Privacy Policy

Last updated: 2026-10-24

Draft. Needs legal review; highlighted fields must be filled in. Remove this box before publishing.

This policy explains what data the Paintory app ("the game") processes. The game is published by GAME Market Anonim Şirketi, Görükle Mahallesi, Üniversite-1 Caddesi, No:933, Bursa Uludağ Üniversitesi Görükle Kampüsü, 16285 Nilüfer / Bursa ("we", "us"), which is the data controller.

The short version

Data stored on your device

Game progress, unlocked items, coin balance, settings and a signature that protects the save file from tampering. This data never leaves your device unless your phone's own backup (iCloud, Android backup) copies it. Deleting the game deletes it.

Data collected by third-party services

ProviderWhat it doesData it processes
Google AdMob and the User Messaging Platform (Google Ireland / Google LLC)Optional rewarded videos and other ads; consent formAdvertising ID (IDFA/GAID, on iOS only after you allow tracking), IP address and approximate location derived from it, device and app information, ad interactions, consent choices
Ad mediation partners [final list, e.g. AppLovin, Unity Ads, Meta Audience Network, ironSource]Fill ad requests through AdMobSame categories as AdMob
Google Firebase Analytics, Crashlytics, Remote Config (Google)Usage statistics, crash reports, game tuning valuesApp instance ID, gameplay events (for example match started/finished), device model, OS version, crash traces
RevenueCat, Inc.Verifying and restoring in-app purchasesAnonymous app user ID, purchase receipts and history
Apple App Store / Google PlayPayments and refunds (they are the seller of record)Handled under Apple's and Google's own privacy policies; we never see your card details

Why we process it (purposes and legal bases)

Your choices

International transfers

The providers above may process data outside your country, including in the United States. They rely on the safeguards available to them (for example EU Standard Contractual Clauses or the EU-US Data Privacy Framework). For users in Türkiye, see the KVKK information notice (Turkish).

How long data is kept

Analytics data: up to [14] months. Crash reports: up to 90 days. Purchase records: as long as needed to restore purchases and as required by tax law. Advertising data: according to each ad provider's own policy.

Children

The game is not directed at children under 13. If a player tells us in the age question that they are under 13 (or under the age of digital consent in their country), we show only non-personalised ads, do not ask for tracking permission and keep analytics to the minimum.

Your rights

Depending on where you live (GDPR, UK GDPR, KVKK, US state laws) you can ask for access, correction, deletion, restriction or portability, and you can object or withdraw consent. Because we have no account system we usually cannot link data to you; see Your data and how to delete it. You can also complain to your data protection authority.

Changes

We will update this page and the date above when the policy changes, and tell you in the game if the change is significant.

Contact

GAME Market Anonim Şirketi, Görükle Mahallesi, Üniversite-1 Caddesi, No:933, Bursa Uludağ Üniversitesi Görükle Kampüsü, 16285 Nilüfer / Bursa. Email: [email protected]