Cubik! — Privacy Policy

Effective date: 2026-10-13 · Replaces the version dated 2026-09-07

Türkiye'deki kullanıcılar için Türkçe KVKK Aydınlatma Metni: cubik-privacy.vercel.app/kvkk
Bu politikanın Türkçesi: cubik-privacy.vercel.app/tr

Overview

This Privacy Policy describes how the Cubik! application ("the App") handles information. The App is a 3D cube puzzle game published by an individual developer. Data controller: Kubilay Yılmaz, an individual developer resident in Türkiye (contact: see Contact).

In short: the App has no accounts and your game data stays on your device. The game works fully offline. Data leaves your device only to Google: for ads (Google AdMob), for in-app purchases and ratings (Google Play), and for a feedback message when you choose to send one (Google Firebase, with a Google Play integrity check).

Data, Recipients and Purposes

All data that leaves your device is collected by automated means: by the Google Mobile Ads SDK and Google Play Billing built into the App, and by the App's feedback form when you submit it, including the integrity check described under "Feedback". Its recipients are Google LLC (USA) and its affiliates, so sending it to them is a transfer of personal data abroad, outside Türkiye.

On your device

Data: Solve statistics (times, move counts, personal bests, daily streak); settings (language, sound, music, cube size); your in-game wallet and unlocked items (Gold, Diamonds, cube looks, stages, the "Remove Ads" entitlement) plus the Google Play order identifiers of completed Diamond-pack purchases; your ad-consent choice and when you made it, where one applies.
Recipient: None — stored only in the App's private storage on your device. Depending on your device settings, Android may include it in your Google device backup, which is governed by Google's terms.
Kept: Until you uninstall the App or clear its storage. We keep no copy.

Ads (Google AdMob)

Data: Advertising ID; IP address and an approximate (country or region) location inferred from it; general device information (model, OS version, language, screen size); ad interactions (shown, clicked, completed); diagnostics; on newer Android versions, Privacy Sandbox signals (Topics, Attribution) where enabled. The SDK may also store and read identifiers on your device.
Recipient: Google, which also acts as a controller of this data (Google Privacy Policy; how Google uses information from apps that use its services).
Purpose: Show and measure ads, limit how often an ad repeats, prevent ad fraud and, as described under "Advertising and Your Choices", personalise ads.
Legal basis: Where a Google consent message applies (for example in the EEA and the UK): your choice in that message (consent). Where no such message applies, including Türkiye: personalised ads only with your explicit consent given in the App's own consent screen (KVKK Art. 5(1); GDPR Art. 6(1)(a)); showing and measuring non-personalised ads, limiting repetition and preventing fraud rely on our legitimate interest in funding a free app (KVKK Art. 5(2)(f)).
Kept: Under Google's own retention policies; we cannot access, export or delete it.

In-app purchases (Google Play Billing)

Data: Purchase receipt (order and purchase identifiers, purchase time) and the product identifier. The App never receives your payment card, billing address or Google account details.
Recipient: Google Play, which acts as a controller of payment data, under the Google Privacy Policy.
Purpose: Deliver what you bought, never grant a purchase twice, and re-check ownership against your Google Play purchase records when the App starts or resumes.
Legal basis: Performing the purchase contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
Kept: The entitlement and order identifiers stay on your device (see above); Google Play keeps its records under its own policies.

Feedback (Google Firebase) — from app version 1.1.0 (16)

Data: Available from app version 1.1.0 (16), shown at the bottom of Settings, and only if you use Settings → Send feedback: the message you type (up to 2,000 characters), the App's version and build number, and the App's display language. The message itself carries no name, e-mail address, device model, Android version, Advertising ID or other identifier. Like any internet request, the connection gives Google your IP address and standard technical headers; we do not store them. Please do not include personal information in your message. When you tap Send, the App first asks Google (Google Play Integrity API via Firebase App Check) to confirm that the request comes from an unmodified copy of Cubik! installed from Google Play. For this check, Google Play services sends Google technical data about the App and your device (package name, version and signing certificate, the Google Play licence status of signed-in accounts, a device attestation token and key-attestation certificate, device name, brand and model, Android version, SDK versions and the installing store); the feedback store receives only a short-lived pass token, which is not stored with your message.
Recipient: Google Cloud Firestore, stored in a European location (eur3); Google processes it on our behalf under the Google Cloud Data Processing Addendum. Google is a US company, so the message may be accessible from outside Türkiye and the EEA.
Purpose: Understand problems and improve the App; the integrity check protects the feedback store from abuse.
Legal basis: Our legitimate interest in maintaining and improving the App and in protecting it from abuse (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). The integrity check runs under the Google Play terms.
Kept: About 12 months: messages older than 12 months are deleted at least once a month.

