1. Introduction
"Tabu: Kelimeyi Anlat!" (the "Application" or "Game") was developed by independent developer Furkan Ayaz ("we" or the "developer"). This policy explains which data is processed, why it is processed and who may process it when you use the Application through Google Play, the App Store, the web or a desktop version.
The Application does not include account creation or sign-in and does not collect email addresses or first and last names for registration. The sections below explain each limited category of processed data according to its source.
2. At a Glance
| Topic | Status |
|---|---|
| Account / sign-in system | None |
| Analytics or crash-tracking SDK | None |
| Location, camera, contacts or microphone access | None — not requested |
| Advertising | Yes — Google AdMob (banner / interstitial ads) |
| In-app purchases | Yes — through Google Play Billing; we do not store card details |
| Online room / multiplayer | Yes — only for the session, in server memory; not stored in a persistent database |
| Sale of personal data | Never |
3. Data Stored on Your Device
The Application stores your game settings (such as volume, vibration, dark mode, selected card categories and time/round/team rule preferences), along with the product ID and purchase token for purchases you own, locally on your device only (using mechanisms such as SharedPreferences on Android, a local preferences file on desktop, browser local storage on the web and NSUserDefaults on iOS).
This data does not leave your device except for the portions required for the purchase-verification and online-game scenarios described below. When you uninstall the Application, this local data is deleted from your device.
4. Online Rooms (Multiplayer Mode)
When you create or join an online room with friends, you send the following information to our server:
- The nickname you choose for yourself in the Game,
- Your selected team and game preferences,
- A randomly generated, session-specific identifier associated with your room code.
This data is held in the server's memory (RAM) and is not permanently written to a database or disk. It is automatically deleted when the room closes, all players disconnect or the server restarts. We recommend that you do not use your real name as your nickname.
To establish the connection, the server technically processes standard network and connection data, such as an IP address, at the transport layer. This data is not permanently logged or stored in association with your identity.
5. Purchases
In-app purchases, such as additional card packs or an ad-free experience, are completed through Google Play Billing. Payment details such as credit card or bank information never reach us; Google Play processes them directly.
After a purchase is completed, your device sends us only the ID of the purchased product and the purchase token generated by Google. Our server sends this token to the Google Play Developer API to verify the purchase and records the verification result. This record does not contain your name, email address or payment information; it contains only the product ID, token and verification time.
6. Advertising
Google AdMobThe Android version of the Application displays banner and interstitial ads through Google AdMob so that we can offer the Game free of charge. You can disable ads by purchasing the ad-free option.
AdMob may process device identifiers, such as an advertising ID, and advertising-interaction data to display and personalize ads. This processing is performed by Google under Google's own privacy policy, not by our Application.
Users in the European Economic Area, the United Kingdom and Switzerland are shown a consent form through Google's User Messaging Platform (UMP). You can use this form to set and later change your advertising-personalization preference.
For more information about Google's data-processing practices, see the Google Advertising Policies and Google Privacy Policy.
7. Third-Party Services
| Service | Purpose | Data processed |
|---|---|---|
| Google AdMob | Ad delivery | Advertising ID and ad-interaction data (processed by Google) |
| Google Play Billing | In-app purchases | Product ID, purchase token |
| Google Play Developer API | Purchase verification | Purchase token, product ID |
Outside its advertising and purchase infrastructure, the Application does not use any analytics, crash-tracking or marketing SDK.
8. Application Permissions
The Android version requests only the following permissions:
INTERNET— required to download card content, verify purchases and operate the online-room feature.VIBRATE— used to vibrate the device for round and timer notifications.
Permissions such as location, camera, microphone, contacts or storage are not requested.
9. Data Retention and Deletion
- Local data on your device: deleted from your device when you uninstall the Application.
- Online-room data: deleted from memory when the session ends or the server restarts; it is not stored permanently.
- Purchase-verification record: retained, as a product ID and token only, so past purchases can be verified and support requests can be resolved. You may request deletion of this record; see Your Rights.
10. Data Security
Communication between the server and the Application uses encrypted connections (HTTPS/WSS). Purchases are verified using Google's official Play Developer API and service-account credentials. Nevertheless, no method of transmission over the internet is completely secure.
11. Children's Privacy
The Application does not knowingly collect personal data directly from children. Because there is no registration or account system, it does not request age information. The Application is a word game intended for a general audience. Target-audience and content-rating declarations in Play Console are maintained separately from this policy; if the Application is designated as directed to children, ad delivery is restricted in accordance with Google's applicable policies, such as the use of non-personalized ads.
12. Your Rights
Under Türkiye's Personal Data Protection Law No. 6698 (KVKK) and applicable legislation, you have the right to request information about personal data processed about you, if any, and to request its correction or deletion. Users in the European Union or EEA have similar rights under the GDPR.
Because the Application does not maintain personal accounts, data that can be associated with you is primarily stored locally on your device and can be deleted entirely by uninstalling the Application. You may contact us to request deletion of your purchase-verification record.
13. Policy Changes
This policy may be updated in response to changes in the Application or legal requirements. The current version is always published on this page. For material changes, the effective date at the top of the page will be updated.
14. Contact
If you have questions about this policy or our data-processing practices, contact us at: