This policy explains what information Blob Park: Color Match (the “Game”) collects, why, who receives it and the choices you have. It applies to the Game on iOS, iPadOS and Android and to this website.
- You can play without creating an account or giving us your name or email.
- We use Google Firebase to save your progress in the cloud, measure how the Game is played and fix crashes.
- We show ads through Google AdMob. Where the law requires it, we ask for your consent first, and you can change your choice at any time.
- Payments are handled by Apple or Google. We never see your card details.
- We do not sell your personal information.
- You can ask us to delete your data at any time: see Delete account.
Contents
- Who we are
- What we collect
- How we use it and our legal bases
- Ads and your consent choices
- Who receives information
- International transfers
- How long we keep it
- Your rights
- Children
- Security
- Changes to this policy
- Contact us
1. Who we are
The Game is published by MAGIC BYTE YAZILIM TİCARET LİMİTED ŞİRKETİ (“MagicByte”, “we”, “us”), Istanbul, Türkiye. We are the data controller (veri sorumlusu under Turkish Law No. 6698 on the Protection of Personal Data, “KVKK”) for the personal data described here. You can reach us at the address in Contact us.
2. What we collect
The Game does not ask for your name, email, phone number, contacts, photos, location or microphone. It works without an account. What it does process:
| Category | What it includes | Why |
|---|---|---|
| Game data | Your progress, levels, stars, pearls and other virtual items, park buildings, settings, and a random Player ID created on your device. The Player ID is shown as an 8-character code in the Game’s Settings. | To run the Game and keep your progress. |
| Cloud save | A copy of your game data, the save’s revision and time, and your device model, stored in Google Cloud Firestore under your sign-in account. | So your progress survives a reinstall or a new phone, and so you can choose between a phone save and the cloud save. |
| Sign-in identifiers | At first launch the Game creates an anonymous Firebase Authentication account (a random user ID). Only if you choose “Link account with Google” or “Link account with Apple” in Settings, we also receive that account’s user ID, display name and email address (Apple may give a private relay address). | To protect your cloud save so only you can read it, and to restore it on another device. |
| Usage and device data | Game events (for example level started or finished, boosters used, ads watched, purchases made, session length), your Player ID, simple profile properties (player level, whether you have made a purchase), app version, device model, operating system, language, country or region derived from your IP address, and the Firebase app instance ID. | To understand how the Game is played, balance difficulty, run experiments and improve the Game. |
| Crash reports | Crash and error details (stack traces, device state, app version), a Crashlytics installation ID and your Player ID. | To find and fix bugs. |
| Remote settings | The Firebase installation ID, app version and country, used to fetch game settings and test variants. | To tune the Game without an update and to test changes fairly. |
| Advertising data | Your device’s advertising ID (on Android; on iOS the Game does not ask for tracking permission, so it does not access the IDFA), IP address, device and app information, ads shown and clicked, and your consent choices. | To show ads, limit how often you see them, measure them and prevent ad fraud. |
| Purchase data | The item bought, price, currency, time, store transaction ID and receipt, linked to your Player ID. Apple or Google process the payment; we never receive card or bank details. | To deliver and restore purchases, prevent fraud and keep financial records. |
| Support messages | Your email address and anything you send us, such as your Player ID or screenshots. | To answer you and handle your requests. |
Notifications. Game reminders (for example “your lives are full”) are local notifications scheduled on your device. No notification data is sent to us. iOS asks for your permission first, and you can turn them off in your device settings at any time.
3. How we use it and our legal bases
We use the information above only for the purposes listed. Where the GDPR, UK GDPR or KVKK applies, we rely on these legal bases:
- Performance of our contract with you (KVKK Art. 5(2)(c)): running the Game, saving and restoring your progress, delivering purchases and answering support requests.
- Legitimate interests (KVKK Art. 5(2)(f)): keeping the Game secure and stable, fixing crashes, preventing cheating and fraud, and understanding and improving the Game. We balance these against your rights, and you can object at any time.
- Consent (KVKK Art. 5(1)): personalised advertising and, in the EEA, UK and Switzerland, the use of device storage and identifiers for ads and analytics. You can withdraw consent at any time without affecting earlier processing.
- Legal obligation (KVKK Art. 5(2)(ç)): keeping records required by tax and accounting law and answering lawful requests from authorities.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Difficulty tuning and offers inside the Game are based on how you play, but they never affect your legal rights.
4. Ads and your consent choices
- The Game shows ads through Google AdMob: optional rewarded videos you choose to watch for a bonus, and occasional full-screen ads between levels. Ads are limited to content suitable for general audiences.
