Privacy Policy

Data controller

The data controller is Muhtar Ağcabay (an individual), who publishes the Tavla app as Fernwood Studio. Contact: fernwood.studio.contact@gmail.com. This policy explains which personal data the Tavla app processes, why and how, under the Turkish Personal Data Protection Law No. 6698 ("KVKK").

Data we process

• Account: a random account ID; your Google account’s email address if you connect Google.

• Profile: display name, chosen avatar, uploaded profile photo, country and (in Turkey) province.

• Game: your online matches (moves, dice, score, date), rating, badges and statistics.

• Credits and store: credit balance and history, cosmetics you bought and equipped.

• In-app purchases: Google Play order number, the product bought and the date. Your card or payment details never reach us.

• Social: friendships and requests, players you blocked, reports you made and reports about you.

• Device: a notification token if you allow notifications; language preference.

• Ads: to show ads, Google AdMob processes your device’s advertising ID (Android Advertising ID), IP address, device and app information and your interactions with ads (impressions, clicks). If you watch a rewarded ad, your account ID is given to Google so it can tell us which account to credit, and Google sends it back when it confirms the view. The counter that decides how often interstitial ads appear is kept only on your device. Your choice on explicit consent for personalized ads is stored in your account with its date and the version of the text you were shown.

• Usage and error data: if usage data sharing is on, which features are used (e.g. opening the app, starting a bot match and its result, opening the store), a random installation ID unique to your device, app version and platform; if the app hits an error, the error message and technical details. Earning and spending credits, equipping items and account deletion are counted without any ID. This data is not linked to your account, email or name.

Moves of offline games and your settings stay on your device and are not sent to the server.

Purposes and legal grounds

• Creating your account and providing online play, matchmaking, rating, friends and the store (performance of a contract).

• Preventing cheating, harassment and inappropriate content: automatic photo moderation, reports and blocking (legitimate interest).

• Sending your-turn and game invite notifications (only if you allow them; you can turn them off in Settings at any time).

• Showing ads to keep the app free and granting credits for rewarded ads (performance of a contract and legitimate interest). Interest-based (personalized) ads, and transferring your advertising ID to Google for them, happen only with your explicit consent: the app asks on first launch; if you decline you can still use the whole game and only see non-personalized ads. You can change your choice or withdraw consent any time under Settings > Personalized ads. For non-personalized ads, Google may still process device information to limit ad frequency, prevent fraudulent clicks and measure impressions. In the European Economic Area, the UK and Switzerland, Google’s consent form is shown at launch instead and can be changed under Settings > Ad privacy options. You can reset or delete your advertising ID in your device settings (Google > Ads); you will then see non-personalized ads. If you buy "Remove ads", ads between matches are no longer shown; rewarded ads stay available if you want them.

• Improving the app and fixing bugs: anonymous usage statistics and error reports (legitimate interest). You can turn off usage data sharing at any time under Settings > Share usage data; while it is off, only error reports are sent, without the installation ID.

• Meeting legal obligations.

Where data is stored and sharing

Data is stored on a server (VDS) rented by the data controller; photo moderation, usage data and error reports are on this server too. No third-party analytics or error tracking service is used. Data is not sold. Your profile, matches and account details are not shared for advertising; only the data listed below goes to Google for ads.

Limited data is transferred to providers abroad only for these services:

• Google sign-in: authentication is done by Google.

• Notifications: your notification token and the notification content (e.g. “Your turn”) are delivered through Expo and Google Firebase Cloud Messaging.

• In-app purchases: payment is processed by Google Play. To verify a purchase, Google receives a one-way hash of your account ID, never the ID itself.

• Ads: ads are served by Google AdMob. Your advertising ID, IP address, device information and ad interactions are processed under Google’s own privacy policy (https://policies.google.com/technologies/ads); for rewarded ads Google also receives your account ID.

Your display name, avatar, photo, country, rating and featured badges are visible to other players in matches and on your profile.

Retention

Data is kept while your account exists. When you delete your account, your data is deleted immediately; copies in server backups are permanently deleted within 30 days as backups rotate. Usage data and error reports are not linked to an account and are deleted automatically after 90 days.

Account deletion

You can delete your account in the app under Settings > Profile > Delete account. If you cannot access the app, email fernwood.studio.contact@gmail.com with your display name and (if any) your Google email address; the request is completed within 30 days.

Deleted: your profile (display name, avatar, photo, country, province), credit balance and history, store purchases, badges, friendships, blocks, reports and notification registrations.

Kept: matches you played stay in your opponents’ match history without your name or any link to your account. Usage data and error reports, which are not linked to an account, are deleted within 90 days. Remaining credits and purchases are not refunded. Records of in-app purchases (order number, product, date) are kept without any link to your account, so refunds can be handled.

Your rights

You can ask whether your data is processed, request information about it, learn its purpose and who it is shared with, request correction or deletion, object to an adverse result of automated analysis and claim compensation. Send requests to fernwood.studio.contact@gmail.com; they are answered within 30 days. You can also complain to the Turkish Personal Data Protection Authority.

Children

The app is not designed for children under 13 and does not knowingly process their data; such accounts are deleted when discovered. Users aged 13–18 should use the app with the permission of a parent or guardian.

Changes

If this policy changes, the current version is published in the app and on the web page; the last updated date is shown at the top.