising identifier (IDFA) is never requested or used. We do not track you across other companies' apps and websites.
- EEA, UK and Switzerland: Google's consent form (UMP) is shown. You can change your choice later under Settings > Privacy choices in the game.
- Non-personalised ads may still use context (device language, approximate location) and process data for frequency capping and fraud prevention. How Google uses this data: policies.google.com/technologies/partner-sites
- On Android you can delete or reset your advertising ID under Settings > Google > Ads.
In-app purchases#
- Purchases are made entirely through the Apple App Store (later also Google Play). Your card number, billing address and store account details never reach us or RevenueCat.
- RevenueCat (RevenueCat, Inc., USA) verifies receipts, delivers items and manages the subscription, using a random, anonymous app user id.
- VIP Driver is a weekly auto-renewing subscription. You can cancel it at any time in your store account's subscription settings. Rules: terms of use.
- You can turn purchases off completely in your device settings (iOS: Screen Time > Content & Privacy Restrictions; Android: Play Store > Settings > Authentication).
Crash reports and gameplay statistics#
Crash reports (Sentry): when the game crashes or hits an unexpected error, a report is sent to Sentry: the error type and trace, device model, OS and app version, the time, a random installation id and the last steps before the crash (game events such as "level 12 started", and buttons tapped). Your name, e-mail, screenshots or screen recordings are never sent; no user id is attached and your IP address is not stored. Reports are kept on Sentry's servers in the European Union (Germany) and are deleted automatically after at most 90 days.
Gameplay statistics (Google Firebase): on first launch the game creates a random, anonymous player id in Firebase. Only game numbers are linked to it (listed one by one in the table above): level, stars, coins, boosters, storeys, wins/losses, VIP/No Ads status, number and amount of purchases, ads watched, language, region setting, platform and version. They are sent at most once a minute, when a level ends, when the app opens and after a purchase. Game events (such as level started / won) also go to Google Analytics for Firebase without any advertising identifier. This helps us find levels that are too hard, balance the game, notice cheating and send you a support gift or message. Your name, e-mail, location or advertising id are never sent. The game shows this anonymous code under Settings > Player ID.
Service providers#
- Google AdMob (Google LLC / Google Ireland Ltd.): policies.google.com/privacy
- Google Firebase: Analytics, Anonymous Authentication, Cloud Firestore (Google LLC / Google Ireland Ltd.): policies.google.com/privacy and firebase.google.com/support/privacy
- RevenueCat (RevenueCat, Inc.): www.revenuecat.com/privacy
- Sentry (Functional Software, Inc.; our data is stored in the EU, in Germany): sentry.io/privacy/
- Apple (App Store, payments, App Store Connect statistics): www.apple.com/legal/privacy/
- Google Play (payments, Play Console statistics; once the Android version is out): policies.google.com/privacy
Apart from these, we only share data when the law requires it (for example at the request of a competent authority). We don't sell your data or give it to anyone for marketing.
International transfers#
Crash reports (Sentry) are stored in Germany and cloud gameplay statistics (Cloud Firestore) on servers in Europe. Google and RevenueCat may also process data on servers in the United States, the European Union and other countries. This means data leaves Türkiye. We base these transfers on the safeguards in Article 9 of the KVKK and Chapter V of the GDPR (standard contracts / standard contractual clauses and our providers' data processing terms). Write to us to learn which safeguard applies.
Retention#
- Data on your device: as long as the app is installed.
- Purchase records: as long as needed to manage purchases and the subscription, and as long as the law requires.
- Ad data: according to Google's own retention rules.
- Crash reports (Sentry): at most 90 days, then deleted automatically.
- Cloud gameplay statistics (Firebase Cloud Firestore): as long as the game is published; deleted at once with Settings > Delete my cloud data in the game or when you write to us. Totals linked to no one (daily and per-level counts) may remain.
- Cloud backup (Firestore): as long as the game is published or until you delete it. Settings > Delete my cloud data also deletes the backup and its code at once.
- Game events (Google Analytics for Firebase): at most 14 months, per our Google Analytics retention setting.
- Support e-mails: deleted within a reasonable time after your request is resolved.
Deleting your data#
- Data on your device: uninstall the app; all progress and settings are deleted. On Android you can also use Settings > Apps > Katlı Otopark > Storage > Clear data. Device backups (iCloud, Google backup) may hold a copy; these are managed in your Apple/Google account.
- Your cloud gameplay statistics: in the game, Settings > Delete my cloud data. Your player record, mailbox and cloud backup (including its code) on the server are deleted at once, your anonymous player id is removed and the Analytics id is reset; after that this device sends no more cloud data. Your game continues on this device where you left off. This needs an internet connection. The same screen shows your Player ID; giving it when you write to us helps us find your record.
- Data held by us and our providers: e-mail "Please delete my data" to [email protected] with your platform (iOS / Android) and roughly when you installed the game. Within 30 days we delete, or request deletion of, the data we can find in Firebase, Sentry and RevenueCat. Adding your Player ID helps us find your record. Records we must keep by law (e.g. purchase records) may be kept until that period ends.
- As there is no account, deleted progress cannot be recovered; but if you note the code in Settings > Cloud backup before uninstalling, you can restore your progress on a new install. One-time purchases such as "Remove Ads" and the VIP subscription can be restored with the same store account via Settings > Restore purchases.
- For ad data, use Google's tools (reset your advertising ID on Android, myadcenter.google.com/).
Children's privacy#
Katlı Otopark has content suitable for all ages and anyone can play it.
- The game does not ask your age and asks no one for personal information (name, e-mail, photos, location).
- For everyone, including children under 13, ads are non-personalised, ad content is family-friendly, and on iPhone the advertising identifier is never used.
- There is no chat, no messaging between players and no sharing of user content. Mailbox messages come only from the studio.
- Gameplay statistics are anonymous for everyone: no name, e-mail, photo, location or advertising identifier is collected, and ad signals are off in Analytics.
- Reminders are set on the phone itself only (no notifications are sent from a server), the game explains them before asking for permission, and their texts are calm and never rush the player. No data is collected for reminders. The cloud backup is linked to no person; it holds only the game save.
- Purchases require the store password / Face ID / Play authentication; parents can turn purchases off in the device settings.
- Parents can ask us to delete their child's data as described above. If you believe a child has sent us personal information by e-mail, contact us and we will delete it.
Your rights (KVKK, GDPR and others)#
Under Article 11 of the KVKK you have the right to learn whether your data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to, to have it corrected or erased, to have those corrections and deletions notified to third parties, to object to a result against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.
If you are in the EEA or the UK, the GDPR also gives you the rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. Residents of other places (for example some US states) may have similar rights.
Send requests to [email protected]; we reply within 30 days at the latest. If you are not satisfied, you can complain to Türkiye's Personal Data Protection Authority (KVKK) or the data protection authority in your country.
Changes#
When we add a new service provider or a new type of data to the game, we update this policy beforehand and change the effective date. The current version is always on this page.
Contact#
A question about privacy?
Write to us about anything. You can write in English or Turkish.