This text is a draft and will be completed before release.
Simit — Privacy Policy
Last updated: ⟨publication date⟩
1. Who we are
Simit is published by ElliSekiz LLC ("we"), the data controller. Address: 30 North Gould Street, Suite 100, Sheridan, WY 82801, USA. Email: hello@playsimit.com.
2. In short
- We do not ask for your name, phone number or location. An email address is taken only if you enter it in the "Tell me when the game is out" list (see 3a). No account is needed: a random player id is created on first connection.
- Payments stay with Apple; we never see card details.
- Usage data is collected only with your permission, and never from players under 13.
- We do not sell your data.
3. What we collect and why
| Data | When | Why | Legal basis |
|---|---|---|---|
| Player id: a random id (not your name, device id or advertising id) | First connection to our server | Link your save and purchases to you | Contract |
| Game save: level progress, coins, lives, stars, boosters, settings, the nickname and avatar you choose | As you play | Cloud backup; keep progress when you change device | Contract |
| Purchase records: Apple transaction id, product, date, price and currency, environment (real or test) | In-app purchase | Verify the purchase with Apple, deliver the item, handle refunds | Contract; legal obligation |
| Technical connection data: IP address, time, requested address. We do not store it; our infrastructure provider Cloudflare processes it to make the connection and stop attacks | Every connection to our server | Run the service, prevent abuse and attacks | Legitimate interest |
| Weekly city race scores (when the race opens) | Winning levels | Rankings; scores are verified by replaying them on the server. The table shows a short tag derived from your id (e.g. "Player #4F2A"), not your name | Contract |
On your device: progress and settings are also stored on the device so the game plays offline. Your privacy choice and year of birth stay on the device and are not sent to us.
Not in this version: no analytics or crash reporting tool, no third-party ads, no advertising id (IDFA), no cross-app tracking. If any of these is added, this policy is updated first; analytics then runs only with your permission and the advertising id is asked through Apple's prompt.
3a. Web trial (playsimit.com/play)
The web trial runs for a short time to measure which kind of game our ads reach and who likes it. Unlike the app:
- Usage events (only with your permission): page opened, map steps, level started, won or lost, continue offer, title, play time, return visits; which kind of game you played and the ad campaign's tag (utm), with a random visitor id. Purpose: comparing the game types and our ads. Legal basis: consent.
- Meta measurement (only with your permission): the Meta Pixel loads, and the same events go from our server to Meta's Conversions API. Meta receives a hash (SHA-256) of the visitor id, your browser details and IP address for matching; we do not store them. Legal basis: consent.
- Email address: if you enter it in the "Tell me when the game is out" form. A confirmation email comes first; without confirming you get nothing else. Purpose: one message when the game is out. Legal basis: consent.
Your email address is kept only in our database and never goes to Meta or to analytics. Every email has a link to leave the list. On the web the question is a bar at the bottom of the screen; no year of birth is asked. Choosing "Allow" also confirms you are 18 or older; if you are younger, choose "No". Without your permission no event is sent; events from before your answer wait in the browser's memory only and are dropped. You can change your choice in the game's Settings.
4. Who we share with
- Apple: purchases are made through Apple; we use Apple's signed transaction data to verify them.
- Hosting provider: Cloudflare, Inc. (USA) stores data on our behalf only; our database is in Cloudflare's Western Europe data centre.
- Meta Platforms Ireland Ltd. (web trial only, adults who consented): ad measurement (3a).
- Email delivery: ⟨Resend, Inc. (USA)⟩ sends the confirmation and news emails on our behalf.
- Legal duty: when a competent authority lawfully requests it.
We never sell or rent data for advertising or marketing.
5. International transfers
Our server runs on Cloudflare's global network and our database is in Western Europe; Apple's systems are also abroad. Transfers follow KVKK Art. 9 (and the GDPR where it applies). ⟨Transfer basis — to be set in legal review.⟩
6. Retention
- Game save and player id: until you ask for deletion, or after ⟨period⟩ without any connection.
- Purchase records: as long as tax and accounting law requires; if a profile is deleted the purchase row stays without an owner.
- Technical connection data: not kept in our database.
- Web trial usage events: deleted within ⟨period⟩ after the trial ends.
- Email on the news list: until the news is sent or you leave the list; then deleted.
7. Children
The game suits all ages and asks for no personal information. On first launch it asks for the year of birth; players under 13 do not share usage data and are not offered the option.
8. Your rights
Under KVKK Art. 11 and, where it applies, the GDPR, you may ask whether your data is processed, get a copy or information, have it corrected or deleted, object to processing, learn who it was shared with, and claim compensation for damage. To ask, send the support code shown in Settings to hello@playsimit.com; it lets us find your data without asking for anything else. We answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority or your local supervisory authority.
9. Security
Connections to our server are encrypted (HTTPS). The admin panel is protected by a strong password, which itself is never stored; every admin action is audited, and the panel shows no email or IP address.
10. Changes
We update the date on this page when the policy changes, and announce important changes (such as a new kind of data) in the game.
11. Contact
hello@playsimit.com · ElliSekiz LLC, 30 North Gould Street, Suite 100, Sheridan, WY 82801, USA