Privacy Policy

Last updated: 2026-10-27

This policy explains what personal data [Company name] ("we") processes when you use VOX Play, why, who receives it, and your rights. It is also our notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU/UK GDPR. Last updated 2026-10-27. The older policies of the studio's earlier store apps stay available at /privacy until those apps are retired.

1. Who is responsible

The data controller is [Company name], [registered address]. Contact for privacy and data requests: [email protected]. If we have a representative in the EU or UK, their details will be published here before we target those markets specifically.

2. Audience

VOX Play is for ages 16 and over. We do not knowingly collect data from children under 16. We ask for your birth year only when you first use a feature that needs it (messages, purchases, publishing); if the year shows you are under 16 those features stay closed, and if we learn an account belongs to a child we delete it.

3. What we collect

Account data: handle, display name, sign-in identifiers from Apple, Google, Game Center, Play Games or Steam (an identifier, and an e-mail only if the provider gives it), country and language, birth year, consent records.
Profile: Hero choice, optional profile photo (reviewed before it shows), followers, following, blocks.
Play data: games played, play time, VOX skor, achievements, leaderboard entries, cloud saves, items, entitlements, taste profile (genres liked, where you stopped, difficulty), reward and daily streak data.
Purchases: store receipts or Stripe payment references, amounts, Gem and Coin ledger. We never see or keep full card numbers.
Messages and reports: direct messages (only between mutual followers), reports you send or that are sent about you, moderation decisions.
Make Game: your prompts, the games and icons created, review results and costs.
Device and technical data: IP address, device type and operating system, app version, language, crash and error reports, push tokens, advertising identifiers where you allow them, security logs.
Support: what you write to us and our replies.

4. Why we use it and on what legal basis

To provide the service you asked for: account, games, saves, wallet, purchases, messages, Make Game (performance of a contract; KVKK art. 5/2-c).
To keep VOX Play safe and fair: moderation, fraud and cheat prevention, rate limits, bans, audit logs (legitimate interest; KVKK art. 5/2-f; legal obligation where a law requires it).
To meet legal duties: tax and accounting records, answering lawful requests and court orders (legal obligation; KVKK art. 5/2-ç).
To improve the product: aggregated analytics and crash reports (legitimate interest, or consent where the law or the store requires it).
To personalise recommendations in Discover and the honeycomb from your taste profile (legitimate interest; you can reset it in Settings).
To send notifications: service messages as part of the contract; marketing only with your consent, which you can withdraw in Settings.
To show rewarded ads: advertising identifiers and consent as required by the platform and the ad network (consent).

5. Who receives your data

We share data only as needed, with: Apple, Google and Valve (sign-in, payments, stores); Stripe (web payments and tax); hosting and network providers (Hetzner, Cloudflare); error tracking (our own GlitchTip installation); advertising providers (Google H5 Games Ads on the web, and the mediation network we use in apps, with their partners); AI providers (Anthropic and OpenAI) that process Make Game prompts, moderation checks and generated icons; e-mail and push providers; moderation reviewers; professional advisers; and authorities when the law requires. We do not sell your personal data.

Other players see your handle, display name, Hero or photo, skor, the games you made and your public profile if you choose to make it public. Games you play receive a game-specific player id and the data their capabilities allow; they never receive your e-mail or sign-in identifiers.

6. Transfers abroad

Some providers are outside Turkey and the EU/UK (for example in the United States). We use the safeguards the law provides: adequacy decisions, standard contractual clauses (for Turkey, the standard contract notified to the Personal Data Protection Authority), and similar tools. You can ask us for a copy of the safeguards at [email protected].

7. How long we keep it

Account and profile: until you delete the account (deletion finishes within 30 days; backups age out within 90 days).
Purchase and ledger records: 10 years (tax and accounting law).
Direct messages: 90 days after they are sent, unless they are part of a report.
Reports and moderation records: 180 days, longer for serious cases where the law requires.
Crash and error data: 90 days. Security logs: 12 months. Analytics: aggregated, then 14 months.

8. Your rights

Under KVKK art. 11 and the GDPR you can ask whether we process your data and for a copy, ask us to correct it, delete it, restrict or object to its processing, withdraw consent at any time, and receive your data in a portable format. You can also ask for decisions made only by automated means to be reviewed by a person, and complain to the Turkish Personal Data Protection Board or to your own data protection authority. Write to [email protected]; we answer within 30 days. Deleting your account in Settings (or at /delete-account) erases your data except what we must keep by law.

California and other US state residents have the same practical rights to know, delete and correct; we do not sell or share personal data for cross-context behavioural advertising of anyone known to be under 16.

9. Security and breaches

We protect data with encryption in transit, access controls, audit logs and separation of duties. If a breach puts your rights at risk we tell the authority within 72 hours of learning of it and tell you without undue delay.

10. Cookies, SDKs and tracking

See the Cookie Policy. The apps use SDKs for payments, sign-in, ads and crash reports, which are listed in the store privacy labels.

11. Changes

If we change this policy in a way that matters we tell you in the app or by e-mail before it applies. The date above shows the current version.