Bombom Mobil Privacy Policy

An account is created in one of two ways:

• Guest account: The app generates a random device ID and a random guest key on your device. Our servers store the device ID; for the guest key, only its SHA-256 hash is stored.
• Email and password: Your email address is stored. Your password is stored only as an argon2id hash; the plain password is not stored.

For the session key as well, only its hash is stored.

The following data, created as you play, is stored with your account:

• Nickname
• Character and appearance
• Level
• Inventory and in-game currency
• Match and adventure progress
• Friends list
• Guild membership
• Social game records such as marriage
• Rankings
• In-game mail

Messages you write in chat are delivered to other players. Messages pass through a profanity filter. Chat records may be kept to prevent abuse and to enforce the game rules.

When you connect to the game, the following technical data is processed:

• IP address
• Connection times
• Platform type (iOS, Android or web)
• App version
• Server logs

If the app crashes, a crash report is sent to our servers. The report contains the error trace and technical information such as the device model and the operating system version.

Bombom Mobil does not collect the following:

• Location
• Contacts
• Photos, camera and microphone
• Advertising ID

The app contains no ads. No third-party advertising or analytics SDK is used.

There are currently no in-app purchases. If they are added in the future, this policy will be updated and payments will be processed through Apple and Google.

We use the data for the following purposes:

• Running your account and the game
• Providing multiplayer matchmaking and chat
• Preventing cheating and abuse
• Debugging and keeping the game stable
• Providing support

We process this data to provide the game to you (performance of a contract), for our legitimate interest in the security and stability of the game, and to comply with our legal obligations.

We do not sell your data. Data is shared with others only in the following cases:

• Infrastructure service providers: Cloudflare (network security and content delivery; it processes your IP address) and the hosting provider that hosts our servers.
• Competent authorities: When there is a legal obligation.
• Other players: They can see your nickname, your character, your ranking and your chat messages.

Because of service providers such as Cloudflare, your data may be processed outside Türkiye.

Your data is kept for as long as your account exists. After a deletion request, the data is deleted within a reasonable time, subject to legal retention obligations. Server logs are kept for a limited time.

You can ask for your account and your data to be deleted. You can send your request to [email protected].

An in-app account deletion option will be added; when it is, it will be stated on this page.

A guest account is tied to the device ID and the guest key on your device.

Under the Personal Data Protection Law (KVKK) in Türkiye and the General Data Protection Regulation (GDPR) in the European Union, you have the following rights:

• To access your data
• To have your data corrected
• To have your data deleted
• To object to the processing of your data
• To data portability
• To lodge a complaint: with the Personal Data Protection Board in Türkiye, or with your local data protection authority in the European Union

To exercise these rights, you can write to [email protected].

Bombom Mobil is not directed at children under 13. We do not knowingly collect data from children under 13; if we notice that we have collected such data, we delete it.

Data is encrypted in transit (HTTPS and WSS). Passwords are stored as hashes. Even so, no method is completely secure.

We may update this policy. When we do, we change the last updated date at the top of this page.

Data controller

UTD Games

Email

[email protected]