Privacy Policy — Yanik Online Card Game
This privacy policy applies to the Yanik Online Card Game mobile application (the "App"), offered as a service by krersn Studio (the "Service Provider"). The service is provided "AS IS". The App is an online game; therefore, unlike the offline version, some of your data is processed on cloud servers so the game can function.
1. Information Collected and Purpose of Use
The App may collect and process the following information when downloaded and used:
- Account identifier: To use online features, an anonymous user ID (UID) is created via Firebase Authentication. If you optionally sign in with Google, your Google account identity is linked to this UID.
- Profile information: The display name you choose in-game, your selected avatar, and a shareable friend code assigned to you.
- Social data: Your friends list, friend requests sent/received, your online status, last-seen and last-played times.
- Chat and message content: Private messages and in-game chat messages exchanged with other players, processed so they can be delivered to the recipient and for moderation purposes.
- Gift and chip-transfer records: Records of virtual chip gifts sent/received between players (sender, recipient, amount, time).
- Purchase records: When you make an in-app purchase, the purchase token, product ID, and transaction record provided by Google Play are processed for verification. Your credit/debit card or payment details are never seen or stored by the Service Provider; payment is processed entirely by Google Play.
- Cloud game data: Your virtual chip balance, game statistics (total games, wins), and economy progress are stored in the cloud for cross-device sync and backup.
- Device information: IP address, operating system version, device model (for technical troubleshooting and analytics).
- Usage data: Time spent in the app, screens visited, in-game events.
- Advertising ID (AD_ID): If ads are shown, it may be used by Google AdMob for personalized ads. You can reset this ID in your device settings.
- Google Play Games player ID: If you choose to sign in with Google Play Games Services, your player ID and nickname are obtained. This is entirely optional.
The App does not access your photos, camera, microphone, contacts, calendar, or SMS data.
Your payment card details are never seen by the Service Provider; purchases are processed through Google Play.
2. Where Data Is Stored and International Transfer
For online features (account, friends, chat, gifts, cloud save) to work, your data is stored and processed on Google's Firebase infrastructure — Cloud Firestore, Firebase Authentication, and (if used) Firebase Realtime Database. These services are hosted on Google Cloud servers, and your data may be processed on servers located outside your country (including the European Union and/or the United States).
Google applies legal safeguards such as Standard Contractual Clauses for these transfers. For Firebase data processing terms: firebase.google.com/support/privacy.
3. Third Party Services
The App uses the following third-party services. Each has its own privacy policy:
- Google Firebase (Authentication, Firestore, Realtime Database): firebase.google.com/support/privacy
- Google Play Billing (in-app purchases): policies.google.com/privacy
- Google Play Services: policies.google.com/privacy
- Google AdMob (ad display, if used): policies.google.com/technologies/ads
- Google Play Games Services (player sign-in, achievements): policies.google.com/privacy
4. Player-to-Player Content and Messaging
The App offers chat, private messaging, and gift features between players. When using these features, it is important to know:
- Messages you send to a player, along with your display name and avatar, are visible to that recipient.
- Your display name and avatar may be visible to other players in friends lists, table/lobby screens, and leaderboards.
- Messages and content may be processed and retained for a reasonable period to prevent abuse (harassment, spam, fraud) and to review reports.
- You can use the in-app tools to report inappropriate content or block a user, and you may also contact troyunci@gmail.com.
5. Data Sharing
The Service Provider does not sell or rent your personal information. Limited data sharing may occur only under the following conditions:
- With trusted infrastructure/processor providers necessary to deliver the service (e.g., Google Firebase, Google Play) that agree to comply with our privacy policy
- To comply with legal requirements (court orders, official requests)
- When necessary to protect our rights, ensure user safety, or investigate fraud
6. Data Retention Period
- Account and cloud data (profile, chip balance, friends, game statistics): retained while your account is active. Deleted within a reasonable period after a deletion request or account deletion.
- Chat and message records: retained for a reasonable period for service operation and security.
- Purchase records: may be retained for the period required for accounting, fraud prevention, and legal obligations.
- Local data on the device: deleted from your device when you uninstall the app.
- Advertising ID / Play Games data: subject to Google's own retention policies.
7. Your Rights Under GDPR and KVKK
Under the General Data Protection Regulation (GDPR) and Turkish Law No. 6698 on the Protection of Personal Data (KVKK), you have the following rights:
- To learn whether your personal data is being processed
- To access the processed data and request a copy
- To request correction or deletion of data
- To object to data processing
- To request data portability
- To withdraw your consent
To exercise these rights, contact us at troyunci@gmail.com. Your request will be answered within 30 days at the latest.
8. Opt-Out and Data Deletion Rights
- To delete your account and cloud data: use the account deletion option in the app or follow the steps on the Account & Data Deletion page.
- To stop local data collection: uninstall the app from your device.
- To disable personalized ads: Android Settings → Google → Ads → "Opt out of personalized ads"
- To delete Play Games sign-in data: Play Games app → Settings → Account settings → Delete game data.
9. Children's Privacy
This app is not directed to individuals under 18 years of age. Because the app contains simulated gambling mechanics and real-money purchases, it is only suitable for users aged 18 and over.
The Service Provider does not knowingly collect data from users under 18. If we discover that a user under 18 has used the app, all related data will be deleted immediately. If, as a parent or guardian, you believe your child has used the app, please contact troyunci@gmail.com.
10. Security
The Service Provider applies physical, electronic, and procedural safeguards to protect the confidentiality of your information. Online data is protected with Firebase security rules and authentication. However, please note that no method of transmission over the internet or electronic storage is 100% secure.
11. Policy Changes
This Privacy Policy may be updated from time to time. Changes are announced on this page and the "Last updated" date at the top is revised. Significant changes may be notified within the app. We recommend reviewing it regularly. Continued use of the App means you accept the updated policy.
12. Consent
By using the App, you consent to the processing of your information as described in this Privacy Policy.