Rating and sharing

Data: None sent to us. After you have solved a few cubes the App may ask Google Play to show its standard rating card; Google decides whether it appears, and the App never learns whether or how you rated it. The "Rate this app" and "Share this app" rows only open Google Play or your device's share sheet. No reward is ever offered for a rating.

Advertising and Your Choices

The App shows interstitial ads between games and optional rewarded ads that you choose to watch for a bonus or a hint. Google (AdMob) may collect information about your activity across different apps and websites over time when you use the App.

Where a Google consent message applies to you (for example in the EEA and the UK), it is shown before any ad is requested, and Google serves ads according to your choice; if you decline, Google serves only non-personalised or limited ads. You can change your choice later in the App under Settings → Change consent preferences (shown wherever a consent choice applies) or in Google's My Ad Center.
Where a US-state privacy message applies to you, you can opt out of the "sale" or "sharing" of your data at any time under Settings → Change consent preferences.
Where no such message applies — including Türkiye — the App asks you in its own screen whether Google may personalise ads. Until you say yes, and if you say no, the App requests only non-personalised ads; Google still uses data to show and measure them, limit repetition and prevent fraud. If you close the screen without answering, the App treats it as no for now and asks again the next time it starts. You can change your choice at any time under Settings → Change consent preferences.
Advertising ID: you can reset or delete it at any time in Android Settings → Google → Ads (or Settings → Privacy → Ads), which limits personalised ads.
Do Not Track: the App does not respond to browser "Do Not Track" signals; use the Advertising ID setting and the consent choices above instead.
Remove Ads: buying it stops the interstitial ads between games. Rewarded ads stay available and are shown only when you choose to watch one; the ads SDK stays initialised to pre-load them, so it may still send the data listed above.
Selling data: we do not sell your personal data for money. Google may use your Advertising ID for personalised ads based on activity across apps, which some US state privacy laws call "selling" or "sharing"; where those laws apply, you can opt out as described above.

What the App Does Not Do

No account, login or registration.
No server logic operated by us (feedback is only stored); no analytics or crash-reporting SDK other than the diagnostics built into the Google SDKs named above.
No access to contacts, camera, microphone, photos, files or precise location; the App never requests location permission.

Security

Everything the App sends travels over encrypted HTTPS (TLS) connections. The feedback store accepts new messages only: its database rules reject every read, change or delete request, and only the developer, signed in to the developer's Google account, can view or delete messages.

Your Rights and Requests

If you are in Türkiye, you have the rights listed in Article 11 of Law No. 6698 (KVKK), including to learn whether your data is processed, to learn who receives it in Türkiye or abroad, to have it corrected or deleted, and to claim compensation. Under the EU and UK GDPR and other laws you may have similar rights, including to complain to your data-protection authority. Because the App keeps almost no server-side data, you exercise most of them directly:

On-device data: uninstall the App or clear its storage.
Advertising data: the choices under "Advertising and Your Choices".
Purchase data: your Google Play account.
Feedback: because it carries no identifier, e-mail us (see Contact) with the approximate date and part of the text; we will find and delete it.

Send any other request by e-mail (see Contact). We conclude requests free of charge as soon as possible and within 30 days at the latest.

Children

The App is intended for users aged 13 and over and is not directed at children. It does not participate in Google Play's Designed for Families programme. If you believe a child under 13 has used the App and that data was collected, contact us and we will help you address it with the relevant Google services, and delete any feedback they sent.

Changes to This Policy

If the App starts collecting new categories of data, uses data for new purposes, or sends it to new recipients or abroad, we will update this page and its effective date before that change takes effect and mention it in the Google Play release notes.

Contact

Questions and requests about this Privacy Policy: purplepixxelstudios@gmail.com