🐦 Simit

This text is a draft and will be completed before release.

Simit — Privacy Policy

Last updated: ⟨publication date⟩

1. Who we are

Simit is published by ElliSekiz LLC ("we"), the data controller. Address: ⟨company address⟩. Email: destek@playsimit.com.

2. In short

3. What we collect and why

Data When Why Legal basis
Player id: a random id (not your name, device id or advertising id) First connection to our server Link your save and purchases to you Contract
Game save: level progress, coins, lives, stars, boosters, settings, the nickname and avatar you choose As you play Cloud backup; keep progress when you change device Contract
Purchase records: Apple transaction id, product, date, price and currency, environment (real or test) In-app purchase Verify the purchase with Apple, deliver the item, handle refunds Contract; legal obligation
Technical connection data: IP address, time, requested address. We do not store it; our infrastructure provider Cloudflare processes it to make the connection and stop attacks Every connection to our server Run the service, prevent abuse and attacks Legitimate interest
Weekly city race scores (when the race opens) Winning levels Rankings; scores are verified by replaying them on the server. The table shows a short tag derived from your id (e.g. "Player #4F2A"), not your name Contract

On your device: progress and settings are also stored on the device so the game plays offline. Your privacy choice and year of birth stay on the device and are not sent to us.

Not in this version: no analytics or crash reporting tool, no third-party ads, no advertising id (IDFA), no cross-app tracking. If any of these is added, this policy is updated first; analytics then runs only with your permission and the advertising id is asked through Apple's prompt.

4. Who we share with

We never sell or rent data for advertising or marketing.

5. International transfers

Our server runs on Cloudflare's global network and our database is in Western Europe; Apple's systems are also abroad. Transfers follow KVKK Art. 9 (and the GDPR where it applies). ⟨Transfer basis — to be set in legal review.⟩

6. Retention

7. Children

The game suits all ages and asks for no personal information. On first launch it asks for the year of birth; players under 13 do not share usage data and are not offered the option.

8. Your rights

Under KVKK Art. 11 and, where it applies, the GDPR, you may ask whether your data is processed, get a copy or information, have it corrected or deleted, object to processing, learn who it was shared with, and claim compensation for damage. To ask, send the support code shown in Settings to destek@playsimit.com; it lets us find your data without asking for anything else. We answer within 30 days. You may also complain to the Turkish Personal Data Protection Authority or your local supervisory authority.

9. Security

Connections to our server are encrypted (HTTPS). The admin panel is protected by a strong password, which itself is never stored; every admin action is audited, and the panel shows no email or IP address.

10. Changes

We update the date on this page when the policy changes, and announce important changes (such as a new kind of data) in the game.

11. Contact

destek@playsimit.com · ElliSekiz LLC, ⟨address⟩