- EEA, UK and Switzerland: on first launch the Game shows Google’s consent form (a Google-certified consent management platform under the IAB Transparency & Consent Framework). We only request ads after you answer. If you do not consent to personalised ads, you see non-personalised ads.
- US states with privacy laws: where required, the same form lets you opt out of the “sale” or “sharing” of personal information for targeted advertising.
- Changing your mind: open Settings → Privacy options in the Game. This row appears wherever a choice is required by law.
- Analytics follow your choice: the Game passes your consent choices to Google Analytics for Firebase (Google Consent Mode), so analytics and ad storage are limited when you decline.
- Device settings: on Android you can reset or delete your advertising ID in Settings → Privacy → Ads (or Settings → Google → Ads). On iOS the Game does not request tracking permission.
- Buying No Ads (or any purchase) turns off the full-screen ads between levels. Rewarded videos stay available if you want their rewards.
Google’s use of data in its ad products is described at policies.google.com/technologies/partner-sites.
5. Who receives information
We share information only with the following, each for the purposes above:
- Google (Google LLC and Google Ireland Ltd.): Firebase Analytics, Crashlytics, Remote Config, Cloud Firestore, Firebase Authentication and Google Sign-In, AdMob, and Google Play for payments.
- Apple (Apple Inc. and Apple Distribution International): App Store payments and Sign in with Apple.
- RevenueCat, Inc.: validates and records in-app purchases so they can be delivered and restored.
- Service providers that help us run the Game and this website, such as hosting and email, under contracts that limit their use of the data.
- Authorities when the law requires it, or to protect our rights, our players or the public.
- A buyer or successor if our business or the Game is sold or merged, under this policy.
We do not sell your personal information for money. Under some US state laws, letting ad partners use identifiers to show personalised ads can count as “sharing” or a “sale”; you can opt out as described in section 4. We have no actual knowledge of selling or sharing data of anyone under 16.
6. International transfers
Your cloud save is stored in Google Cloud data centres in Europe (Firestore multi-region eur3). Google, Apple and RevenueCat may also process data in the United States and other countries. When personal data leaves the EEA, the UK, Switzerland or Türkiye, we rely on appropriate safeguards: the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework where the recipient is certified, and, for transfers from Türkiye, the standard contracts and other mechanisms set out in KVKK Article 9. You can ask us for more information about these safeguards.
7. How long we keep it
- Game data on your device: until you uninstall the Game or clear its data.
- Cloud save and sign-in account: while you use the Game. We delete them when you ask us (see Delete account).
- Analytics data: event-level data is kept for at most 14 months, then only aggregated reports remain.
- Crash reports: up to 90 days.
- Purchase records: as long as needed to deliver and restore purchases, and longer only where tax or accounting law requires it.
- Advertising data: held by Google under its own retention policies.
- Support emails: until your request is resolved, then for up to 24 months in case you contact us again, unless you ask us to delete them sooner.
8. Your rights
Depending on where you live, you have some or all of these rights:
- Access the personal data we hold about you and get a copy, including in a portable format.
- Correct inaccurate data.
- Delete your data (see Delete account).
- Restrict or object to processing, including processing based on legitimate interests.
- Withdraw consent at any time (Settings → Privacy options).
- Opt out of the sale or sharing of personal information and of targeted advertising (US states).
- Not be discriminated against for using these rights.
- Türkiye (KVKK Article 11): learn whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to in Türkiye or abroad, request correction or deletion and notification of these to third parties, object to a result against you arising from automated analysis, and claim compensation for damage caused by unlawful processing.
To use a right, email us at the address below with your Player ID (Game → Settings). We may ask for more information to confirm the data is yours. We answer within one month (30 days under KVKK; 45 days under US state laws, extendable where the law allows). You may use an authorised agent where your law allows it.
You also have the right to complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK, kvkk.gov.tr), in the EEA the authority of your country, and in the UK the Information Commissioner’s Office.
9. Children
The Game is designed for a general audience aged 13 and over. It is not directed to children under 13, and we do not knowingly collect personal information from them. Ads in the Game are limited to content suitable for general audiences. If you believe a child under 13 (or under the age of digital consent in your country) has given us personal information, contact us and we will delete it.
10. Security
Data travels to our providers over encrypted connections (TLS). Your cloud save can only be read or changed by your own signed-in account; our database rules block everyone else. We limit internal access to people who need it. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires it.
11. Changes to this policy
We will update this page when our practices change and change the effective date above. If a change is significant, we will also tell you in the Game before it takes effect.
12. Contact us
MAGIC BYTE YAZILIM TİCARET LİMİTED ŞİRKETİ
Istanbul, Türkiye
Email: [email protected]