Short summary: The Game processes limited technical data to protect your progress, deliver purchases securely, resolve errors and, where appropriate, display advertising. We do not receive your Google password or payment card details.
1. Data controller and scope
Dolmuş Kuyruğu: Yolcu Sırala (the “Game”)
is offered on Android by MEP TASARIM under the package identifier
com.nesli.dolmuskuyrugu.
This policy covers the Game, support channels and the identity, cloud save, purchase, diagnostics and advertising services connected to the Game. Your Google account and Google Play profile are separately processed by Google under its own terms.
2. Categories of data that may be processed
Account and identity data
- Google Play Games sign-in verification result and a Unity Player ID specific to the Game;
- random identifiers generated for the local installation/profile;
- session, save version, synchronization and integrity information.
The Game does not receive your Google password, two-factor authentication code or contact list.
Game progress and preferences
- completed levels, attempts and game results;
- coins, diamonds, energy, boosters, rewards and virtual items;
- minibus, cosmetic and collection ownership;
- daily login, wheel, reward and tutorial progress;
- sound, music, vibration and notification preferences;
- ad-free use and purchase-delivery status.
This information is stored on the device and, when cloud backup is enabled, may be stored through Unity Cloud Save in association with your Game account.
Purchase data
Purchases are made through Google Play Billing. Product identifier, transaction/purchase token, order status, delivered virtual content, date and refund/cancellation status may be processed for verification, one-time delivery and fraud prevention. Purchase tokens may be hashed for security purposes.
Payment card number, card security code or bank account information is not sent to MEP TASARIM; payment is processed by Google Play.
Analytics, crash and diagnostics data
When enabled in the relevant release environment, Firebase Analytics may process app version, session, device/operating-system information, approximate country/region-level information and non-personal game events such as level start/result. We do not add names, email addresses, telephone numbers, precise location or payment data to custom events.
When Firebase Crashlytics is enabled, crash stack traces, app and SDK version, device model, operating system, memory state, session/installation identifier and error time may be processed.
Advertising and consent data
The Game may display mandatory interstitial ads and rewarded ads that the player chooses to start. Banner and app-open ads are disabled in the initial release plan. AdMob and Google User Messaging Platform may process IP address, approximate location derived from IP, ad or app interactions, advertising/app-set identifier and diagnostics information for ad delivery, measurement, security and fraud prevention.
An advertising-preferences screen is provided where applicable. Limited or non-personalized advertising may be used when valid consent is not present. Advertising preferences may be managed again from within the app or the relevant device settings.
Notifications and support requests
The Game may request only local notification permission for daily login and wheel reminders; no remote-notification token is used. When you contact us, we may process your email address, message, voluntary attachments, device and app version, Player ID and other information necessary to resolve the issue.
3. Purposes and legal bases
Data may be processed for the following purposes:
- to operate the Game and save and restore progress from the cloud;
- to verify purchases, deliver them once and reconcile refunds;
- to prevent security incidents, misuse and fraud;
- to diagnose crashes and improve the Game;
- to deliver and measure consent-dependent advertising;
- to respond to support, access and deletion requests;
- to meet legal obligations and store requirements.
Processing is based on entering into or performing the service contract, legal obligations, the establishment, exercise or protection of rights, legitimate interests and, where necessary, explicit consent or advertising consent. Your rights under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) are reserved.
4. Service providers
We do not sell Game data. The following providers may process limited data for their services:
| Provider | Service | Main data |
|---|---|---|
| Unity Technologies | Authentication and Cloud Save | Player ID, IP, session and game save |
| Play Games, Play Billing and Developer API | Game identity, purchase and entitlement status | |
| Google / Firebase | Functions, Firestore, Analytics and Crashlytics | Pseudonymous identity, transaction ledger, usage and crash data |
| Google AdMob | Advertising and consent management | Advertising/device identifiers, IP, interaction and diagnostics |
| Web-hosting and email providers | Policy and support | Standard server logs, communications and request content |
Unity and Google may use global infrastructure, and data may be processed outside Türkiye. Providers’ contractual and technical safeguards and applicable transfer mechanisms are used.
5. Retention periods
| Data | Retention approach |
|---|---|
| Game save on the device | Until app data is cleared, the account is deleted or the app is uninstalled. |
| Unity account and Cloud Save | While the account is active; targeted for removal from active records within 30 days of a verified deletion request. |
| Purchase security ledger | For as long as required to prevent duplicate delivery and address refunds, fraud and legal obligations; deleted or anonymized when the purpose ends. |
| Firebase Analytics | When enabled in the release environment, the user/event-level retention target is 2 months; aggregated reports may be retained longer. |
| Firebase Crashlytics | Within the provider’s applicable service cycle, generally for up to 90 days. |
| Support and deletion requests | For 2 years after the request is closed; for as long as necessary if there is a legal dispute. |
| Advertising and consent records | For the period required by Google’s service settings and proof of consent/applicable legal basis. |
Deleted data may be removed from providers’ technical backups within their own secure deletion cycles. Access to limited records retained for legal obligations or fraud prevention is restricted, and those records are not used as an active game profile.
6. Data security
We use technical and organizational measures such as HTTPS/TLS transport, role-based access, environment separation, restricted service-account permissions, versioned and atomic saves, and idempotent purchase verification. No method can guarantee absolute security.
Do not send your Google password, verification code, payment-card details, service-account key or complete purchase token in a support request.
7. Your rights and choices
Under applicable law, you may have rights to access, correct or delete your data, restrict processing, object to processing and withdraw consent that you have given. You can send your request to info@meptasarim.com.
For account and progress deletion steps, use the Account and Data Deletion page. Your right to lodge a complaint with a data-protection authority is reserved under applicable law.
8. Account and data deletion
The two-step deletion flow within the Game aims to delete game saves in Unity Cloud Save, the Unity Authentication player account and accessible local saves. This process does not delete your Google account, Google Play Games profile or Google’s purchase history.
If you cannot access the Game, you can create an email request through the web deletion page without signing in.
9. Children and age policy
The Game is designed for users aged 13 and over and is not specifically directed to children. We do not intend to knowingly collect personal data from anyone under 13. If you believe data relating to a child has been processed without appropriate permission, notify us; we will review the request and begin the appropriate deletion process.
If a higher age threshold applies to digital services or purchases where you live, permission from a parent or legal guardian is required.
10. Changes and contact
When this policy changes, its last-updated date and version are revised. In-app notice or renewed consent may be used for material changes.
For questions, email info@meptasarim.com or visit the Support page.
Main third-party notices: Unity Privacy Policy and Google Privacy Policy.