HARFİYAT — Privacy Policy
Last updated: 11 August 2026
# HARFİYAT — Privacy Policy
**Effective date:** 11 August 2026
**App:** HARFİYAT — Turkish Word Dig (iOS · Android)
**Data controller:** Unique Game Studio *(full legal name and address to be
filled in before publishing)*
**Contact:** omer.dagli@hekimzade.com
**Published at:** https://uniquegamestudio.com/harfiyat-gizlilik
**Türkçe:** [Gizlilik Politikası (TR)](gizlilik-politikasi.md)
> This is the English translation of the Turkish policy. If the two versions
> ever differ, the Turkish text is the binding one. The file in this repository
> is the SOURCE text — edit it here first, then publish to the website.
---
## In short
HARFİYAT has **no accounts**. We do not ask for or collect your name, email
address, phone number or postal address. Your game progress (level, stars,
collection) is stored **only on your device** and is never sent to our servers.
The data that is collected falls into two groups: **usage statistics**, which
tell us where players get stuck, and **advertising**, which is what keeps the
game free. Both are handled by third-party services (Google Firebase and
Google AdMob).
---
## 1. Data we collect
### 1.1 Data that stays on your device (never sent to us)
Your progress — which level you are on, your star balance, the Lügat cards you
have collected, the proverbs you have solved, your daily streak and your
settings (sound, haptics, colour-blind mode) — is kept in your device's local
storage. We have no access to it. **Deleting the app deletes all of it.** You
can also erase it from inside the game via *Settings → Reset Progress*.
### 1.2 Usage statistics (Google Firebase / Google Analytics)
To understand where the game is too hard and which levels are abandoned, we
record gameplay events. Examples: a level starting and finishing, elapsed time,
number of hints used, stars earned and spent, an ad being shown.
These events contain **no free text**: the words you type and the guesses you
make are not recorded. What matters to us is not what you write, but where you
get stuck.
Firebase additionally processes technical information: an app instance
identifier, device model, operating system version, language/region setting,
and approximate location (city/country level) derived from your IP address.
### 1.3 Notifications (Firebase Cloud Messaging)
If you turn on *Settings → Reminder*, your device is assigned a notification
token, which is stored so that reminders can be delivered. Turning the setting
off or deleting the app invalidates that token. If you never grant notification
permission, no token is created.
### 1.4 Advertising (Google AdMob and mediation networks)
The game shows **rewarded ads** (entirely optional to watch; they grant stars)
and **interstitial ads**. Ads are served by Google AdMob, which collects bids
from the following ad networks:
AppLovin · Meta Audience Network · Unity Ads · ironSource · Liftoff Monetize
(Vungle) · Mintegral · Pangle · InMobi · LINE · Digital Turbine (DT Exchange) ·
Moloco
To select, display, frequency-cap and fraud-check ads, these services may
process: your **advertising identifier** (IDFA on iOS, Advertising ID on
Android), IP address, device and operating system information, ad interaction
data (impressions, clicks, watch time) and approximate location.
**We do not request location permission.** On Android, the precise-location
permission that one ad network's adapter tries to add is stripped from the app;
ads work without it.
### 1.5 What we do not collect
- Name, surname, email, phone number, address, date of birth
- Contacts, photos, microphone, camera or file access
- Precise (GPS) location
- Health, financial or biometric data
- The words you type or attempt in the game
We do **not sell** your data.
---
## 2. Permissions and consent
### 2.1 iOS — App Tracking Transparency
On iOS you are asked, on first launch, for permission to track your activity
across other companies' apps and websites. **If you decline, ads are still
shown**; they are simply not personalised, and your advertising identifier is
not used for tracking. You can change your choice at any time in
*Settings → Privacy & Security → Tracking* on your device.
### 2.2 Europe (EEA and the UK) — advertising consent
Players in these regions are shown a consent screen on first launch, provided
by Google's User Messaging Platform (UMP). To change your choice later, open
*Settings → Ad Privacy* inside the game to bring that screen back. (This option
appears only in regions where consent is required.)
### 2.3 Resetting your advertising identifier
- **iOS:** Settings → Privacy & Security → Tracking (turn app permissions off)
- **Android:** Settings → Google → Ads → Reset or delete advertising ID
---
## 3. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR/KVKK) |
|---|---|---|
| Running the game, saving progress | Local on-device save | Performance of a contract |
| Debugging and game-balance improvements | Usage statistics | Legitimate interest |
| Non-personalised advertising | Limited device/ad data | Legitimate interest |
| Personalised advertising | Advertising ID and interactions | **Explicit consent** (ATT / UMP) |
| Reminder notifications | Notification token | **Explicit consent** (opt-in setting) |
---
## 4. Transfers and retention
Usage statistics and advertising data are processed on the servers of the
service providers named above (Google and the ad networks); those servers may
be located outside Türkiye, including in the European Union and the United
States. Retention periods are governed by each provider's own policy (the
default retention for Google Analytics event data is 2 months).
**We do not keep player data on any server of our own.**
Providers' privacy policies:
- Google (Firebase, AdMob, UMP): https://policies.google.com/privacy
- AppLovin: https://www.applovin.com/privacy/
- Meta Audience Network: https://www.facebook.com/privacy/policy/
- Unity Ads: https://unity.com/legal/game-player-and-app-user-privacy-policy
- ironSource: https://www.is.com/privacy-policy/
- Liftoff Monetize (Vungle): https://liftoff.io/privacy-policy/
- Mintegral: https://www.mintegral.com/en/privacy/
- Pangle: https://www.pangleglobal.com/privacy
- InMobi: https://www.inmobi.com/privacy-policy
- LINE: https://line.me/en/terms/policy/
- Digital Turbine (DT Exchange): https://www.digitalturbine.com/privacy-policy/
- Moloco: https://www.moloco.com/privacy-policy
---
## 5. Children's privacy
HARFİYAT is not directed at children and does not knowingly collect data from
users under the age of 13. If you believe your child's data has been collected,
contact us at the address below and we will ask the relevant service providers
to delete the records.
---
## 6. Your rights
Under Article 11 of the Turkish Personal Data Protection Law (KVKK, Law No.
6698) and under the GDPR, you have the right to request information about the
data processed about you, to have it corrected or erased, to object to
processing, and to withdraw your consent.
In practice, the most direct routes are:
1. **Game data:** delete the app, or use *Settings → Reset Progress*
2. **Personalised ads:** turn off ATT permission / withdraw UMP consent
3. **Notifications:** turn off *Settings → Reminder*
For anything beyond that: **omer.dagli@hekimzade.com** — requests are answered
within 30 days at the latest.
---
## 7. Changes
This policy is updated when a new service is added to the app (for example
in-app purchases) or when the law changes. The current version is always
published at the address above, with the effective date updated. Significant
changes are also announced inside the app.